🇪🇸
librebit
2026-11-15 03:19:28
UTC ·
(1 hour ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-11-13 04:41:17
UTC ·
(1 day ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-11-10 02:27:53
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 130.49.79.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:27:49.795393 2026] [security2:error] [pid 28735:tid 28735] [client 130.49.79.129:22917] M ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.79.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:27:49.795393 2026] [security2:error] [pid 28735:tid 28735] [client 130.49.79.129:22917] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ictsl.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ictsl.net"] [uri "/productos/mobiliario/grifosdegasparamueblesdelaboratorio.html"] [unique_id "avKBJWNKpbTuD_C4IAqZuQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 18:02:04
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 130.49.79.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 13:01:56.867291 2026] [security2:error] [pid 508:tid 508] [client 130.49.79.129:37699] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.79.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 13:01:56.867291 2026] [security2:error] [pid 508:tid 508] [client 130.49.79.129:37699] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2016/01/11/millennial-massachusetts-the-27-percent/"] [unique_id "auzElOpe6UTPfLxFwCwWkgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-11-05 03:07:16
UTC ·
(1 week ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-10-28 17:35:45
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 130.49.79.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 13:35:37.567438 2026] [security2:error] [pid 14446:tid 14516] [client 130.49.79.129:25195] M ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.79.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 13:35:37.567438 2026] [security2:error] [pid 14446:tid 14516] [client 130.49.79.129:25195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wasula.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wasula.com"] [uri "/pages/training/templates/training-course-detail-template.html"] [unique_id "auIyaZJXfWVumtWO-Ccp7gAAAQ8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 16:39:32
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 130.49.79.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 12:39:28.108228 2026] [security2:error] [pid 8113:tid 8113] [client 130.49.79.129:56205] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.79.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 12:39:28.108228 2026] [security2:error] [pid 8113:tid 8113] [client 130.49.79.129:56205] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||persnicketyinc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "persnicketyinc.com"] [uri "/tag/graphic-designer-lancaster/"] [unique_id "auIlQFMOaX8DJJS9SE4GcwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 05:46:33
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 130.49.79.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 01:46:25.602928 2026] [security2:error] [pid 13941:tid 13941] [client 130.49.79.129:56643] M ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.79.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 01:46:25.602928 2026] [security2:error] [pid 13941:tid 13941] [client 130.49.79.129:56643] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||compassionfatigue.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "compassionfatigue.org"] [uri "/(Go"] [unique_id "auA6sW-TnvVvhhEuK700XQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
BlueWire Hosting
2026-10-23 05:42:26
UTC ·
(3 weeks ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇫🇷
LRob
2026-10-21 21:42:44
UTC ·
(3 weeks ago)
Not following 301 redirects — wasted requests | method: GET | path: / | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36/Nutch-1.23-SNAPSHOT
Bad Web Bot
🇺🇸
nationaleventpros.com
2026-06-14 21:14:58
UTC ·
(5 months ago)
WordPress login attempt
Brute-Force
🇺🇸
kosada.com
2026-05-21 12:04:00
UTC ·
(5 months ago)
Web password guessing
Brute-Force
🇬🇧
cg-design.co.uk
2026-05-20 10:32:31
UTC ·
(5 months ago)
130.49.79.129 (-), 10 distributed imapd attacks on account [redacted]
Brute-Force
🇺🇸
TPI-Abuse
2026-01-22 19:38:46
UTC ·
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.79.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 14:38:34.168506 2026] [security2:error] [pid 5696:tid 5696] [client 130.49.79.129:43755] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.79.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 14:38:34.168506 2026] [security2:error] [pid 5696:tid 5696] [client 130.49.79.129:43755] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||expresstires.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "expresstires.us"] [uri "/wp-json/wp/v2/users"] [unique_id "aXJ8ugQCIvUni7PAhOxhIwAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-22 11:37:46
UTC ·
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.79.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 06:37:44.223308 2026] [security2:error] [pid 24535:tid 24535] [client 130.49.79.129:25659] M ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.79.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 06:37:44.223308 2026] [security2:error] [pid 24535:tid 24535] [client 130.49.79.129:25659] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pattenden.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pattenden.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXIMCAGtMgkjG0HcuaJ3rgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
