🇺🇸
TPI-Abuse
2026-11-15 20:43:24
UTC ·
(7 minutes ago)
(mod_security) mod_security (id:210350) triggered by 130.49.8.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 15:43:16.827189 2026] [security2:error] [pid 17907:tid 17907] [client 130.49.8.218:44077] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.8.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 15:43:16.827189 2026] [security2:error] [pid 17907:tid 17907] [client 130.49.8.218:44077] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cleaningmedical.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cleaningmedical.com"] [uri "/2019/10/21/what-you-must-do-to-discover-about-winning-on-slot/"] [unique_id "avoZZCKNNdXHtLW__OUcqgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 10:19:08
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 130.49.8.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 05:19:02.559106 2026] [security2:error] [pid 25223:tid 25223] [client 130.49.8.218:19369] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.8.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 05:19:02.559106 2026] [security2:error] [pid 25223:tid 25223] [client 130.49.8.218:19369] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ofertasdetrabajosyempleos.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ofertasdetrabajosyempleos.com"] [uri "/bolivia/buscador-abogado-.php"] [unique_id "avBMlvE2aQMZxM6u0dtTXgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-05 02:09:30
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 01:57:26
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 130.49.8.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 21:57:20.029437 2026] [security2:error] [pid 7032:tid 7032] [client 130.49.8.218:33791] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.8.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 21:57:20.029437 2026] [security2:error] [pid 7032:tid 7032] [client 130.49.8.218:33791] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2015/06/07/mexico-elections-the-seething-chaos-below/"] [unique_id "auP5gBoGvYB5drcpAgSXzgAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 16:14:50
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 130.49.8.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 12:14:42.771038 2026] [security2:error] [pid 18076:tid 18076] [client 130.49.8.218:33319] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.8.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 12:14:42.771038 2026] [security2:error] [pid 18076:tid 18076] [client 130.49.8.218:33319] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rcjlawfirm.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rcjlawfirm.com"] [uri "/texas-and-taxes-law-blog/how-to-setup-your-business-and-related-real-estate"] [unique_id "auNw8vqx02Kd82ogykqRkAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-07-11 05:36:31
UTC ·
(4 months ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-07-04 02:17:38
UTC ·
(4 months ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-06-27 07:06:21
UTC ·
(4 months ago)
Brute force
Brute-Force
🇩🇪
FeG Deutschland
2026-06-11 15:52:06
UTC ·
(5 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇮🇹
VHosting
2026-03-26 20:33:59
UTC ·
(7 months ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
