🇺🇸
TPI-Abuse
2026-11-14 22:32:06
UTC ·
(9 minutes ago)
(mod_security) mod_security (id:210350) triggered by 31.134.4.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 17:32:02.504064 2026] [security2:error] [pid 14190:tid 14190] [client 31.134.4.54:11989] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.4.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 17:32:02.504064 2026] [security2:error] [pid 14190:tid 14190] [client 31.134.4.54:11989] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wildlifetaxidermy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wildlifetaxidermy.com"] [uri "/F-208-DALL-SHEEP-HEAD.html"] [unique_id "avjhYhQWrTiUmP10O6vuHwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 03:35:54
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 31.134.4.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 22:35:50.142756 2026] [security2:error] [pid 22481:tid 22481] [client 31.134.4.54:11765] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.4.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 22:35:50.142756 2026] [security2:error] [pid 22481:tid 22481] [client 31.134.4.54:11765] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hanabritgermanshepherds.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hanabritgermanshepherds.com"] [uri "/index.php/foster-program"] [unique_id "avPiltKdPcwpEF9Pydg5qAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 04:03:51
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 31.134.4.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:03:43.453026 2026] [security2:error] [pid 4443:tid 4443] [client 31.134.4.54:18991] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.4.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:03:43.453026 2026] [security2:error] [pid 4443:tid 4443] [client 31.134.4.54:18991] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||celebritybikinigossip.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "celebritybikinigossip.com"] [uri "/2011/09/paz-vega-bikini-pictures/"] [unique_id "avKXn7RLGpiLYJ68-ZiSGgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 11:34:35
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 31.134.4.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:34:27.786388 2026] [security2:error] [pid 16097:tid 16097] [client 31.134.4.54:9057] ModSec ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.4.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:34:27.786388 2026] [security2:error] [pid 16097:tid 16097] [client 31.134.4.54:9057] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rcjlawfirm.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rcjlawfirm.com"] [uri "/1/post/2023/07/how-to-setup-your-business-and-related-real-estate.html"] [unique_id "avGvwx7o1na_tPqYTFpvTAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-09 00:58:57
UTC ·
(5 days ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 14:08:31
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210350) triggered by 31.134.4.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:08:18.090864 2026] [security2:error] [pid 9514:tid 9514] [client 31.134.4.54:36537] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.4.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:08:18.090864 2026] [security2:error] [pid 9514:tid 9514] [client 31.134.4.54:36537] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||johnmueller.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "johnmueller.org"] [uri "/SAFS2003/Pagliaro-NP.html"] [unique_id "atDeUsFjRUwtKNPbqVmxTAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-16 00:10:02
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-14 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-11 03:22:42
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 31.134.4.54
2026-09-11T05:12:42+02:00 vpn Access-Reject 'hjim' station: 31.134.4.54 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
Brute-Force
Web App Attack
🇺🇸
oncord
2026-08-10 02:43:24
UTC ·
(3 months ago)
Form spam
Web Spam
🇩🇪
C C
2026-08-06 22:23:08
UTC ·
(3 months ago)
Distributed scraping attack: 3436 req from 3224 rotating proxy IPs, waves of up to 156 req in 138s on a single URL | this IP: 1 req, 1 blocked
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-06-05 15:48:00
UTC ·
(5 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇨🇭
backslash
2026-04-29 07:51:00
UTC ·
(6 months ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot
2025-12-16 20:58:12
UTC ·
(10 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.16 is noted in report timestamp
Hacking
Brute-Force
2025-12-05 10:10:47
UTC ·
(11 months ago)
IM360 WAF: Attempt to upload malware
Hacking
