🇺🇸
TPI-Abuse
2026-11-10 07:33:16
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 31.134.6.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:33:11.351961 2026] [security2:error] [pid 1031:tid 1031] [client 31.134.6.164:22009] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.6.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:33:11.351961 2026] [security2:error] [pid 1031:tid 1031] [client 31.134.6.164:22009] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.oposicionesyconcursos.es|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.oposicionesyconcursos.es"] [uri "/buscador-administrativo-salamanca.php"] [unique_id "avLIt6396IE4Dqck654i4AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 16:37:19
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 31.134.6.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:37:16.102688 2026] [security2:error] [pid 9530:tid 9530] [client 31.134.6.164:22629] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.6.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:37:16.102688 2026] [security2:error] [pid 9530:tid 9530] [client 31.134.6.164:22629] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ictsl.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ictsl.net"] [uri "/productos/plastico/pipetagraduadaplasticopsesterilparaleche.html"] [unique_id "avH2vPixwGSsDyj1phNRQwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 20:53:46
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 31.134.6.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 15:53:42.985129 2026] [security2:error] [pid 8024:tid 8024] [client 31.134.6.164:43003] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.6.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 15:53:42.985129 2026] [security2:error] [pid 8024:tid 8024] [client 31.134.6.164:43003] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/progressivism/"] [unique_id "auzs1g4nJ9N9U1ruUOMtTAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-03 02:05:29
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 06:44:09
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 31.134.6.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 02:44:04.773766 2026] [security2:error] [pid 15956:tid 15956] [client 31.134.6.164:45799] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.6.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 02:44:04.773766 2026] [security2:error] [pid 15956:tid 15956] [client 31.134.6.164:45799] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ctrussell.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ctrussell.us"] [uri "/ctrussell/ctrussell.nsf/22284ee7f683acc9862566bd000b278c/11b6bd7bb4c93062862566c500145d93"] [unique_id "auWONFBshio2bjXY3CNC1wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 18:45:33
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 31.134.6.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 14:45:27.186494 2026] [security2:error] [pid 4269:tid 4269] [client 31.134.6.164:59021] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.6.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 14:45:27.186494 2026] [security2:error] [pid 4269:tid 4269] [client 31.134.6.164:59021] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||borzoi-pedigree.batw.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "borzoi-pedigree.batw.net"] [uri "/pedstore/l/LadyCoquetteofKeyFarm.html"] [unique_id "at5OR4PYc9juFnAnP_N0UAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-14 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇭
SOC [GOLINE SA]
2026-09-09 14:10:20
UTC ·
(2 months ago)
[RoutePulse | 2026-09-09T14:10:19Z | RTBH-INJECTED]
ATTACK CLASS: vpn_bruteforce
SOURCE: 31.134.6.164
EVIDENCE: Shunned on the Cisco FTD VPN gateway — Cisco VPN RA Brute force on Cisco FTDv — distributed attack (3 attempts/15min) — shun on the VPN ga ...
show more
[RoutePulse | 2026-09-09T14:10:19Z | RTBH-INJECTED]
ATTACK CLASS: vpn_bruteforce
SOURCE: 31.134.6.164
EVIDENCE: Shunned on the Cisco FTD VPN gateway — Cisco VPN RA Brute force on Cisco FTDv — distributed attack (3 attempts/15min) — shun on the VPN gateway
DETECTION: Conviction Engine SPRT + 14-detector ML stack (6-model weighted ensemble) + 5-pillar threat scoring
ACTION: BGP null route injected at RoutePulse network edge
show less
Brute-Force
Hacking
🇨🇿
lp
2026-09-08 00:21:33
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 31.134.6.164
2026-09-08T01:50:43+02:00 vpn Access-Reject 'testing' station: 31.134.6.164 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted> ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 31.134.6.164
2026-09-08T01:50:43+02:00 vpn Access-Reject 'testing' station: 31.134.6.164 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇫🇮
inlink.ltd
2026-05-31 22:50:44
UTC ·
(5 months ago)
Known malicious PHP file or CMS probe
Web App Attack
🇺🇸
TRoden
2026-03-17 13:15:31
UTC ·
(7 months ago)
Geo Block Plugin: Escalation flag(s): rce_attempt
Hacking
2025-12-22 05:59:17
UTC ·
(10 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-59.31.134.6.164.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
🇦🇺
oncord
2025-12-17 04:20:04
UTC ·
(10 months ago)
Form spam
Web Spam
🇺🇸
nowyouknow
2025-12-03 06:37:31
UTC ·
(11 months ago)
(From [email protected] ) Hey there,
We are a financial services and advisory firm mandated by our investors to seek business opportunities and projects for possible funding and debt capital financing.
Please note that our investors a ...
show more
(From [email protected] ) Hey there,
We are a financial services and advisory firm mandated by our investors to seek business opportunities and projects for possible funding and debt capital financing.
Please note that our investors are from the Gulf region. They intend to invest in viable business ventures or projects that you are currently executing or plan to embark upon as a means of expanding your (their) global portfolio.
We are eager to have more discussions on this subject in any way you believe suitable.
Please get in touch with me at my direct email: [email protected]
Looking forward to working with you.
Cheers,
Mr. Nassar Jaralla Al-Marri
Financial Advisor
Dejla Consulting LLC
Please Reply to: [email protected]
Let's turn your ideas into reality!
show less
Phishing
Web Spam
2025-11-21 05:33:17
UTC ·
(11 months ago)
wordpress-trap
Web App Attack
