31.134.4.84

(mod_security) mod_security (id:210350) triggered by 31.134.4.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 03:23:43.329811 2026] [security2:error] [pid 20812:tid 20812] [client 31.134.4.84:48367] ModSe ... show more (mod_security) mod_security (id:210350) triggered by 31.134.4.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 03:23:43.329811 2026] [security2:error] [pid 20812:tid 20812] [client 31.134.4.84:48367] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.easy2surf.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.easy2surf.com"] [uri "/cgi-bin/tzcount.cgi"] [unique_id "avV3j3iusGhLQP4j98iI7wAAAB4"] show less

31.134.4.84 - - [03/Nov/2026:05:59:00 +0100] "GET /stop-al-fumo-nelle-aree-pubbliche-comunali/ HTTP/1.1" 404 13421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" ...

(mod_security) mod_security (id:210350) triggered by 31.134.4.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:32:44.218357 2026] [security2:error] [pid 26732:tid 26732] [client 31.134.4.84:24241] ModSe ... show more (mod_security) mod_security (id:210350) triggered by 31.134.4.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:32:44.218357 2026] [security2:error] [pid 26732:tid 26732] [client 31.134.4.84:24241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tobyjohnson.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tobyjohnson.com"] [uri "/review-lake-recreations.html"] [unique_id "aukrrL6UPxBgHuFOqSgwpwAAADY"] show less

(mod_security) mod_security (id:210350) triggered by 31.134.4.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 19:48:15.438427 2026] [security2:error] [pid 31003:tid 31003] [client 31.134.4.84:11881] ModSe ... show more (mod_security) mod_security (id:210350) triggered by 31.134.4.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 19:48:15.438427 2026] [security2:error] [pid 31003:tid 31003] [client 31.134.4.84:11881] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.glendaleheritage.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.glendaleheritage.org"] [uri "/glendale/events/women-of-glendale/elizabeth-igler-whitesides/"] [unique_id "auKJv4DB71f9jH5A6XqoZQAAAAk"] show less

Try to access /xmlrpc.php

(mod_security) mod_security (id:210350) triggered by 31.134.4.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:06:28.001705 2026] [security2:error] [pid 14159:tid 14159] [client 31.134.4.84:34331] ModSe ... show more (mod_security) mod_security (id:210350) triggered by 31.134.4.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:06:28.001705 2026] [security2:error] [pid 14159:tid 14159] [client 31.134.4.84:34331] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.comsew.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.comsew.com.au"] [uri "/products/cable-stockings/"] [unique_id "atDd45Gjrbw-YdguPXxCfAAAACQ"] show less

Unauthorized VPN login attempts: 1 attempts were recorded from 31.134.4.84 2026-09-13T03:31:31+02:00 vpn Access-Reject 'bpurrier' station: 31.134.4.84 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'

Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257

Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257

31.134.4.84 - - [04/Sep/2026:00:19:26 +0000] "GET /mod/forum/view.php?id=262&o=1%25%22%29%29%20AND%20UPDATEXML%285722%2CCONCAT%280x7e%2C%28%28SELECT%20%28ELT%285722%3D5722%2C1%29%29%29%29%2C0x7e%29%2C1%29--%20-&p=2 HTTP/1.1" 200 23023 "-" "Mozilla/5. ... show more 31.134.4.84 - - [04/Sep/2026:00:19:26 +0000] "GET /mod/forum/view.php?id=262&o=1%25%22%29%29%20AND%20UPDATEXML%285722%2CCONCAT%280x7e%2C%28%28SELECT%20%28ELT%285722%3D5722%2C1%29%29%29%29%2C0x7e%29%2C1%29--%20-&p=2 HTTP/1.1" 200 23023 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 31.134.4.84 - - [04/Sep/2026:00:19:26 +0000] "GET /mod/forum/view.php?id=262%25%22%29%29%20AND%20UPDATEXML%281200%2CCONCAT%280x7e%2C%28%28SELECT%20%28ELT%281200%3D1200%2C1%29%29%29%29%2C0x7e%29%2C1%29--%20-&o=1&p=2 HTTP/1.1" 200 23024 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:121.0) Gecko/20100101 Firefox/121.0" 31.134.4.84 - - [04/Sep/2026:00:19:27 +0000] "GET /mod/forum/view.php?id=262%60%29%29%20AND%20UPDATEXML%289020%2CCONCAT%280x7e%2C%28%28SELECT%20%28ELT%289020%3D9020%2C1%29%29%29%29%2C0x7e%29%2C1%29--%20-&o=1&p=2 HTTP/1.1" 200 23021 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, lik ... show less

Geo Block Plugin: Escalation flag(s): rce_attempt

Form spam

(mod_security) mod_security (id:210350) triggered by 31.134.4.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 21 18:58:30.492760 2025] [security2:error] [pid 4141:tid 4141] [client 31.134.4.84:40343] ModSecu ... show more (mod_security) mod_security (id:210350) triggered by 31.134.4.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 21 18:58:30.492760 2025] [security2:error] [pid 4141:tid 4141] [client 31.134.4.84:40343] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.holistichealth4u2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.holistichealth4u2.com"] [uri "/"] [unique_id "aPgQFj2zhcGPnM4lrMVkuAAAAAk"] show less