🇺🇸
TPI-Abuse
2026-11-10 07:08:14
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 193.31.126.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:08:07.837889 2026] [security2:error] [pid 20576:tid 20576] [client 193.31.126.131:47747] ...
show more
(mod_security) mod_security (id:210350) triggered by 193.31.126.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:08:07.837889 2026] [security2:error] [pid 20576:tid 20576] [client 193.31.126.131:47747] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.mccompu.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mccompu.com"] [uri "/producto/bateria-acer-as07a31/"] [unique_id "avLC15Tt-Vjas8LJQilH7wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 15:23:12
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 193.31.126.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 10:23:08.909586 2026] [security2:error] [pid 22382:tid 22382] [client 193.31.126.131:57195] ...
show more
(mod_security) mod_security (id:210350) triggered by 193.31.126.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 10:23:08.909586 2026] [security2:error] [pid 22382:tid 22382] [client 193.31.126.131:57195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.directoryofdrugs.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.directoryofdrugs.com"] [uri "/cialis.htm"] [unique_id "avCT3Ckv13KSZjrQD46JQwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 17:37:40
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 193.31.126.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 13:37:34.778378 2026] [security2:error] [pid 10754:tid 10788] [client 193.31.126.131:55985] ...
show more
(mod_security) mod_security (id:210350) triggered by 193.31.126.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 13:37:34.778378 2026] [security2:error] [pid 10754:tid 10788] [client 193.31.126.131:55985] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||idwic.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "idwic.com"] [uri "/lucy-s-page.htm"] [unique_id "auDhXo39arfnl1LItyZAJAAAAFY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 18:55:53
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 193.31.126.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 14:55:47.380316 2026] [security2:error] [pid 24695:tid 24695] [client 193.31.126.131:41357] ...
show more
(mod_security) mod_security (id:210350) triggered by 193.31.126.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 14:55:47.380316 2026] [security2:error] [pid 24695:tid 24695] [client 193.31.126.131:41357] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||georgelaceysales.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "georgelaceysales.com"] [uri "/careers.html"] [unique_id "atuts26JLDwM7eWW4JLmIQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 13:26:07
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 193.31.126.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:26:01.087448 2026] [security2:error] [pid 6347:tid 6347] [client 193.31.126.131:45835] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.31.126.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:26:01.087448 2026] [security2:error] [pid 6347:tid 6347] [client 193.31.126.131:45835] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.virtualmediamasters.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.virtualmediamasters.net"] [uri "/payment/"] [unique_id "atDUaWECiZrmdlz6KU4DbgAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-02 23:37:27
UTC ·
(1 month ago)
IM360 WAF: Attempt to upload malware
Hacking
2026-09-25 11:27:16
UTC ·
(1 month ago)
2026-09-25T13:27:16.383879+02:00 polaris wp(sahpa.co.za)[2256175]: Blocked authentication attempt for
[email protected] from 193.31.126.131
...
Brute-Force
Web App Attack
🇩🇪
LRob
2026-09-07 00:59:57
UTC ·
(2 months ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: POST | path: /xmlrpc.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0 | 2026-09-07 00:59 UTC
Hacking
Web App Attack
🇸🇪
OnTheEdge
2026-08-08 22:21:45
UTC ·
(3 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇨🇱
SinaiCL
2026-07-22 03:42:58
UTC ·
(3 months ago)
SQL Injection Attack
SQL Injection
🇬🇧
Oakley
2026-05-07 15:48:10
UTC ·
(6 months ago)
(mod_security) mod_security (id:900210) triggered by 193.31.126.131 (US/United States/-): 5 in the last 900 secs
Web App Attack
Hacking
🇺🇸
rsa
2026-04-17 16:29:00
UTC ·
(6 months ago)
GET /wp-admin.php HTTP/1.1
DDoS Attack
Brute-Force
Web App Attack
Hacking
🇩🇪
Packets-Decreaser.NET
2025-12-10 14:34:49
UTC ·
(11 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-03-09 23:35:33
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 193.31.126.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 09 19:35:29.388959 2025] [security2:error] [pid 1931:tid 1931] [client 193.31.126.131:31145] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 193.31.126.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 09 19:35:29.388959 2025] [security2:error] [pid 1931:tid 1931] [client 193.31.126.131:31145] [client 193.31.126.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "moonlightmotel.com"] [uri "/.env"] [unique_id "Z84lwUJ4cH89QFB_umEEyQAAAAs"], referer: https://tasamm.com/about/mmm185.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
MPL
2025-03-02 11:36:48
UTC ·
(1 year ago)
tcp/80 (7 or more attempts)
Port Scan
