🇺🇸
TPI-Abuse
2026-11-15 05:25:34
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210350) triggered by 31.134.11.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 00:25:30.999749 2026] [security2:error] [pid 25536:tid 25536] [client 31.134.11.46:45231] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.11.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 00:25:30.999749 2026] [security2:error] [pid 25536:tid 25536] [client 31.134.11.46:45231] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ictsl.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ictsl.net"] [uri "/productos/01d63694a80f7db0d/agitadordebalanceoasimetrico3dssm3stuart.html"] [unique_id "avlCSotu-XrvwOvJBhRK3QAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Zandro
2026-11-14 12:00:14
UTC ·
(20 hours ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-11-14 05:00:54
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 31.134.11.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 00:00:49.207286 2026] [security2:error] [pid 29650:tid 29650] [client 31.134.11.46:10427] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.11.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 00:00:49.207286 2026] [security2:error] [pid 29650:tid 29650] [client 31.134.11.46:10427] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.desertvacationvillas.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.desertvacationvillas.com"] [uri "/villas/class/two-bedroom-villa.htm"] [unique_id "avfrAX6nCehFWMe8n0KQDgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 03:59:20
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 31.134.11.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:59:12.160027 2026] [security2:error] [pid 8758:tid 8758] [client 31.134.11.46:36397] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.11.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:59:12.160027 2026] [security2:error] [pid 8758:tid 8758] [client 31.134.11.46:36397] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.caferutadelaseda.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.caferutadelaseda.com"] [uri "/images/js/lib/lib/source/helpers/jquery.fancybox-buttons.js"] [unique_id "avfckGWjBANMxRAAp4hMNwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 08:24:47
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 31.134.11.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 03:24:43.610112 2026] [security2:error] [pid 29782:tid 29782] [client 31.134.11.46:48165] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.11.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 03:24:43.610112 2026] [security2:error] [pid 29782:tid 29782] [client 31.134.11.46:48165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jimlawless.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jimlawless.net"] [uri "/blog/posts/bbsfun/"] [unique_id "avbJSzy5w40X19uTHYv4HgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 21:04:38
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 31.134.11.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 16:04:34.653830 2026] [security2:error] [pid 26940:tid 26940] [client 31.134.11.46:55221] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.11.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 16:04:34.653830 2026] [security2:error] [pid 26940:tid 26940] [client 31.134.11.46:55221] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2014/11/02/why-ineeddiversegames-is-vital-to-the-future-of-gaming/"] [unique_id "auud4vssW7R-ViJ0FapRrQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 03:37:41
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 31.134.11.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 23:37:34.072312 2026] [security2:error] [pid 10134:tid 10134] [client 31.134.11.46:48675] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.11.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 23:37:34.072312 2026] [security2:error] [pid 10134:tid 10134] [client 31.134.11.46:48675] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.flavornet.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.flavornet.org"] [uri "/info/5756-24-1.html"] [unique_id "auK_fliY6GEhVXy_FEX_vgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 03:31:13
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 31.134.11.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 23:31:05.245637 2026] [security2:error] [pid 17007:tid 17007] [client 31.134.11.46:60097] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.11.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 23:31:05.245637 2026] [security2:error] [pid 17007:tid 17007] [client 31.134.11.46:60097] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||barriebrown.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "barriebrown.com"] [uri "/models/content/bjb_080724_0186_large.html"] [unique_id "auFsecClrC7s7aK26g9-KQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-08-08 03:39:05
UTC ·
(3 months ago)
Web attack/malicious scanning detected
Web App Attack
🇷🇴
magefix
2026-07-31 04:31:00
UTC ·
(3 months ago)
Fraudulent orders placed through WooCommerce store using stolen/fake customer and payment information.
Fraud Orders
🇨🇿
ptlab
2026-07-24 00:45:48
UTC ·
(3 months ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇬🇧
consul.to
2026-07-18 16:57:04
UTC ·
(3 months ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇿
Tripwire
2026-07-03 19:46:41
UTC ·
(4 months ago)
Wordpress login attempts
Brute-Force
Web App Attack
🇨🇭
backslash
2026-06-18 19:42:11
UTC ·
(4 months ago)
block ruleset 51D5331ECDCF70C2C6410C0D0EEB5F69B17B5F56
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-14 13:02:18
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 31.134.11.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 09:02:08.351234 2026] [security2:error] [pid 30018:tid 30018] [client 31.134.11.46:12885] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 31.134.11.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 09:02:08.351234 2026] [security2:error] [pid 30018:tid 30018] [client 31.134.11.46:12885] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||zoboz.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "zoboz.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai6mUElpYMoW2wTRr5smZAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
