🇺🇸
TPI-Abuse
2026-11-10 03:36:00
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210350) triggered by 185.168.31.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:35:52.847147 2026] [security2:error] [pid 2702922:tid 2702940] [client 185.168.31.79:3770 ...
show more
(mod_security) mod_security (id:210350) triggered by 185.168.31.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:35:52.847147 2026] [security2:error] [pid 2702922:tid 2702940] [client 185.168.31.79:37707] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||inal.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "inal.org"] [uri "/"] [unique_id "avKRGIWHvL08Xa77T6YRuwAAAYc"], referer: http://inal.org
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:14:02
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210350) triggered by 185.168.31.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:13:58.710755 2026] [security2:error] [pid 25519:tid 25519] [client 185.168.31.79:59825] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.168.31.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:13:58.710755 2026] [security2:error] [pid 25519:tid 25519] [client 185.168.31.79:59825] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||seishin-kan.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "seishin-kan.org"] [uri "/faq.html"] [unique_id "avJ95jK1V1qycGjoy79TPQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
FireGuard Server
2026-11-09 08:55:07
UTC ·
(1 day ago)
Blocked by os-abuseipdb; 8 hits, proto=tcp, ports=443
Port Scan
Hacking
🇦🇺
FireGuard Server
2026-11-05 19:15:06
UTC ·
(5 days ago)
Blocked by os-abuseipdb; 7 hits, proto=tcp, ports=443
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-11-01 22:28:40
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 185.168.31.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 17:28:34.539694 2026] [security2:error] [pid 10283:tid 10283] [client 185.168.31.79:46451] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.168.31.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 17:28:34.539694 2026] [security2:error] [pid 10283:tid 10283] [client 185.168.31.79:46451] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/eritrea/"] [unique_id "aue9Eqh8bsMRLC5s2ta2XAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-10-31 01:33:19
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 02:00:01
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 185.168.31.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 21:59:55.570311 2026] [security2:error] [pid 27899:tid 27899] [client 185.168.31.79:29735] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.168.31.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 21:59:55.570311 2026] [security2:error] [pid 27899:tid 27899] [client 185.168.31.79:29735] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||infalliblebible.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "infalliblebible.com"] [uri "/contradiction.html"] [unique_id "auP6G84Ddwn7DFBxInQeBQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 00:53:14
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 185.168.31.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:53:10.316783 2026] [security2:error] [pid 5049:tid 5049] [client 185.168.31.79:36839] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 185.168.31.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:53:10.316783 2026] [security2:error] [pid 5049:tid 5049] [client 185.168.31.79:36839] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||salinabible.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "salinabible.org"] [uri "/info-articles/audio-messages/sermon/1694-faith-unto-death"] [unique_id "auPqdge_joBdGi7FybyGeAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
SX Communications
2026-10-02 03:41:10
UTC ·
(1 month ago)
HTTP application-layer DoS / botnet traffic from 185.168.31.79: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
DDoS Attack
Bad Web Bot
Exploited Host
🇨🇿
lp
2026-09-14 13:49:52
UTC ·
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 185.168.31.79
2026-09-14T15:21:45+02:00 vpn Access-Reject 'bkxl' station: 185.168.31.79 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
Brute-Force
Web App Attack
🇨🇿
lp
2026-09-14 04:50:46
UTC ·
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 185.168.31.79
2026-09-14T06:39:15+02:00 vpn Access-Reject 'd868a0d4c418' station: 185.168.31.79 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<re ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 185.168.31.79
2026-09-14T06:39:15+02:00 vpn Access-Reject 'd868a0d4c418' station: 185.168.31.79 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇸🇪
OnTheEdge
2026-09-13 17:51:21
UTC ·
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇸🇪
OnTheEdge
2026-09-13 17:51:21
UTC ·
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
