2026-11-13 12:50:02
UTC ·
(2 days ago)
WEB attack
Brute-Force
🇺🇸
TPI-Abuse
2026-11-11 15:13:21
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 31.134.8.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 10:13:15.217952 2026] [security2:error] [pid 27859:tid 27859] [client 31.134.8.186:18361] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.8.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 10:13:15.217952 2026] [security2:error] [pid 27859:tid 27859] [client 31.134.8.186:18361] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cbcfargo.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cbcfargo.com"] [uri "/site/Resources/devotionals/2025-06-08.php"] [unique_id "avSGC3vRDw0TSsSP0UAs6gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 03:20:45
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 31.134.8.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 23:20:38.925544 2026] [security2:error] [pid 4169:tid 4169] [client 31.134.8.186:46707] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.8.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 23:20:38.925544 2026] [security2:error] [pid 4169:tid 4169] [client 31.134.8.186:46707] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.instituteofscience.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.instituteofscience.com"] [uri "/rosenow.html"] [unique_id "auQNBrtsZsoIXKZrSbZxlwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
OnTheEdge
2026-09-14 14:30:17
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇸🇪
OnTheEdge
2026-09-14 14:30:17
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-09 18:22:56
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 31.134.8.186
2026-09-09T20:05:41+02:00 vpn Access-Reject 'eylul.ataol' station: 31.134.8.186 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redac ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 31.134.8.186
2026-09-09T20:05:41+02:00 vpn Access-Reject 'eylul.ataol' station: 31.134.8.186 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇦🇺
oncord
2026-08-10 01:26:40
UTC ·
(3 months ago)
Form spam
Web Spam
🇱🇹
Evag Touf
2026-08-09 21:19:10
UTC ·
(3 months ago)
(mod_security) mod_security triggered on hostname [redacted] 31.134.8.186 (SC/Seychelles/-)
SQL Injection
🇦🇺
oncord
2026-07-21 10:06:46
UTC ·
(3 months ago)
Form spam
Web Spam
🇩🇪
BlueWire Hosting
2026-07-01 03:10:13
UTC ·
(4 months ago)
Bad bot ignoring robot.txt
Bad Web Bot
2026-06-16 02:45:33
UTC ·
(4 months ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-03-14 10:09:36
UTC ·
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 31.134.8.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 06:09:27.343869 2026] [security2:error] [pid 7586:tid 7586] [client 31.134.8.186:37559] ModSe ...
show more
(mod_security) mod_security (id:210730) triggered by 31.134.8.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 06:09:27.343869 2026] [security2:error] [pid 7586:tid 7586] [client 31.134.8.186:37559] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Jayne/Thumbs.db"] [unique_id "abUz19sL-yeZbeB8vPS9sAAAAAQ"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Jayne/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-03-14 07:21:14
UTC ·
(8 months ago)
Bad Web Bot
🇩🇪
HandyTreff.de
2026-01-04 02:49:53
UTC ·
(10 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -51.711 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.2124.7
Bad Web Bot
Web App Attack
