2026-10-28 21:20:02
(7 hours ago)
| High amount of POST requests in a small period of time (likely bot).
Web App Attack
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-10-28 17:40:58
(10 hours ago)
(mod_security) mod_security (id:210350) triggered by 130.49.77.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 13:40:51.680168 2026] [security2:error] [pid 12624:tid 12624] [client 130.49.77.27:62565] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.77.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 13:40:51.680168 2026] [security2:error] [pid 12624:tid 12624] [client 130.49.77.27:62565] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||painting-with-numbers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "painting-with-numbers.com"] [uri "/blog/cherry-picking-the-subtlest-dishonesty"] [unique_id "auIzoxitWc6ibIQj_4uimgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-10-28 01:27:02
(1 day ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇩🇪
big-cloud.nl
2026-10-18 02:12:17
(1 week ago)
Try to access /xmlrpc.php
Web App Attack
🇪🇸
librebit
2026-07-07 20:52:47
(3 months ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-07-04 05:35:57
(3 months ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-05-29 23:47:19
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.77.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 19:47:12.715130 2026] [security2:error] [pid 10968:tid 10968] [client 130.49.77.27:13653] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.77.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 19:47:12.715130 2026] [security2:error] [pid 10968:tid 10968] [client 130.49.77.27:13653] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sahinozalit.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sahinozalit.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aholgKaXtQKMtTdGZ9_vGgAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 11:59:37
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.77.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 07:59:30.754156 2026] [security2:error] [pid 25569:tid 25569] [client 130.49.77.27:54055] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.77.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 07:59:30.754156 2026] [security2:error] [pid 25569:tid 25569] [client 130.49.77.27:54055] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||zavion.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "zavion.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahQ5ogBeSsP-fQUg2rLGVgAAACk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
inlink.ltd
2026-05-20 08:09:06
(5 months ago)
Known malicious PHP file or CMS probe
Web App Attack
🇮🇹
[email protected]
2026-05-04 19:43:06
(5 months ago)
[Mon May 04 21:43:06.265863 2026] [authz_core:error] [pid 1616932:tid 1617020] [remote 130.49.77.27:17615] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/xmlrpc.php
...
Brute-Force
Web App Attack
🇺🇸
myagent.site
2026-04-13 19:46:40
(6 months ago)
Banned for trying to spam /contact/ {"action":"contact_form_ajax","first_name":"PassLeakfoextXY","last_name":"PassLeakfoextXY","email":"[email protected] ","message":" \r\nAntipublic \u2013 Stop Data Exposure Before It Destroys You \r\nYour person ...
show more
Banned for trying to spam /contact/ {"action":"contact_form_ajax","first_name":"PassLeakfoextXY","last_name":"PassLeakfoextXY","email":"[email protected] ","message":" \r\nAntipublic \u2013 Stop Data Exposure Before It Destroys You \r\nYour personal information data breach may already be live on the dark web. Antipublic reveals hidden data exposure risks and protects you from costly security breaches. \r\nAccess 33B+ leaked passwords and track 50M new records daily in real time. Scan any user, domain, or email instantly and prevent massive loss before it happens. \r\nOnly $2 unlocks full protection. \r\nCheck now: <a href=https:\/\/antipublic.net\/referral?code=REF4YIJHD8R> Current security breaches<\/a> \r\n \r\n|","submit":""}
show less
Hacking
🇮🇩
Burayot
2026-03-29 18:25:45
(6 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 130.49.77.27 (FR/France/-): 1 in the last 3600 secs
Web App Attack
🇫🇷
Phenix Info
2026-03-29 05:07:46
(6 months ago)
SmallGuard.fr/Prestashop Honeypot
Web App Attack
🇦🇺
MAGIC
2025-12-18 02:07:21
(10 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇬🇧
relianoid.com
2025-11-25 05:37:10
(11 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
