🇺🇸
TPI-Abuse
2026-11-15 10:39:55
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210350) triggered by 31.134.11.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 05:39:50.437037 2026] [security2:error] [pid 14855:tid 14855] [client 31.134.11.27:30263] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.11.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 05:39:50.437037 2026] [security2:error] [pid 14855:tid 14855] [client 31.134.11.27:30263] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "avmL9knFQoD-rhN0vOPojQAAADE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 21:42:03
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210350) triggered by 31.134.11.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 16:41:58.149284 2026] [security2:error] [pid 13451:tid 13451] [client 31.134.11.27:49849] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.11.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 16:41:58.149284 2026] [security2:error] [pid 13451:tid 13451] [client 31.134.11.27:49849] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ictsl.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ictsl.net"] [uri "/productos/aparatos/agitadorparamicroplacastimix2edmunbuehler.html"] [unique_id "avjVpoiFxMgAy798Fj_p3gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 05:00:55
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 31.134.11.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:00:52.868904 2026] [security2:error] [pid 8139:tid 8139] [client 31.134.11.27:21127] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.11.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:00:52.868904 2026] [security2:error] [pid 8139:tid 8139] [client 31.134.11.27:21127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||modmove.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "modmove.com"] [uri "/news/gravel-road-qa-plus-live-performances-are-coming-to-dendy-cooparoo/"] [unique_id "avKlBB59qrsSJ9mQNyjTYQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 00:30:18
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 31.134.11.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:30:12.025151 2026] [security2:error] [pid 21647:tid 21659] [client 31.134.11.27:51265] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.11.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:30:12.025151 2026] [security2:error] [pid 21647:tid 21659] [client 31.134.11.27:51265] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cargomarexpress.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cargomarexpress.com"] [uri "/product/ystalderr961691"] [unique_id "avJllGh9IiKqKMyAfqJYYgAAAEo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 10:26:43
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 31.134.11.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:26:38.867204 2026] [security2:error] [pid 21682:tid 21682] [client 31.134.11.27:38641] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.11.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:26:38.867204 2026] [security2:error] [pid 21682:tid 21682] [client 31.134.11.27:38641] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pascalevial.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pascalevial.com"] [uri "/paintings/2013-jumping-thru-hoops.html"] [unique_id "avGf3uqBtU9ha-AXTO0FpwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-07 01:22:24
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 08:06:06
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 31.134.11.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 03:05:59.669293 2026] [security2:error] [pid 19796:tid 19796] [client 31.134.11.27:24935] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.11.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 03:05:59.669293 2026] [security2:error] [pid 19796:tid 19796] [client 31.134.11.27:24935] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bodybuildbid.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bodybuildbid.com"] [uri "/articles/chest/increase-bench-press.html"] [unique_id "aumV55ezInwUTwKouPt3iQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 07:31:13
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 31.134.11.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 02:31:07.799195 2026] [security2:error] [pid 1830:tid 1830] [client 31.134.11.27:38791] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.11.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 02:31:07.799195 2026] [security2:error] [pid 1830:tid 1830] [client 31.134.11.27:38791] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tulsatvmemories.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tulsatvmemories.com"] [uri "/chew2010/kids"] [unique_id "aug8O6v_rt2qPi9e0Oe-yAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 01:16:26
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 31.134.11.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 21:16:17.953113 2026] [security2:error] [pid 9610:tid 9610] [client 31.134.11.27:26219] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.11.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 21:16:17.953113 2026] [security2:error] [pid 9610:tid 9610] [client 31.134.11.27:26219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||persnicketyinc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "persnicketyinc.com"] [uri "/tag/save-the-dates-lancaster/"] [unique_id "auFM4TPg7fzYIv2vSnpBwQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
lid3rc
2026-09-22 07:17:07
UTC ·
(1 month ago)
Kártékony URL
Web App Attack
🇬🇧
consul.to
2026-09-20 03:30:58
UTC ·
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
🇦🇺
oncord
2026-07-16 08:54:29
UTC ·
(3 months ago)
Form spam
Web Spam
2026-07-11 19:20:47
UTC ·
(4 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 22-20.31.134.11.27.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 12:29:02
UTC ·
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 31.134.11.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 08:28:59.300851 2026] [security2:error] [pid 26134:tid 26134] [client 31.134.11.27:24347] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 31.134.11.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 08:28:59.300851 2026] [security2:error] [pid 26134:tid 26134] [client 31.134.11.27:24347] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||stoneybluff.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stoneybluff.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akUICxO8DpeiXXH9xtMDgQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 19:55:23
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 31.134.11.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 15:55:17.640107 2026] [security2:error] [pid 4533:tid 4544] [client 31.134.11.27:21673] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 31.134.11.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 15:55:17.640107 2026] [security2:error] [pid 4533:tid 4544] [client 31.134.11.27:21673] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||oldcarz.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "oldcarz.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai8HJfi_qRukjtbAYo2JTAAAAMM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
