2026-05-26 23:11:13
(4 months ago)
Web app attack and vulnerability scan detected from IIS logs
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2026-03-05 00:39:16
(6 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇦🇺
MAGIC
2026-02-05 01:16:09
(7 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
2026-01-11 23:15:34
(8 months ago)
Web server attack
Hacking
Web App Attack
🇮🇹
Progetto1
2026-01-02 08:55:02
(8 months ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇿
mirasayon
2026-01-01 15:18:00
(8 months ago)
does not follow robots.txt
Bad Web Bot
🇩🇪
FeG Deutschland
2025-12-22 19:21:34
(9 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
2025-12-09 07:52:18
(9 months ago)
wordpress-trap
Web App Attack
🇨🇭
rt
2025-11-14 14:07:52
(10 months ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-09 02:48:56
(10 months ago)
(mod_security) mod_security (id:210740) triggered by 45.197.133.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 45.197.133.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 08 21:48:49.580721 2025] [security2:error] [pid 10975:tid 10975] [client 45.197.133.100:33435] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.computerservicesofflorida.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.computerservicesofflorida.com"] [uri "/wp-content/uploads/2022/04/Mikes-Pizza-and-Pub-Logo-300x88.png"] [unique_id "aRABEVTHuR7kHAYop7dSIwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-09 00:04:17
(10 months ago)
(mod_security) mod_security (id:210740) triggered by 45.197.133.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 45.197.133.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 08 19:04:09.748224 2025] [security2:error] [pid 9195:tid 9195] [client 45.197.133.100:55183] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||scoutinsignia.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "scoutinsignia.com"] [uri "/service_files/silver~3.jpg"] [unique_id "aQ_aeUsgtWXkMk8O5yB7twAAADg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-08 13:27:44
(10 months ago)
(mod_security) mod_security (id:210740) triggered by 45.197.133.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 45.197.133.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 08 08:27:38.181957 2025] [security2:error] [pid 9877:tid 9897] [client 45.197.133.100:35735] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||pref-realestate.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "pref-realestate.com"] [uri "/wp-content/uploads/2025/05/6-processed-1.jpg"] [unique_id "aQ9FSmvnzsczQJjoM1uBSAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-08 12:47:57
(10 months ago)
(mod_security) mod_security (id:210740) triggered by 45.197.133.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 45.197.133.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 08 07:47:50.837505 2025] [security2:error] [pid 2426:tid 2426] [client 45.197.133.100:60317] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.verdeprofundo.net|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.verdeprofundo.net"] [uri "/wp-content/uploads/2008/04/pescador.jpg"] [unique_id "aQ879haMAa0W_hPazqVVkQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-08 11:53:52
(10 months ago)
(mod_security) mod_security (id:210740) triggered by 45.197.133.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 45.197.133.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 08 06:53:45.034649 2025] [security2:error] [pid 6814:tid 6814] [client 45.197.133.100:45611] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.dismain.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dismain.com"] [uri "/tienda/images/articulos/_5zn0mv042_g.jpg"] [unique_id "aQ8vSWWm96TQrbVlXr_lhgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-08 07:28:00
(10 months ago)
(mod_security) mod_security (id:210740) triggered by 45.197.133.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 45.197.133.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 08 02:27:55.125868 2025] [security2:error] [pid 1343896:tid 1343896] [client 45.197.133.100:44589] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.fiasdesigns.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.fiasdesigns.com"] [uri "/wp-content/uploads/2017-Seminoler-Maket-HR-365x365.jpg"] [unique_id "aQ7w-zB1fJGmnWGi39gKAAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack