🇺🇸
TPI-Abuse
2026-11-11 16:13:11
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210350) triggered by 31.134.8.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 11:13:05.611774 2026] [security2:error] [pid 25519:tid 25519] [client 31.134.8.86:22431] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.8.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 11:13:05.611774 2026] [security2:error] [pid 25519:tid 25519] [client 31.134.8.86:22431] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||addisonchiropracticcenter.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "addisonchiropracticcenter.com"] [uri "/about.htm"] [unique_id "avSUEa1UpugJp7kam1-WjAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 06:43:33
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 31.134.8.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 01:43:23.731185 2026] [security2:error] [pid 8247:tid 8247] [client 31.134.8.86:33561] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.8.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 01:43:23.731185 2026] [security2:error] [pid 8247:tid 8247] [client 31.134.8.86:33561] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cometoorderva.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cometoorderva.com"] [uri "/featured-product-hanging-storage-pockets/"] [unique_id "avQOi8ACUXOAgsvsjAT1IQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 05:33:38
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 31.134.8.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:33:30.691738 2026] [security2:error] [pid 21279:tid 21279] [client 31.134.8.86:64885] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.8.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:33:30.691738 2026] [security2:error] [pid 21279:tid 21279] [client 31.134.8.86:64885] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||painting-with-numbers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "painting-with-numbers.com"] [uri "/blog/home-values"] [unique_id "avKsqs6IQFbLuqUS25NofwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-29 13:12:27
UTC ·
(2 weeks ago)
Suspicious Edge user agent: outdated major version 134 (oldest supported 152); missing Accept-Language header; missing Sec-Fetch headers
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 23:55:19
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 31.134.8.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 19:55:16.145401 2026] [security2:error] [pid 20123:tid 20123] [client 31.134.8.86:29423] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.8.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 19:55:16.145401 2026] [security2:error] [pid 20123:tid 20123] [client 31.134.8.86:29423] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ohwaitiforgot.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ohwaitiforgot.com"] [uri "/2014/10/01/2014-book-51-authority/"] [unique_id "auKLZMMP1P0Sz3bQN3wHrQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 14:27:38
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 31.134.8.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:27:35.440192 2026] [security2:error] [pid 5938:tid 5938] [client 31.134.8.86:9763] ModSecur ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.8.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:27:35.440192 2026] [security2:error] [pid 5938:tid 5938] [client 31.134.8.86:9763] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ncparanormalresearch.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ncparanormalresearch.com"] [uri "/shipyard.htm"] [unique_id "atDi1z78jpGlvu5oNh2XfgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-07 20:25:11
UTC ·
(1 month ago)
SSH tarpit (endlessh) connection from 31.134.8.86
Brute-Force
SSH
🇫🇮
JimArchon72
2026-07-03 03:10:03
UTC ·
(4 months ago)
2026/07/03 03:08:22 "GET /wp-login.php?action=register HTTP/1.1"
Web App Attack
🇨🇭
backslash
2026-03-14 07:21:16
UTC ·
(7 months ago)
Bad Web Bot
🇨🇭
backslash
2026-01-04 06:58:20
UTC ·
(10 months ago)
Bad Web Bot
🇫🇷
masterguru
2025-12-23 11:09:32
UTC ·
(10 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 31.134.8.86 (RU/Russia/-): 1 in the last 3600 secs (0-193)
Hacking
2025-12-11 08:50:57
UTC ·
(11 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.11 is noted in report timestamp
Hacking
Brute-Force
2025-12-02 06:37:35
UTC ·
(11 months ago)
IM360 WAF: Attempt to upload malware
Hacking
2025-11-30 15:16:35
UTC ·
(11 months ago)
IM360 WAF: Attempt to upload malware
Hacking
2025-11-20 08:56:50
UTC ·
(11 months ago)
IM360 WAF: Attempt to upload malware
Hacking
