🇺🇸
TPI-Abuse
2026-11-15 02:39:25
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210350) triggered by 185.168.31.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 21:39:18.509705 2026] [security2:error] [pid 5160:tid 5160] [client 185.168.31.145:61297] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.168.31.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 21:39:18.509705 2026] [security2:error] [pid 5160:tid 5160] [client 185.168.31.145:61297] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jerusalem-temple-today.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jerusalem-temple-today.com"] [uri "/for/viewtopic.php"] [unique_id "avkbVht6GHcJqP4Ej6YHCQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 05:41:58
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 185.168.31.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 00:41:51.605838 2026] [security2:error] [pid 664187:tid 664187] [client 185.168.31.145:3756 ...
show more
(mod_security) mod_security (id:210350) triggered by 185.168.31.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 00:41:51.605838 2026] [security2:error] [pid 664187:tid 664187] [client 185.168.31.145:37561] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vividlee.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vividlee.com"] [uri "/2007/16_800/default.htm"] [unique_id "avf0n3sT0eq9ZjK7fpeMywAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 21:43:15
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 185.168.31.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 16:43:07.954919 2026] [security2:error] [pid 1878:tid 1878] [client 185.168.31.145:49205] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.168.31.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 16:43:07.954919 2026] [security2:error] [pid 1878:tid 1878] [client 185.168.31.145:49205] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||therealseska.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "therealseska.com"] [uri "/news/dont-get-catfished/"] [unique_id "auum63WOYaKlEzS-_don-gAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 07:59:40
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 185.168.31.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 03:59:34.239942 2026] [security2:error] [pid 24342:tid 24342] [client 185.168.31.145:42571] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.168.31.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 03:59:34.239942 2026] [security2:error] [pid 24342:tid 24342] [client 185.168.31.145:42571] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2015/06/11/eritrea-east-africas-open-air-prison-nation/"] [unique_id "auROZn2ChN5Je0byDL_-aAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-10-24 06:32:36
UTC ·
(3 weeks ago)
Web App Attack
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇭
4server
2026-09-10 00:34:31
UTC ·
(2 months ago)
[ThuSep1002:34:29.2326652026][security2:error][pid170492:tid170725][client185.168.31.145:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"9 ...
show more
[ThuSep1002:34:29.2326652026][security2:error][pid170492:tid170725][client185.168.31.145:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"leonitraslochi.ch\"][uri\"/xmlrpc.php\"][unique_id\"aqH7FbXsHrj_IDvejdxOpQAAAI4\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 21:31:20
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 185.168.31.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 17:31:16.977803 2026] [security2:error] [pid 26993:tid 26993] [client 185.168.31.145:40493] ...
show more
(mod_security) mod_security (id:225170) triggered by 185.168.31.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 17:31:16.977803 2026] [security2:error] [pid 26993:tid 26993] [client 185.168.31.145:40493] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||easygifting.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "easygifting.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adAxpKcvJGWdyjGe0cVejgAAAAw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kjaerulff
2026-03-29 14:51:11
UTC ·
(7 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
