🇺🇸
TPI-Abuse
2026-11-10 03:33:59
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 31.134.7.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:33:55.036343 2026] [security2:error] [pid 29201:tid 29201] [client 31.134.7.224:40199] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.7.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:33:55.036343 2026] [security2:error] [pid 29201:tid 29201] [client 31.134.7.224:40199] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pleaseaddbacon.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pleaseaddbacon.com"] [uri "/2011/09/have-you-ever-had-gravlax-well-now-you-can-recipe/"] [unique_id "avKQo-Lj2cSIbPbPfLab2AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 16:27:21
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 31.134.7.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 11:27:17.724151 2026] [security2:error] [pid 7302:tid 7307] [client 31.134.7.224:33849] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.7.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 11:27:17.724151 2026] [security2:error] [pid 7302:tid 7307] [client 31.134.7.224:33849] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ennerdale.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ennerdale.org"] [uri "/Manorial-Rights.html"] [unique_id "audoZUo6noHabbcJBdGKKwAAAQM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 13:56:39
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 31.134.7.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 09:56:31.419267 2026] [security2:error] [pid 1610:tid 1610] [client 31.134.7.224:63389] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.7.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 09:56:31.419267 2026] [security2:error] [pid 1610:tid 1610] [client 31.134.7.224:63389] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.studioarts.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.studioarts.net"] [uri "/calligraphy/moneytips.html"] [unique_id "auNQj2RlrunhQDASUEW9eQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 00:02:33
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 31.134.7.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 20:02:29.687996 2026] [security2:error] [pid 18995:tid 18995] [client 31.134.7.224:17021] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.7.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 20:02:29.687996 2026] [security2:error] [pid 18995:tid 18995] [client 31.134.7.224:17021] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.testrong.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.testrong.com"] [uri "/forum3/index.php"] [unique_id "auE7lfrYtDRo8ZEjptKyegAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 20:25:32
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 31.134.7.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 16:25:27.831646 2026] [security2:error] [pid 6345:tid 6345] [client 31.134.7.224:63233] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.7.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 16:25:27.831646 2026] [security2:error] [pid 6345:tid 6345] [client 31.134.7.224:63233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ergo84.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ergo84.com"] [uri "/lpchealth1/mod8.html"] [unique_id "atkft_1qcwVM8IgjuqW3TAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-09-15 03:23:03
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 31.134.7.224
2026-09-15T04:16:21+02:00 vpn Access-Reject 'Usuario43' station: 31.134.7.224 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacte ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 31.134.7.224
2026-09-15T04:16:21+02:00 vpn Access-Reject 'Usuario43' station: 31.134.7.224 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-15T04:17:44+02:00 vpn Access-Reject 'Usuario44' station: 31.134.7.224 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-09-13 03:22:30
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 31.134.7.224
2026-09-13T04:24:23+02:00 vpn Access-Reject 'GerenciaEldPablo' station: 31.134.7.224 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '< ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 31.134.7.224
2026-09-13T04:24:23+02:00 vpn Access-Reject 'GerenciaEldPablo' station: 31.134.7.224 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
agabeckov
2026-09-10 22:09:10
UTC ·
(2 months ago)
Fail2Ban detected brute-force attempt on Cisco Anyconnect
VPN IP
Brute-Force
🇬🇧
relianoid.com
2026-08-07 18:32:02
UTC ·
(3 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇬🇧
relianoid.com
2026-07-17 10:37:43
UTC ·
(3 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇬🇧
relianoid.com
2026-05-24 17:00:15
UTC ·
(5 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇫🇷
Tilellit.PRO
2026-05-18 08:27:42
UTC ·
(5 months ago)
Fail2Ban banned 31.134.7.224 for security violations in jail wp-armour. Log: 2026/05/18 08:27:42 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 31.134.7.224 | Target: wplogin" , client: 31.134.7.224, server: [REDACTED], request: "P ...
show more
Fail2Ban banned 31.134.7.224 for security violations in jail wp-armour. Log: 2026/05/18 08:27:42 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 31.134.7.224 | Target: wplogin" , client: 31.134.7.224, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇮🇹
LTM
2026-05-11 06:20:01
UTC ·
(6 months ago)
WebServer - Attempts to exploit
Hacking
Brute-Force
Web App Attack
