🇺🇸
TPI-Abuse
2026-11-11 04:41:27
UTC ·
(46 minutes ago)
(mod_security) mod_security (id:210350) triggered by 130.49.113.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 23:41:19.510526 2026] [security2:error] [pid 26675:tid 26675] [client 130.49.113.55:11789] M ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.113.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 23:41:19.510526 2026] [security2:error] [pid 26675:tid 26675] [client 130.49.113.55:11789] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||family.hatfulofrain.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "family.hatfulofrain.com"] [uri "/cermotto"] [unique_id "avPx73cwYknibI0ZZrA4WQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Zandro
2026-11-11 04:00:14
UTC ·
(1 hour ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-11-05 20:36:04
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 130.49.113.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 15:35:56.383626 2026] [security2:error] [pid 32263:tid 32263] [client 130.49.113.55:9421] Mo ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.113.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 15:35:56.383626 2026] [security2:error] [pid 32263:tid 32263] [client 130.49.113.55:9421] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cosplayculture.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cosplayculture.com"] [uri "/2017/10/02/what-to-get-a-cosplayer-for-christmas/"] [unique_id "auzorIPMWqFUU3q58jfRcgAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 17:53:35
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 130.49.113.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 12:53:31.631409 2026] [security2:error] [pid 10474:tid 10474] [client 130.49.113.55:23893] M ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.113.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 12:53:31.631409 2026] [security2:error] [pid 10474:tid 10474] [client 130.49.113.55:23893] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||meganmurph.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "meganmurph.com"] [uri "/2020/04/14/endowed-by-their-creator-with-certain-inalienable-rights/"] [unique_id "auzCm7AbRw7qwghHzHaYRAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 10:42:20
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 130.49.113.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 06:42:11.620998 2026] [security2:error] [pid 6449:tid 6449] [client 130.49.113.55:9059] ModS ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.113.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 06:42:11.620998 2026] [security2:error] [pid 6449:tid 6449] [client 130.49.113.55:9059] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.southamericanfiesta.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.southamericanfiesta.com"] [uri "/destinations/ecuador/faces_ecuador_1.htm"] [unique_id "auHRg4EAExR208EyIapwCQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 13:37:29
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 130.49.113.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 09:37:26.345077 2026] [security2:error] [pid 25395:tid 25395] [client 130.49.113.55:33495] M ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.113.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 09:37:26.345077 2026] [security2:error] [pid 25395:tid 25395] [client 130.49.113.55:33495] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dojoonthego.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dojoonthego.com"] [uri "/Kenpo Karate.html"] [unique_id "attjFu3qrqvgVwUP9RmhFgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-26 14:55:38
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.113.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 10:55:32.427947 2026] [security2:error] [pid 3875434:tid 3875434] [client 130.49.113.55:5329 ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.113.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 10:55:32.427947 2026] [security2:error] [pid 3875434:tid 3875434] [client 130.49.113.55:53293] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||friendlyfarmforfun.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "friendlyfarmforfun.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amYf5NFUbReYVTjr81OCewAAAAY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
DRI
2026-07-25 07:33:25
UTC ·
(3 months ago)
Web attack/Malicious activity detected
Web App Attack
🇨🇭
backslash
2026-07-21 08:57:00
UTC ·
(3 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-01-05 06:31:00
UTC ·
(10 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.113.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 05 01:30:49.629383 2026] [security2:error] [pid 16203:tid 16203] [client 130.49.113.55:60389] M ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.113.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 05 01:30:49.629383 2026] [security2:error] [pid 16203:tid 16203] [client 130.49.113.55:60389] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||arapi.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arapi.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVtamYlsz4jnr6t8lvw1GAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
F242
2026-01-02 06:18:45
UTC ·
(10 months ago)
Wordpress Login or XMLRPC abuse
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-10 14:34:42
UTC ·
(11 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
2025-10-26 01:03:55
UTC ·
(1 year ago)
wordpress-trap
Web App Attack
🇺🇸
TPI-Abuse
2025-10-22 18:55:57
UTC ·
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 130.49.113.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 22 14:55:51.109430 2025] [security2:error] [pid 21173:tid 21173] [client 130.49.113.55:61429] M ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.113.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 22 14:55:51.109430 2025] [security2:error] [pid 21173:tid 21173] [client 130.49.113.55:61429] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gemco-mfg.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gemco-mfg.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aPkot9IwdQoZ7WwUnQydXgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-21 09:55:49
UTC ·
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 130.49.113.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 21 05:55:43.447431 2025] [security2:error] [pid 32437:tid 32437] [client 130.49.113.55:13059] M ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.113.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 21 05:55:43.447431 2025] [security2:error] [pid 32437:tid 32437] [client 130.49.113.55:13059] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||whodatnation.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "whodatnation.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aPdYn-FBiigpDs8y13QxswAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
