🇩🇪
Reinhard
2026-07-25 13:32:57
(3 days ago)
Harvesting pictures or malicious BOT.
Bad Web Bot
🇳🇱
DrLex0
2026-05-29 06:27:35
(1 month ago)
BnL005: Obvious distributed image scraping attempt, using broken crawler written by someone with sev ...
show more
BnL005: Obvious distributed image scraping attempt, using broken crawler written by someone with severe brain damage
45.78.206.253 443 - [29/May/2026:06:27:35 +0000] "GET [redacted] HTTP/1.1" 404 5965 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
show less
Bad Web Bot
Exploited Host
2026-04-26 09:23:58
(3 months ago)
FortiWeb WAF: 68 attacks detected. Threat Score: 8600. Types: Client Management(34), GEO IP(34). Ori ...
show more
FortiWeb WAF: 68 attacks detected. Threat Score: 8600. Types: Client Management(34), GEO IP(34). Origin: Singapore.
show less
Web App Attack
🇨🇭
rt
2026-04-19 16:44:51
(3 months ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
🇮🇹
Progetto1
2026-04-16 17:05:02
(3 months ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
kosada.com
2026-04-02 08:38:30
(3 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
2026-03-31 12:05:20
(3 months ago)
Web attack
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-03-23 08:44:16
(4 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-05 02:06:54
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 45.78.206.253 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 45.78.206.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 21:06:39.649335 2025] [security2:error] [pid 5465:tid 5465] [client 45.78.206.253:28444] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.thedesignofcreation.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.thedesignofcreation.com"] [uri "/images/img/Design/Proof171.bmp"] [unique_id "aTI-L71yLy4PIJGaImTvFgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-05 00:12:07
(7 months ago)
Web app attack and vulnerability scan detected from IIS logs
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-04 18:46:41
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 45.78.206.253 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 45.78.206.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 13:46:28.553099 2025] [security2:error] [pid 22189:tid 22189] [client 45.78.206.253:34615] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cyclingboardgames.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cyclingboardgames.net"] [uri "/images3/tourdujour08.jpg"] [unique_id "aTHXBABPD475MAvE6R49IgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-04 01:04:06
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 45.78.206.253 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 45.78.206.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 20:03:56.895547 2025] [security2:error] [pid 28540:tid 28540] [client 45.78.206.253:56902] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.calvarycavaliers.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.calvarycavaliers.org"] [uri "/event/s-t-e-a-m-family-fun-night"] [unique_id "aTDd_LPb0w6x0xP5ASOOYQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-03 22:11:14
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 45.78.206.253 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 45.78.206.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 17:11:03.501474 2025] [security2:error] [pid 19707:tid 19707] [client 45.78.206.253:65305] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.guardmagic.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.guardmagic.com"] [uri "/01-engl/9e-manuals-software/02-manuals/GuardMagic VB engl-programing tool - 19-03-2010.pdf"] [unique_id "aTC1dyovBlb25xn6dfuXJQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-03 19:12:27
(7 months ago)
Web app attack and vulnerability scan detected from IIS logs
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 00:58:04
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 45.78.206.253 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 45.78.206.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 19:57:54.582697 2025] [security2:error] [pid 1713562:tid 1713562] [client 45.78.206.253:3936] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.individualhealth.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.individualhealth.com"] [uri "/pdf/img/Patriot_Platinum.pdf"] [unique_id "aS45kkDUYUzoe3sETzsdKgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack