🇺🇸
Zandro
2026-11-11 20:00:14
UTC ·
(3 days ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-11-11 17:14:53
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 178.20.31.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 12:14:45.838041 2026] [security2:error] [pid 1202:tid 1221] [client 178.20.31.101:30143] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 178.20.31.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 12:14:45.838041 2026] [security2:error] [pid 1202:tid 1221] [client 178.20.31.101:30143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||financialanalyst.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "financialanalyst.org"] [uri "/CIPM-Certified-International-Project-Manager.html"] [unique_id "avSihcTcIo4W3gTpmV1zGAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 04:59:55
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 178.20.31.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:59:49.225996 2026] [security2:error] [pid 21609:tid 21609] [client 178.20.31.101:11363] M ...
show more
(mod_security) mod_security (id:210350) triggered by 178.20.31.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:59:49.225996 2026] [security2:error] [pid 21609:tid 21609] [client 178.20.31.101:11363] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/posts/4035"] [unique_id "avKkxXn5hmgWxzfEoWLsfQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-09 19:33:02
UTC ·
(5 days ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 08:29:00
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 178.20.31.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:28:55.891535 2026] [security2:error] [pid 689:tid 689] [client 178.20.31.101:19103] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 178.20.31.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:28:55.891535 2026] [security2:error] [pid 689:tid 689] [client 178.20.31.101:19103] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||asiabeef.network|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "asiabeef.network"] [uri "/2/post/2023/09/weekly-cattle-and-beef-market-update-from-vietnam-week-38-sep-18-222023.html"] [unique_id "avGER2QvL7hZGH4z222nzQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 04:05:24
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 178.20.31.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:05:20.148135 2026] [security2:error] [pid 25791:tid 25791] [client 178.20.31.101:45513] M ...
show more
(mod_security) mod_security (id:210350) triggered by 178.20.31.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:05:20.148135 2026] [security2:error] [pid 25791:tid 25791] [client 178.20.31.101:45513] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ofertasdetrabajosyempleos.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ofertasdetrabajosyempleos.com"] [uri "/guatemala/buscador-limpieza_medio_tiempo-villa_nueva.php"] [unique_id "au_1AEeONHBlK63oI5cd6gAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 01:23:01
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 178.20.31.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 20:22:53.889374 2026] [security2:error] [pid 30532:tid 30532] [client 178.20.31.101:28227] M ...
show more
(mod_security) mod_security (id:210350) triggered by 178.20.31.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 20:22:53.889374 2026] [security2:error] [pid 30532:tid 30532] [client 178.20.31.101:28227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.microkerneltechnologies.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.microkerneltechnologies.com"] [uri "/solutions/"] [unique_id "auqI7YQYsCAnXIqhmodUuwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 14:18:29
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 178.20.31.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 10:18:20.667687 2026] [security2:error] [pid 32307:tid 32322] [client 178.20.31.101:52067] M ...
show more
(mod_security) mod_security (id:210350) triggered by 178.20.31.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 10:18:20.667687 2026] [security2:error] [pid 32307:tid 32322] [client 178.20.31.101:52067] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||newtrendmag.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "newtrendmag.org"] [uri "/ntma1229.htm"] [unique_id "auNVrHxTKr8CPxb0QA-rHwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
NxtGenIT
2026-09-11 01:11:34
UTC ·
(2 months ago)
CiscoASA Honeypot hit, Payload: "GET /+CSCOE+/logon.html HTTP/1.1" 302 -,
Brute-Force
🇺🇸
TPI-Abuse
2026-09-10 22:35:11
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 178.20.31.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 18:35:01.851427 2026] [security2:error] [pid 31049:tid 31049] [client 178.20.31.101:57657] M ...
show more
(mod_security) mod_security (id:210350) triggered by 178.20.31.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 18:35:01.851427 2026] [security2:error] [pid 31049:tid 31049] [client 178.20.31.101:57657] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.grupo-visalud.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.grupo-visalud.com"] [uri "/2024/06/algotrejding-chto-jeto-takoe-strategii-pri-rabote"] [unique_id "aqMwleZm2VDOcr2qpZPVjAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
OnTheEdge
2026-09-09 13:50:49
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
2026-06-18 00:39:12
UTC ·
(4 months ago)
2026-06-18T02:39:12.515416+02:00 zanati wp(www.sahpa.co.za)[2553847]: Blocked authentication attempt for LisaNcube from 178.20.31.101
...
Web App Attack
🇷🇴
Fn4ticHz
2026-05-10 13:58:57
UTC ·
(6 months ago)
Repeated DDoS targeted -- ZeroGuard X ManagedSRV
DDoS Attack
Exploited Host
🇹🇷
Detmach
2026-04-26 11:59:49
UTC ·
(6 months ago)
Security attack detected. Multiple failed attempts from 178.20.31.101. IP banned for 1440 minutes at 26.04.2026 14:58:58. Failed attempts: 1
Brute-Force
🇺🇸
TPI-Abuse
2026-04-12 10:19:22
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 178.20.31.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 06:19:17.849410 2026] [security2:error] [pid 2240014:tid 2240037] [client 178.20.31.101:2954 ...
show more
(mod_security) mod_security (id:225170) triggered by 178.20.31.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 06:19:17.849410 2026] [security2:error] [pid 2240014:tid 2240037] [client 178.20.31.101:29545] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vanessa.santos.name|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vanessa.santos.name"] [uri "/wp-json/wp/v2/users"] [unique_id "adtxpZdILEYBd9H2Egt--QAAAFQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
