🇺🇸
TPI-Abuse
2026-11-11 17:52:28
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210350) triggered by 130.49.78.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 12:52:23.091578 2026] [security2:error] [pid 26243:tid 26267] [client 130.49.78.159:63055] M ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.78.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 12:52:23.091578 2026] [security2:error] [pid 26243:tid 26267] [client 130.49.78.159:63055] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||howsyourlife.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "howsyourlife.org"] [uri "/2021/07/05/thought-for-july-5th-the-day-of-vengeance/"] [unique_id "avSrV46Ts5nRPPkuWuwaAgAAAJY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 15:16:38
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 130.49.78.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 11:16:31.630032 2026] [security2:error] [pid 10024:tid 10105] [client 130.49.78.159:64595] M ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.78.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 11:16:31.630032 2026] [security2:error] [pid 10024:tid 10105] [client 130.49.78.159:64595] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kaukabsiddique.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kaukabsiddique.net"] [uri "/ksiddenglish102.htm"] [unique_id "auNjTyFLIKcRwjM4gom1KwAAAhg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 17:41:27
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 130.49.78.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 13:41:20.292002 2026] [security2:error] [pid 26951:tid 26951] [client 130.49.78.159:13693] M ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.78.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 13:41:20.292002 2026] [security2:error] [pid 26951:tid 26951] [client 130.49.78.159:13693] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.echinech.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.echinech.com"] [uri "/polemics/is-healthcare-a-right/"] [unique_id "auIzwCPvZrYg1e_kPLS3lQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 10:49:56
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 130.49.78.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 06:49:48.926978 2026] [security2:error] [pid 18992:tid 18992] [client 130.49.78.159:15857] M ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.78.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 06:49:48.926978 2026] [security2:error] [pid 18992:tid 18992] [client 130.49.78.159:15857] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jerryglass.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jerryglass.net"] [uri "/TECHNIQUE.htm"] [unique_id "auHTTEUcEi86GrJmG7GFGgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
jbcrn
2026-10-22 19:25:16
UTC ·
(2 weeks ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /deflagration.gibbus/. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/1 ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /deflagration.gibbus/. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Edg/135.0.0.0
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 20:40:15
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 130.49.78.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 16:40:04.674972 2026] [security2:error] [pid 25354:tid 25354] [client 130.49.78.159:24853] M ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.78.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 16:40:04.674972 2026] [security2:error] [pid 25354:tid 25354] [client 130.49.78.159:24853] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.inquiryroom.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.inquiryroom.com"] [uri "/Religious_Affections_by_Jonathan_Edwards.htm"] [unique_id "atkjJNqeSqo1qhRkvPM1NAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-11 12:46:17
UTC ·
(2 months ago)
Failed Wordpress Logins
Web App Attack
2026-09-08 19:46:09
UTC ·
(2 months ago)
Failed Wordpress Logins
Web App Attack
2026-09-07 10:46:16
UTC ·
(2 months ago)
Failed Wordpress Logins
Web App Attack
2026-09-06 00:57:00
UTC ·
(2 months ago)
Failed Wordpress Logins
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-05 06:16:54
UTC ·
(2 months ago)
WordPress login attempt
Brute-Force
🇺🇸
nationaleventpros.com
2026-09-03 06:00:41
UTC ·
(2 months ago)
WordPress login attempt
Brute-Force
🇫🇷
Yepngo
2026-08-23 23:30:01
UTC ·
(2 months ago)
130.49.78.159 - - [24/Aug/2026:01:13:29 +0200] "POST /wp-login.php HTTP/2.0" 200 12492 "https://yepngo.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
130.49.78.159 - - [24/Aug ...
show more
130.49.78.159 - - [24/Aug/2026:01:13:29 +0200] "POST /wp-login.php HTTP/2.0" 200 12492 "https://yepngo.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
130.49.78.159 - - [24/Aug/2026:01:30:01 +0200] "POST /wp-login.php HTTP/2.0" 200 12492 "https://yepngo.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-19 19:06:43
UTC ·
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.78.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 15:06:38.632581 2026] [security2:error] [pid 4578:tid 4578] [client 130.49.78.159:16971] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.78.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 15:06:38.632581 2026] [security2:error] [pid 4578:tid 4578] [client 130.49.78.159:16971] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||donnysimonton.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "donnysimonton.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aoX-vrZhM_lbJmSuo8NnNgAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-18 20:47:27
UTC ·
(2 months ago)
Web password guessing
Brute-Force
