🇺🇸
TPI-Abuse
2026-11-12 16:07:26
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 31.154.103.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 11:07:17.682998 2026] [security2:error] [pid 31239:tid 31239] [client 31.154.103.68:53758] M ...
show more
(mod_security) mod_security (id:210350) triggered by 31.154.103.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 11:07:17.682998 2026] [security2:error] [pid 31239:tid 31239] [client 31.154.103.68:53758] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.circulodesonido.org|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.circulodesonido.org"] [uri "/"] [unique_id "avXkNflY78Vu-KUqodawLgAAAAc"], referer: https://comunidad-amalai.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇭🇺
bcsaba
2026-11-11 04:47:17
UTC ·
(3 days ago)
BadBot/Botnet member (ignoring robots.txt...)
31.154.103.68 - - [11/Nov/2026:05:47:16 +0100] "GET /attachments/article/2151/Felhivas_partnes%C3%A9gi_v%C3%A9lem%C3%A9nyezesre_HESZ_2026_mod_M7_Bujvaros.pdf HTTP/1.1" 404 146 "-" "msh-pdfmin/1"
Bad Web Bot
Exploited Host
Web App Attack
🇨🇭
backslash
2026-11-11 03:03:03
UTC ·
(3 days ago)
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
Bad Web Bot
🇺🇸
ersei.net
2026-11-10 02:45:20
UTC ·
(4 days ago)
Web app exploiting
Web App Attack
🇳🇱
IPCollective Intelligence
2026-11-10 00:50:27
UTC ·
(4 days ago)
Residential Proxy - IPCollective Intelligence
Open Proxy
2026-11-07 00:01:12
UTC ·
(1 week ago)
Search protection: facets on best-sales: 5 values in one group (limit 3) / reCAPTCHA challenge timed out
Bad Web Bot
🇺🇸
justbible
2026-11-06 17:06:57
UTC ·
(1 week ago)
HTTPS (TCP 443) scraping bot, part of a distributed and coordinated scrape: 65 requests from 2026-11-06T17:06:57+00:00 to 2026-11-11T03:10:00+00:00, e.g. 'GET /en/kjv,bbe/your-translation HTTP/2.0' with User-Agent 'Mozilla/5.0 (X11; Linux x86_64) App ...
show more
HTTPS (TCP 443) scraping bot, part of a distributed and coordinated scrape: 65 requests from 2026-11-06T17:06:57+00:00 to 2026-11-11T03:10:00+00:00, e.g. 'GET /en/kjv,bbe/your-translation HTTP/2.0' with User-Agent 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36'. Forged browser headers; spoofed user agent (did not identify itself as a bot); robots.txt ignored (a disallowed URL requested).
show less
Bad Web Bot
2026-11-06 08:03:17
UTC ·
(1 week ago)
WEB attack
Brute-Force
🇺🇸
jakob
2026-11-02 09:43:26
UTC ·
(1 week ago)
Fail2Ban rule: apache-cgit (robots.txt violation)
Bad Web Bot
🇩🇪
nyuuzyou
2026-11-01 21:27:47
UTC ·
(1 week ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-01T21:27:47Z.
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-29 18:45:51
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 31.154.103.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:45:45.937033 2026] [security2:error] [pid 32647:tid 32647] [client 31.154.103.68:41976] M ...
show more
(mod_security) mod_security (id:210350) triggered by 31.154.103.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:45:45.937033 2026] [security2:error] [pid 32647:tid 32647] [client 31.154.103.68:41976] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||solve4this.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "solve4this.com"] [uri "/"] [unique_id "auOUWUqZ2lk-8zFNdb1x9AAAAAY"], referer: https://five.co.in/redirect.php?ref_host=z3rdpst.shop
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 09:13:19
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 31.154.103.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 05:13:15.475257 2026] [security2:error] [pid 4775:tid 4775] [client 31.154.103.68:50206] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 31.154.103.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 05:13:15.475257 2026] [security2:error] [pid 4775:tid 4775] [client 31.154.103.68:50206] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gatheringsattheschool.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gatheringsattheschool.com"] [uri "/"] [unique_id "atslKzljaLpMzR8yHQQM_QAAAAs"], referer: https://missgracies.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 08:48:21
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 31.154.103.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 04:48:14.053292 2026] [security2:error] [pid 25129:tid 25129] [client 31.154.103.68:33938] M ...
show more
(mod_security) mod_security (id:210350) triggered by 31.154.103.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 04:48:14.053292 2026] [security2:error] [pid 25129:tid 25129] [client 31.154.103.68:33938] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pakistanvision.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pakistanvision.com"] [uri "/"] [unique_id "atsfTuO_QmXOgEc3z2-qNAAAAAs"], referer: https://letusbuildpakistan.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-22 14:11:42
UTC ·
(3 weeks ago)
Web app attack and vulnerability scan detected from IIS logs
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
pixelmemory.us
2026-10-21 05:07:42
UTC ·
(3 weeks ago)
2026-10-21T05:06:03 31.154.103.68 GET /Photos/Outdoors/2017-08-08%20Supermoon/raw/IMG_3681.CR2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
...
Bad Web Bot
