🇺🇸
TPI-Abuse
2026-11-09 01:49:40
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 31.134.8.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:49:34.005803 2026] [security2:error] [pid 13921:tid 13921] [client 31.134.8.63:64069] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.8.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:49:34.005803 2026] [security2:error] [pid 13921:tid 13921] [client 31.134.8.63:64069] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bodybuildbid.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bodybuildbid.com"] [uri "/articles/contresults/2003jantanafigure.html"] [unique_id "avEmrt6xd8piM70YelOROQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 07:34:52
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 31.134.8.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 03:34:46.993427 2026] [security2:error] [pid 29742:tid 29742] [client 31.134.8.63:37245] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.8.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 03:34:46.993427 2026] [security2:error] [pid 29742:tid 29742] [client 31.134.8.63:37245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||modmove.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "modmove.com"] [uri "/reviews/batman-vs-superman-dawn-of-justice/"] [unique_id "auWaFj0XTzB8JjX3X6Em_AAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 11:17:17
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 31.134.8.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 07:17:14.261343 2026] [security2:error] [pid 17292:tid 17292] [client 31.134.8.63:14713] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.8.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 07:17:14.261343 2026] [security2:error] [pid 17292:tid 17292] [client 31.134.8.63:14713] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.flavornet.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.flavornet.org"] [uri "/info/505-57-7.html"] [unique_id "auHZuvO0qtuDXsD2SLwNnwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 10:03:26
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 31.134.8.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 06:03:19.219987 2026] [security2:error] [pid 10977:tid 10977] [client 31.134.8.63:47753] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.8.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 06:03:19.219987 2026] [security2:error] [pid 10977:tid 10977] [client 31.134.8.63:47753] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vexxarr.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vexxarr.com"] [uri "/archive.php"] [unique_id "atc8Z0f22OYcw7wt5DmF1AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-10-04 04:11:09
UTC ·
(1 month ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇨🇿
Countryman
2026-09-14 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-13 10:51:17
UTC ·
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 31.134.8.63
2026-09-13T11:38:28+02:00 vpn Access-Reject '25-400-3-02-1233' station: 31.134.8.63 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<re ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 31.134.8.63
2026-09-13T11:38:28+02:00 vpn Access-Reject '25-400-3-02-1233' station: 31.134.8.63 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇩🇪
NxtGenIT
2026-09-11 01:33:19
UTC ·
(1 month ago)
CiscoASA Honeypot hit, Payload: "GET /+CSCOE+/logon.html HTTP/1.1" 302 -,
Brute-Force
🇬🇧
consul.to
2026-07-17 19:16:32
UTC ·
(3 months ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
LRob
2026-06-10 19:15:05
UTC ·
(5 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-03-14 07:21:15
UTC ·
(7 months ago)
Bad Web Bot
🇩🇪
Skyrider
2026-03-08 11:44:16
UTC ·
(8 months ago)
crowdsecurity/http-admin-interface-probing
Hacking
🇮🇩
BPS-StatisticsIndonesia
2026-03-02 10:14:43
UTC ·
(8 months ago)
WP Login Scan Activities: "2026-03-02T17:14:43.421+07:00" "/wp-login.php" "31.134.8.63" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2026-02-01 00:48:19
UTC ·
(9 months ago)
WP Login Scan Activities
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2026-01-24 13:55:28
UTC ·
(9 months ago)
WP Login Scan Activities
Web App Attack
