🇷🇺
DZBOT
2026-06-03 05:55:25
(1 week ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
2026-05-30 01:11:07
(1 week ago)
Web app attack and vulnerability scan detected from IIS logs
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
HeliJP
2026-03-17 09:45:15
(2 months ago)
2026-03-17T08:57:34Z - Recognized attacks\bad behavior from IP address 185.236.20.156 on port 443\80 ...
show more
2026-03-17T08:57:34Z - Recognized attacks\bad behavior from IP address 185.236.20.156 on port 443\80 (3 daily hits): client denied by server configuration
show less
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
2026-02-17 18:47:05
(3 months ago)
wordpress-trap
Web App Attack
🇦🇺
MAGIC
2026-01-17 01:04:49
(4 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇦🇺
MAGIC
2025-12-24 05:15:22
(5 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
2025-12-22 23:44:28
(5 months ago)
wordpress-trap
Web App Attack
2025-12-21 14:27:02
(5 months ago)
Malicious activity detected
Hacking
Web App Attack
2025-12-03 03:45:13
(6 months ago)
wordpress-trap
Web App Attack
🇨🇭
rt
2025-11-14 08:06:40
(6 months ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-09 07:31:52
(7 months ago)
(mod_security) mod_security (id:210740) triggered by 185.236.20.156 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 185.236.20.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 09 02:31:47.455385 2025] [security2:error] [pid 19937:tid 19937] [client 185.236.20.156:59969] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||drwolberg.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "drwolberg.com"] [uri "/wp-content/uploads/2021/02/Lipoescultura.pptx_page-0002.jpg"] [unique_id "aRBDYyVnUNAQ-7WOd5yxKQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-08 19:55:09
(7 months ago)
(mod_security) mod_security (id:210740) triggered by 185.236.20.156 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 185.236.20.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 08 14:55:04.719491 2025] [security2:error] [pid 2063994:tid 2063994] [client 185.236.20.156:39053] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.fiasdesigns.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.fiasdesigns.com"] [uri "/wp-content/uploads/2016-12-05-RJ-Holiday-Market-276x276.jpg"] [unique_id "aQ-gGDaucSLbvIPc0WiJaAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-08 17:08:40
(7 months ago)
(mod_security) mod_security (id:210740) triggered by 185.236.20.156 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 185.236.20.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 08 12:08:34.278950 2025] [security2:error] [pid 6884:tid 6884] [client 185.236.20.156:34569] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||scoutinsignia.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "scoutinsignia.com"] [uri "/certs/dam.jpg"] [unique_id "aQ95EncVi_i8uPlGSPT4VAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-08 16:40:50
(7 months ago)
(mod_security) mod_security (id:210740) triggered by 185.236.20.156 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 185.236.20.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 08 11:40:47.611588 2025] [security2:error] [pid 29045:tid 29045] [client 185.236.20.156:60979] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.verdeprofundo.net|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.verdeprofundo.net"] [uri "/wp-content/uploads/2009/10/Faro.jpg"] [unique_id "aQ9yj83nmaUEEGw_ynSfeAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-08 08:17:51
(7 months ago)
(mod_security) mod_security (id:210740) triggered by 185.236.20.156 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 185.236.20.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 08 03:17:45.883746 2025] [security2:error] [pid 15378:tid 15413] [client 185.236.20.156:36845] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||pref-realestate.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "pref-realestate.com"] [uri "/wp-content/uploads/2021/04/TH-LivingCoffeeFIreplace-1024x658.jpg"] [unique_id "aQ78qfrM5SCeyJy7VZTiIQAAAUk"]
show less
Brute-Force
Bad Web Bot
Web App Attack