🇺🇸
TPI-Abuse
2026-11-15 12:45:58
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210350) triggered by 31.134.15.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 07:45:55.065819 2026] [security2:error] [pid 22913:tid 22913] [client 31.134.15.38:64035] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.15.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 07:45:55.065819 2026] [security2:error] [pid 22913:tid 22913] [client 31.134.15.38:64035] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jerusalem-korczak-home.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jerusalem-korczak-home.com"] [uri "/potter/78/h80.html"] [unique_id "avmpg-h8wyXX194LSlLdZwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 09:19:31
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210350) triggered by 31.134.15.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 04:19:25.376312 2026] [security2:error] [pid 8856:tid 8856] [client 31.134.15.38:33885] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.15.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 04:19:25.376312 2026] [security2:error] [pid 8856:tid 8856] [client 31.134.15.38:33885] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/terrorism/page/3/"] [unique_id "avl5HczaEK-3wXoGmh-DtwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 03:18:04
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 31.134.15.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:17:55.762082 2026] [security2:error] [pid 10625:tid 10625] [client 31.134.15.38:30049] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.15.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:17:55.762082 2026] [security2:error] [pid 10625:tid 10625] [client 31.134.15.38:30049] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ideaofauniversity.website|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ideaofauniversity.website"] [uri "/wp-json/wp/v2/pages/122"] [unique_id "au1G4_tXYfYwdCcsjEn3dQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 03:55:10
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 31.134.15.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 23:55:05.896686 2026] [security2:error] [pid 31059:tid 31059] [client 31.134.15.38:59889] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.15.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 23:55:05.896686 2026] [security2:error] [pid 31059:tid 31059] [client 31.134.15.38:59889] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.flavornet.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.flavornet.org"] [uri "/info/104-76-7.html"] [unique_id "auLDmcOTHpgW2iy8SCtqNAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 15:42:33
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 31.134.15.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 11:42:28.978171 2026] [security2:error] [pid 20426:tid 20426] [client 31.134.15.38:46287] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.15.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 11:42:28.978171 2026] [security2:error] [pid 20426:tid 20426] [client 31.134.15.38:46287] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cityindustries.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cityindustries.com"] [uri "/about.html"] [unique_id "at905AecUxrrDf5tKh6yEwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-18 00:44:28
UTC ·
(1 month ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 03-44.31.134.15.38.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
🇳🇿
Tripwire
2026-09-15 10:12:26
UTC ·
(2 months ago)
Wordpress login attempts
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇸🇪
OnTheEdge
2026-09-09 16:14:48
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
2026-07-06 01:13:23
UTC ·
(4 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 04-13.31.134.15.38.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
2026-06-22 03:31:28
UTC ·
(4 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-31.31.134.15.38.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
🇨🇭
backslash
2026-06-16 15:33:05
UTC ·
(4 months ago)
Bad Web Bot
🇦🇺
oncord
2026-06-12 03:21:03
UTC ·
(5 months ago)
Form spam
Web Spam
2026-01-26 20:06:57
UTC ·
(9 months ago)
IM360 WAF: Attempt to upload malware
Hacking
2026-01-21 18:26:25
UTC ·
(9 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.21 is noted in report timestamp
Hacking
Brute-Force
