🇺🇸
TPI-Abuse
2026-11-13 12:38:59
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 130.49.77.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 07:38:54.109174 2026] [security2:error] [pid 3250:tid 3250] [client 130.49.77.218:30965] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.77.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 07:38:54.109174 2026] [security2:error] [pid 3250:tid 3250] [client 130.49.77.218:30965] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jerusalem-temple-today.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jerusalem-temple-today.com"] [uri "/for/viewtopic.php"] [unique_id "avcE3lifIKlbinVjG6HpCgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-11 22:13:17
UTC ·
(3 days ago)
Malicious activity detected
Hacking
Web App Attack
🇫🇷
Sklurk
2026-11-11 04:51:06
UTC ·
(4 days ago)
Web App Attack
Web App Attack
🇩🇪
LRob
2026-11-10 03:22:41
UTC ·
(5 days ago)
WordPress attack-tool calls | method: POST | path: /xmlrpc.php | ua: PHP/5.3.56
Web App Attack
Hacking
2026-11-09 07:51:48
UTC ·
(6 days ago)
Malicious activity detected
Hacking
Web App Attack
🇫🇷
Sklurk
2026-11-09 02:12:23
UTC ·
(6 days ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 21:23:56
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 130.49.77.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 16:23:52.704490 2026] [security2:error] [pid 10665:tid 10665] [client 130.49.77.218:12683] M ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.77.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 16:23:52.704490 2026] [security2:error] [pid 10665:tid 10665] [client 130.49.77.218:12683] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/tags/1340"] [unique_id "aupQ6CZ7mKtdWpsJvat2lgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 18:20:17
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 130.49.77.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 13:20:10.621843 2026] [security2:error] [pid 1568:tid 1568] [client 130.49.77.218:28139] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.77.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 13:20:10.621843 2026] [security2:error] [pid 1568:tid 1568] [client 130.49.77.218:28139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.caferutadelaseda.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.caferutadelaseda.com"] [uri "/images/lib/source/images/lib/jquery.mousewheel-3.0.6.pack.js"] [unique_id "aujUWg4lpCcnSWCU40URlQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 19:22:25
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 130.49.77.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:22:18.418919 2026] [security2:error] [pid 16168:tid 16168] [client 130.49.77.218:52611] M ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.77.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:22:18.418919 2026] [security2:error] [pid 16168:tid 16168] [client 130.49.77.218:52611] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.mirandaracewalks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mirandaracewalks.com"] [uri "/"] [unique_id "auJLaoY3GV0q4tXESqL7MAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
DocNetzwerk
2026-09-29 13:11:48
UTC ·
(1 month ago)
130.49.77.218 (FR/France/-), more than 7 Apache 403 hits
Hacking
🇪🇸
librebit
2026-09-16 05:25:52
UTC ·
(1 month ago)
Brute force
Brute-Force
🇳🇱
i-turnradio.nl
2026-09-13 23:18:20
UTC ·
(2 months ago)
2026-09-14 @ 01:18:03 (CET) ~ Blocked for trying to access: /api/v4/projects/
Web App Attack
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-10 04:50:04
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 3 attempts were recorded from 130.49.77.218
2026-09-10T06:39:31+02:00 vpn Access-Reject '217.165.122.27' station: 130.49.77.218 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '< ...
show more
Unauthorized VPN login attempts: 3 attempts were recorded from 130.49.77.218
2026-09-10T06:39:31+02:00 vpn Access-Reject '217.165.122.27' station: 130.49.77.218 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-10T06:40:50+02:00 vpn Access-Reject '217.165.123.238' station: 130.49.77.218 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-10T06:42:10+02:00 vpn Access-Reject '217.165.134.20' station: 130.49.77.218 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇸🇪
OnTheEdge
2026-09-08 12:47:45
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
