🇺🇸
TPI-Abuse
2026-11-09 05:07:51
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 31.204.31.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:07:44.067011 2026] [security2:error] [pid 3881:tid 3898] [client 31.204.31.157:63285] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 31.204.31.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:07:44.067011 2026] [security2:error] [pid 3881:tid 3898] [client 31.204.31.157:63285] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tiltedfish.net"] [uri "/.git/HEAD"] [unique_id "avFVIPOQUzKvS4zlPkCO8AAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
dominioz
2026-09-23 21:40:48
UTC ·
(1 month ago)
2026-09-23 21:40:31 GET /.git/HEAD - - 31.204.31.157 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64;+rv:153.0)+Gecko/20100101+Firefox/153.0 - 301 569
...
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 07:07:06
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 31.204.31.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 03:07:00.941762 2026] [security2:error] [pid 14170:tid 14170] [client 31.204.31.157:46023] M ...
show more
(mod_security) mod_security (id:210492) triggered by 31.204.31.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 03:07:00.941762 2026] [security2:error] [pid 14170:tid 14170] [client 31.204.31.157:46023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "burke698.org"] [uri "/.git/HEAD"] [unique_id "aq40lGoyffcYBMi12_7-dQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 06:43:58
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 31.204.31.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 02:43:55.202105 2026] [security2:error] [pid 11477:tid 11477] [client 31.204.31.157:27985] M ...
show more
(mod_security) mod_security (id:210492) triggered by 31.204.31.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 02:43:55.202105 2026] [security2:error] [pid 11477:tid 11477] [client 31.204.31.157:27985] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "proprocessor.com"] [uri "/.env"] [unique_id "aquMK8dXKzRBd-TCleqIxQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-04 11:10:46
UTC ·
(3 months ago)
FortiWeb WAF: 22 attacks detected. Threat Score: 10794505. Types: Client Management(11), Signature Detection(11). Origin: United States.
Web App Attack
2026-07-22 06:11:30
UTC ·
(3 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-10 11:43:51
UTC ·
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 31.204.31.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 07:43:45.226093 2026] [security2:error] [pid 2002027:tid 2002027] [client 31.204.31.157:6376 ...
show more
(mod_security) mod_security (id:210350) triggered by 31.204.31.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 07:43:45.226093 2026] [security2:error] [pid 2002027:tid 2002027] [client 31.204.31.157:63765] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||henhousebbq.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "henhousebbq.com"] [uri "/about"] [unique_id "adjicUriQAQBFWSvSO_qGwAAAB8"], referer: https://henhousebbq.com/about
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-28 14:58:49
UTC ·
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 31.204.31.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 28 10:57:33.584547 2026] [security2:error] [pid 28461:tid 28461] [client 31.204.31.157:29887] M ...
show more
(mod_security) mod_security (id:210350) triggered by 31.204.31.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 28 10:57:33.584547 2026] [security2:error] [pid 28461:tid 28461] [client 31.204.31.157:29887] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||uphillfarmvt.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "uphillfarmvt.com"] [uri "/company-profile"] [unique_id "acfsXeh5-IhxkShX9_w_zgAAAB8"], referer: https://uphillfarmvt.com/company-profile
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-25 19:51:57
UTC ·
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 31.204.31.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 15:51:49.877131 2026] [security2:error] [pid 26205:tid 26205] [client 31.204.31.157:50905] M ...
show more
(mod_security) mod_security (id:210350) triggered by 31.204.31.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 15:51:49.877131 2026] [security2:error] [pid 26205:tid 26205] [client 31.204.31.157:50905] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||1healthplace.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "1healthplace.com"] [uri "/"] [unique_id "acQ81bcHockBtd4woOv7ZQAAABQ"], referer: https://1healthplace.com
show less
Brute-Force
Bad Web Bot
Web App Attack
