🇺🇸
TPI-Abuse
2026-04-28 21:15:28
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 199.96.165.31 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 199.96.165.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 17:15:21.857634 2026] [security2:error] [pid 7598:tid 7598] [client 199.96.165.31:21643] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.carterindustries.net|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.carterindustries.net"] [uri "/s3cmd.ini"] [unique_id "afEjaeuET49ZrLx09xLBcwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-27 23:30:04
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 199.96.165.31 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 199.96.165.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 19:29:59.184745 2026] [security2:error] [pid 2642:tid 2642] [client 199.96.165.31:21045] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||treeofloveproductions.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "treeofloveproductions.com"] [uri "/s3cmd.ini"] [unique_id "ae_xd_0b3805wVUUE2s65gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-04-27 00:59:39
(1 month ago)
[MonApr2702:59:34.9225712026][security2:error][pid1097189:tid1097714][client199.96.165.31:0]ModSecur ...
show more
[MonApr2702:59:34.9225712026][security2:error][pid1097189:tid1097714][client199.96.165.31:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"swiss-domain-name.aidconsultancy.ch\"][uri\"/\"][unique_id\"ae609pCRb6rqn-n0OJgBJgAAAQM\"]
show less
Hacking
Web App Attack
🇺🇸
[email protected]
2025-10-29 00:51:59
(7 months ago)
Fail2Ban jail apache-json-scanners detected activity on 2025-10-29T00:51:59Z
Brute-Force
🇺🇸
[email protected]
2025-10-29 00:36:36
(7 months ago)
Fail2Ban jail apache-json-scanners detected activity on 2025-10-29T00:36:36Z
Brute-Force
🇺🇸
[email protected]
2025-10-29 00:21:23
(7 months ago)
Fail2Ban jail apache-json-scanners detected activity on 2025-10-29T00:21:23Z
Brute-Force
🇺🇸
[email protected]
2025-10-29 00:01:13
(7 months ago)
Fail2Ban jail apache-json-scanners detected activity on 2025-10-29T00:01:12Z
Brute-Force
🇳🇱
Mangelot Hosting
2025-10-10 22:44:37
(7 months ago)
(wp_login_try) srv101 WP Login Attempt 199.96.165.31 (US/United States/-): 10 in the last 3600 secs; ...
show more
(wp_login_try) srv101 WP Login Attempt 199.96.165.31 (US/United States/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇨🇿
lp
2025-08-18 09:22:53
(9 months ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 199.96.165.31
2025-08-18T09:59:02+02: ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 199.96.165.31
2025-08-18T09:59:02+02:00 vpn Access-Reject 'lacie' station: 199.96.165.31 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-08-18T09:59:55+02:00 vpn Access-Reject 'lorraine' station: 199.96.165.31 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-08-17 12:21:40
(9 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 199.96.165.31
2025-08-17T12:58:20+02: ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 199.96.165.31
2025-08-17T12:58:20+02:00 vpn Access-Reject 'print' station: 199.96.165.31 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-04-29 17:48:01
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 199.96.165.31 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 199.96.165.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 29 13:47:54.585136 2025] [security2:error] [pid 4759:tid 4759] [client 199.96.165.31:44975] [client 199.96.165.31] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||harwoodmechanical.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "harwoodmechanical.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aBEQyniTvTVZfObv2WrNdgAAAAI"], referer: https://harwoodmechanical.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack