🇺🇸
TPI-Abuse
2026-11-15 22:06:29
UTC ·
(25 minutes ago)
(mod_security) mod_security (id:210350) triggered by 31.134.10.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 17:06:22.297849 2026] [security2:error] [pid 29647:tid 29647] [client 31.134.10.35:44803] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.10.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 17:06:22.297849 2026] [security2:error] [pid 29647:tid 29647] [client 31.134.10.35:44803] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ictsl.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ictsl.net"] [uri "/productos/plastico/asasdesiembraplasticopsesterilesjpselecta.html"] [unique_id "avos3qnLP71fTyrmP4iTcAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 13:46:17
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210350) triggered by 31.134.10.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 08:46:11.031294 2026] [security2:error] [pid 22996:tid 22996] [client 31.134.10.35:40645] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.10.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 08:46:11.031294 2026] [security2:error] [pid 22996:tid 22996] [client 31.134.10.35:40645] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||celebritybikinigossip.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "celebritybikinigossip.com"] [uri "/2010/07/georgia-horsely-bikini-pictures/"] [unique_id "avm3o2ptJ3twyZdE140XaQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-15 10:46:02
UTC ·
(11 hours ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 10:52:04
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 31.134.10.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 05:51:59.625854 2026] [security2:error] [pid 18289:tid 18289] [client 31.134.10.35:50085] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.10.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 05:51:59.625854 2026] [security2:error] [pid 18289:tid 18289] [client 31.134.10.35:50085] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||stonehill.myomni.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "stonehill.myomni.us"] [uri "/portal/table-of-contents-1/finance-sub/80-f1-13-fraudulent-transactions"] [unique_id "avg9T63JK1kYHxHlLfCsfQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-12 18:51:59
UTC ·
(1 month ago)
Aggressive web scan
Web App Attack
🇺🇸
maxasp.net
2026-10-11 06:34:31
UTC ·
(1 month ago)
Inc-HTTP-Safe Reject, collection = Risk Profile; Attack Var: Screening; Attack Data: F5 Screen Pool; script_name: /private-screendoor-000.asp; ip attacks: 6; subnet attacks: 100
SQL Injection
🇺🇸
SX Communications
2026-10-02 19:28:35
UTC ·
(1 month ago)
HTTP application-layer DoS / botnet traffic from 31.134.10.35: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
DDoS Attack
Bad Web Bot
Exploited Host
🇫🇷
mikekarl
2026-08-02 10:23:45
UTC ·
(3 months ago)
SQL INJECTION Hey,
As an investment representative, I work with a prominent investment firm based in the United States that provides hard-loan funding for viable commercial ventures.
We arrange HARD LOAN FUNDING for viable projects and business ...
show more
SQL INJECTION Hey,
As an investment representative, I work with a prominent investment firm based in the United States that provides hard-loan funding for viable commercial ventures.
We arrange HARD LOAN FUNDING for viable projects and businesses seeking financing.
- Loan Interest Rate: 2.5% annually.
- Moratorium / Grace Period: 12 months (one year).
- Maximum Loan Duration: 10 years.
If you have a viable startup or an operating company that is seeking financing for expansion, we would be interested in reviewing the opportunity.
Interested parties may submit their project plan and financing request to [email protected] for management consideration.
Thank you for your consideration.
Sincerely yours,
Nicholas Doby
Kindly forward your response via this Email: [email protected]
www.dobyfinancial.com
If you don''t want to hear from me on this subject anymore, let me know through the email please.
show less
SQL Injection
🇦🇺
oncord
2026-07-29 17:14:12
UTC ·
(3 months ago)
Form spam
Web Spam
🇦🇺
oncord
2026-07-25 06:24:15
UTC ·
(3 months ago)
Form spam
Web Spam
🇦🇺
oncord
2026-07-18 05:38:21
UTC ·
(3 months ago)
Form spam
Web Spam
🇨🇭
backslash
2026-05-21 20:42:02
UTC ·
(5 months ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot
🇪🇸
sshtmp
2026-05-21 14:20:06
UTC ·
(5 months ago)
[AbuseIPDB auto-report]
Attack: WordPress XML-RPC brute-force
Hits: 1 | First: 2026-05-21T16:20:06+02:00 | Last: 2026-05-21T16:20:06+02:00
Samples: POST /xmlrpc.php [200]
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-16 22:15:31
UTC ·
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 31.134.10.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 18:15:26.284372 2026] [security2:error] [pid 30694:tid 30694] [client 31.134.10.35:44219] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 31.134.10.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 18:15:26.284372 2026] [security2:error] [pid 30694:tid 30694] [client 31.134.10.35:44219] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Berkley II/Thumbs.db"] [unique_id "agjsfnndOGAtIVO8_g0KlgAAAAI"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Berkley%20II/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-04-19 05:12:03
UTC ·
(6 months ago)
Bad Web Bot
