🇺🇸
TPI-Abuse
2026-10-23 22:53:11
(5 hours ago)
(mod_security) mod_security (id:210350) triggered by 185.168.31.215 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 185.168.31.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 18:53:07.111301 2026] [security2:error] [pid 23160:tid 23160] [client 185.168.31.215:40103] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.30daysout.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.30daysout.com"] [uri "/songs/cold-summer"] [unique_id "atvlUwz4Hix_xjF3FWQalQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-09-29 01:57:12
(3 weeks ago)
Brute-force login attack detected by WordPress firewall.
Brute-Force
Web App Attack
🇺🇸
ipblock.com
2026-07-10 05:56:00
(3 months ago)
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-07-06 18:43:21
(3 months ago)
Brute force
Brute-Force
🇳🇱
Site.eu
2026-05-17 19:14:20
(5 months ago)
Excessive 404/403 errors
Brute-Force
2026-05-04 06:30:15
(5 months ago)
IM360 WAF: SQL Injection via WordPress Link functionality MV:75'EXTRACTVALUE(8840,CONCAT(0x7e,(SELEC ...
show more
IM360 WAF: SQL Injection via WordPress Link functionality MV:75'EXTRACTVALUE(8840,CONCAT(0x7e,(SELECT/**/(ELT(8840=8840,1))),0x7e))-- -
show less
SQL Injection
2026-05-04 06:29:55
(5 months ago)
IM360 WAF: SQL Injection Attack: Common DB Names Detected
SQL Injection
🇺🇸
TPI-Abuse
2026-04-28 21:05:59
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 185.168.31.215 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 185.168.31.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 17:05:55.419974 2026] [security2:error] [pid 15039:tid 15039] [client 185.168.31.215:35423] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vicmackenzie.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vicmackenzie.com"] [uri "/s3cmd.ini"] [unique_id "afEhM_WHdRIh05MY77_baQAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-28 13:40:23
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 185.168.31.215 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 185.168.31.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 09:40:18.122215 2026] [security2:error] [pid 15686:tid 15686] [client 185.168.31.215:49805] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sionayra.tracybur.net|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sionayra.tracybur.net"] [uri "/s3cmd.ini"] [unique_id "afC4wsKH7RvIXN_zR3i7SAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-27 11:26:24
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 185.168.31.215 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 185.168.31.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 07:26:20.760182 2026] [security2:error] [pid 13878:tid 13878] [client 185.168.31.215:59275] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.curiousnarwhal.gregorii.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.curiousnarwhal.gregorii.com"] [uri "/s3cmd.ini"] [unique_id "ae9H3MoM-7uuXlBKnL6XLwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-26 11:13:45
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 185.168.31.215 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 185.168.31.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 07:13:40.191937 2026] [security2:error] [pid 25823:tid 25823] [client 185.168.31.215:9765] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.blogs.melton.space|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.blogs.melton.space"] [uri "/s3cmd.ini"] [unique_id "ae3zZDfiA4h3VS7M02JOvwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
