🇺🇸
TPI-Abuse
2026-10-26 15:52:42
(8 hours ago)
(mod_security) mod_security (id:210350) triggered by 31.134.4.37 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.4.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 11:52:34.414845 2026] [security2:error] [pid 11685:tid 11685] [client 31.134.4.37:36649] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kitebeach.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kitebeach.com"] [uri "/robots.txt"] [unique_id "at93Qpxro-eZ2r3znaLvygAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 17:16:52
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 31.134.4.37 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.4.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 13:16:48.680395 2026] [security2:error] [pid 10956:tid 10956] [client 31.134.4.37:49141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||comics.flyingdodostudio.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "comics.flyingdodostudio.com"] [uri "/Friends/aboutcomic.html"] [unique_id "atzoAMOk-ojWfn77H2p68gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-12 00:10:01
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
agabeckov
2026-09-11 06:00:32
(1 month ago)
Fail2Ban detected brute-force attempt on Cisco Anyconnect
VPN IP
Brute-Force
🇦🇺
MAGIC
2026-06-04 00:26:53
(4 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇬🇧
consul.to
2026-05-14 15:49:41
(5 months ago)
Web attack/malicious scanning detected
Web App Attack
2026-05-11 08:44:08
(5 months ago)
Forum/form spam
Web Spam
🇹🇷
Detmach
2026-04-30 00:40:48
(5 months ago)
Security attack detected. Multiple failed attempts from 31.134.4.37. IP banned for 1440 minutes at 3 ...
show more
Security attack detected. Multiple failed attempts from 31.134.4.37. IP banned for 1440 minutes at 30.04.2026 03:39:55. Failed attempts: 1
show less
Brute-Force
🇺🇸
oralunal
2026-03-24 16:46:49
(7 months ago)
IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds
...
Bad Web Bot
Web App Attack
2026-01-22 03:28:27
(9 months ago)
Attempted brute force login to web vpn 2 time(s); last attempt for 2026.01.22 is noted in report tim ...
show more
Attempted brute force login to web vpn 2 time(s); last attempt for 2026.01.22 is noted in report timestamp
show less
Hacking
Brute-Force
2025-11-08 21:01:46
(11 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇺🇸
TPI-Abuse
2025-10-28 04:33:59
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 31.134.4.37 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 31.134.4.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 00:33:55.327393 2025] [security2:error] [pid 1155789:tid 1155789] [client 31.134.4.37:62771] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||harvestfrc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "harvestfrc.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQBHs3SRAdLlGT0F5nC7RwAAAAo"], referer: https://harvestfrc.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-08-04 20:30:43
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-06-23 12:00:00
(1 year ago)
Message meets Alert condition
The following critical firewall event was detected: SSL VPN login fai ...
show more
Message meets Alert condition
The following critical firewall event was detected: SSL VPN login fail.
date=2025-06-23 time=06:14:27 devname=FortiGate-200F devid=FG200FT922906136 eventtime=1750677267742195826 tz="-0500" logid="0101039426" type="event" subtype="vpn" level="alert" vd="root" logdesc="SSL VPN login fail" action="ssl-login-fail" tunneltype="ssl-web" tunnelid=0 remip=31.134.4.37 srccountry="United States" user="emiller" group="N/A" dst_host="N/A" reason="sslvpn_login_unknown_user" msg="SSL user failed to logged in"
show less
VPN IP