🇺🇸
TPI-Abuse
2026-11-14 08:52:13
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 31.134.11.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 03:52:06.130465 2026] [security2:error] [pid 15339:tid 15339] [client 31.134.11.79:30673] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.11.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 03:52:06.130465 2026] [security2:error] [pid 15339:tid 15339] [client 31.134.11.79:30673] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tulsatvmemories.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tulsatvmemories.com"] [uri "/chew2009/bright"] [unique_id "avghNgUNBRisVKnFcrI2wQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 04:24:10
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 31.134.11.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 23:24:03.513078 2026] [security2:error] [pid 12324:tid 12324] [client 31.134.11.79:37875] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.11.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 23:24:03.513078 2026] [security2:error] [pid 12324:tid 12324] [client 31.134.11.79:37875] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hanlontown.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hanlontown.org"] [uri "/photo_gallery/photos.htm"] [unique_id "avaQ4--uzJUg-1nTAiJQvwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 06:20:11
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 31.134.11.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:20:04.105653 2026] [security2:error] [pid 9586:tid 9586] [client 31.134.11.79:52973] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.11.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:20:04.105653 2026] [security2:error] [pid 9586:tid 9586] [client 31.134.11.79:52973] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||painting-with-numbers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "painting-with-numbers.com"] [uri "/blog/incentive-comp-plans"] [unique_id "avFmFAyfA2HOT00UaI5PBQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 14:14:18
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 31.134.11.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:14:12.974660 2026] [security2:error] [pid 17395:tid 17395] [client 31.134.11.79:14115] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.11.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:14:12.974660 2026] [security2:error] [pid 17395:tid 17395] [client 31.134.11.79:14115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||chrismonty.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "chrismonty.com"] [uri "/community/65/cascade-highlands-cascade-park-east"] [unique_id "avCDtFm3c_FrZK9MAgvjXgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-08 00:05:53
UTC ·
(1 week ago)
Web application attack detected.
Web App Attack
🇪🇸
librebit
2026-11-04 05:51:10
UTC ·
(1 week ago)
RDWeb scan
Web App Attack
🇪🇸
librebit
2026-11-02 02:01:50
UTC ·
(1 week ago)
RDWeb scan
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 13:08:15
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 31.134.11.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 09:08:10.690296 2026] [security2:error] [pid 20886:tid 20886] [client 31.134.11.79:42237] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.11.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 09:08:10.690296 2026] [security2:error] [pid 20886:tid 20886] [client 31.134.11.79:42237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fgrotary.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fgrotary.org"] [uri "/rotary-rewind/rotary-rewind-july-22-2020/"] [unique_id "auSWupbovnXiySwHrqZI8wAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-10-29 08:48:06
UTC ·
(2 weeks ago)
RDWeb scan
Web App Attack
🇪🇸
librebit
2026-10-25 07:00:49
UTC ·
(3 weeks ago)
RDWeb scan
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 09:39:47
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 31.134.11.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 05:39:43.040656 2026] [security2:error] [pid 2052:tid 2078] [client 31.134.11.79:30825] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.11.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 05:39:43.040656 2026] [security2:error] [pid 2052:tid 2078] [client 31.134.11.79:30825] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||unitedonegroup.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "unitedonegroup.com"] [uri "/Sugar"] [unique_id "atx83x_37wQMFNYvwDVmjAAAAFc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-10-23 01:41:19
UTC ·
(3 weeks ago)
RDWeb scan
Web App Attack
🇪🇸
librebit
2026-10-18 23:37:06
UTC ·
(3 weeks ago)
RDWeb scan
Web App Attack
🇪🇸
librebit
2026-10-17 06:03:49
UTC ·
(4 weeks ago)
RDWeb scan
Web App Attack
🇪🇸
librebit
2026-10-15 06:23:57
UTC ·
(1 month ago)
RDWeb scan
Web App Attack
