🇺🇸
TPI-Abuse
2026-11-11 16:57:26
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 130.49.10.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 11:57:19.253322 2026] [security2:error] [pid 27537:tid 27537] [client 130.49.10.99:40005] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.10.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 11:57:19.253322 2026] [security2:error] [pid 27537:tid 27537] [client 130.49.10.99:40005] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cchockeyhistory.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cchockeyhistory.org"] [uri "/Timeline/1980s.htm"] [unique_id "avSebyP-tLqBjIhymDxvHwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 19:56:17
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 130.49.10.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 14:56:10.202270 2026] [security2:error] [pid 23785:tid 23785] [client 130.49.10.99:60711] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.10.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 14:56:10.202270 2026] [security2:error] [pid 23785:tid 23785] [client 130.49.10.99:60711] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2013/12/18/recovery-accomplished-rich/"] [unique_id "auuN2q11jPd-B2HvEkcfUgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 06:58:44
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 130.49.10.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 01:58:38.465252 2026] [security2:error] [pid 13890:tid 13890] [client 130.49.10.99:46763] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.10.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 01:58:38.465252 2026] [security2:error] [pid 13890:tid 13890] [client 130.49.10.99:46763] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||modmove.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "modmove.com"] [uri "/news/watch-the-trailer-for-in-the-name-of-the-land/"] [unique_id "aumGHst_fR4ltIngP0qHywAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2026-10-23 08:07:45
UTC ·
(3 weeks ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇨🇦
Mediashaker
2026-10-23 05:18:54
UTC ·
(3 weeks ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 130.49.10.99 (-)
Bad Web Bot
🇫🇮
inlink.ltd
2026-08-12 00:58:02
UTC ·
(3 months ago)
Known malicious PHP file or CMS probe
Web App Attack
🇩🇪
stinpriza
2026-08-01 13:23:55
UTC ·
(3 months ago)
Web App Attack
Web App Attack
2026-07-23 03:34:39
UTC ·
(3 months ago)
Suspicious or malicious traffic has been detected
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 12:38:47
UTC ·
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.10.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 08:38:42.429727 2026] [security2:error] [pid 17314:tid 17314] [client 130.49.10.99:22001] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.10.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 08:38:42.429727 2026] [security2:error] [pid 17314:tid 17314] [client 130.49.10.99:22001] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||moellerlaw.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "moellerlaw.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akEV0ltDOoUDOAjtfkMXJQAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 16:08:04
UTC ·
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.10.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 12:07:59.980880 2026] [security2:error] [pid 8008:tid 8008] [client 130.49.10.99:56059] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.10.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 12:07:59.980880 2026] [security2:error] [pid 8008:tid 8008] [client 130.49.10.99:56059] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||toyz.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "toyz.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajVpX4KzpiUSa4KX-J4MHgAAAAw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-02-07 00:21:20
UTC ·
(9 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 130.49.10.99 (NL/The Netherlands/-): 1 in the last 3600 secs (0-195)
Hacking
🇫🇷
masterguru
2026-02-06 23:58:41
UTC ·
(9 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 130.49.10.99 (NL/The Netherlands/-): 1 in the last 3600 secs (0-196)
Hacking
🇫🇷
masterguru
2026-02-06 23:09:27
UTC ·
(9 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 130.49.10.99 (NL/The Netherlands/-): 1 in the last 3600 secs (0-193)
Hacking
🇫🇷
masterguru
2026-02-06 22:39:41
UTC ·
(9 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 130.49.10.99 (NL/The Netherlands/-): 1 in the last 3600 secs (0-197)
Hacking
🇪🇸
10dencehispahard SL
2026-01-28 06:51:52
UTC ·
(9 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
