🇺🇸
TPI-Abuse
2026-11-08 12:13:32
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 130.49.10.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 07:13:28.472875 2026] [security2:error] [pid 28330:tid 28330] [client 130.49.10.220:50017] M ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.10.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 07:13:28.472875 2026] [security2:error] [pid 28330:tid 28330] [client 130.49.10.220:50017] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fgrotary.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fgrotary.org"] [uri "/speaker/pacific-university-amigos-rotary-scholarship-winners/"] [unique_id "avBnaCk4ED7HHCq9naQUCQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 17:39:42
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 130.49.10.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 12:39:37.843708 2026] [security2:error] [pid 597:tid 597] [client 130.49.10.220:63007] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.10.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 12:39:37.843708 2026] [security2:error] [pid 597:tid 597] [client 130.49.10.220:63007] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.guardmagic.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.guardmagic.com"] [uri "/01-engl/01e-shortly/1-monitoring-platform/0e-monitoring-platform.htm"] [unique_id "aujK2ZtutbV5N4SLJ4QCjwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
Origon
2026-11-01 17:28:33
UTC ·
(1 week ago)
http-bad-user-agent - IP: 130.49.10.220 - time="2026-11-01T18:28:32+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 130.49.10.220 (NL/59651) : 4h ban on Ip 130.49.10.220" mod ...
show more
http-bad-user-agent - IP: 130.49.10.220 - time="2026-11-01T18:28:32+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 130.49.10.220 (NL/59651) : 4h ban on Ip 130.49.10.220" module=db
show less
Bad Web Bot
🇩🇪
rh24
2026-10-31 21:16:49
UTC ·
(1 week ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 130.49.10.220 (NL/The Netherlands/-)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-31 10:11:16
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 130.49.10.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 06:11:10.740137 2026] [security2:error] [pid 3707:tid 3707] [client 130.49.10.220:26113] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.10.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 06:11:10.740137 2026] [security2:error] [pid 3707:tid 3707] [client 130.49.10.220:26113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ahuramazda.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ahuramazda.com"] [uri "/calendar.htm"] [unique_id "auW-viUoPKvcMH3g-h9nvwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 05:50:32
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 130.49.10.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 01:50:25.448365 2026] [security2:error] [pid 12369:tid 12369] [client 130.49.10.220:28933] M ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.10.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 01:50:25.448365 2026] [security2:error] [pid 12369:tid 12369] [client 130.49.10.220:28933] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||persnicketyinc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "persnicketyinc.com"] [uri "/tag/legal/"] [unique_id "auQwIVpMl9wB774u1DZ1ugAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 02:31:09
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 130.49.10.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 22:31:05.446369 2026] [security2:error] [pid 6302:tid 6302] [client 130.49.10.220:65003] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.10.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 22:31:05.446369 2026] [security2:error] [pid 6302:tid 6302] [client 130.49.10.220:65003] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.flavornet.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.flavornet.org"] [uri "/info/2111-75-3.html"] [unique_id "auQBafrdPjmIk-cOCsiNXQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-10-23 06:41:33
UTC ·
(2 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-10-23 00:10:01
UTC ·
(2 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-10-15 14:04:15
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 130.49.10.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:04:06.564860 2026] [security2:error] [pid 17221:tid 17221] [client 130.49.10.220:45329] M ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.10.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:04:06.564860 2026] [security2:error] [pid 17221:tid 17221] [client 130.49.10.220:45329] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||instituteofscience.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "instituteofscience.com"] [uri "/sce.html"] [unique_id "atDdVtBQp5IMcF9WZuwXXAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Roderic
2026-10-15 01:46:20
UTC ·
(3 weeks ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted])
Bad Web Bot
🇨🇿
Countryman
2026-10-13 00:10:02
UTC ·
(3 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-10-11 22:22:50
UTC ·
(4 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇳🇱
BlueWire Hosting
2026-10-08 21:59:10
UTC ·
(1 month ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇩🇪
rh24
2026-10-01 05:53:40
UTC ·
(1 month ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 130.49.10.220 (-)
Bad Web Bot
