130.49.8.78

(mod_security) mod_security (id:210350) triggered by 130.49.8.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 11:30:36.064756 2026] [security2:error] [pid 19500:tid 19500] [client 130.49.8.78:16717] ModSe ... show more (mod_security) mod_security (id:210350) triggered by 130.49.8.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 11:30:36.064756 2026] [security2:error] [pid 19500:tid 19500] [client 130.49.8.78:16717] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.nancyscafeandcatering.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.nancyscafeandcatering.com"] [uri "/food/sour-cream-coffee-cake/"] [unique_id "avSYLCNOL1qbWn797lr7JQAAAA4"] show less

(mod_security) mod_security (id:210350) triggered by 130.49.8.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 11:24:38.066278 2026] [security2:error] [pid 6099:tid 6099] [client 130.49.8.78:20873] ModSecu ... show more (mod_security) mod_security (id:210350) triggered by 130.49.8.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 11:24:38.066278 2026] [security2:error] [pid 6099:tid 6099] [client 130.49.8.78:20873] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fgrotary.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fgrotary.org"] [uri "/speaker/hope-for-the-holidays-recap-at-prime-time/"] [unique_id "avNFRkFNySP8NkJMTqqC3QAAABY"] show less

(mod_security) mod_security (id:210350) triggered by 130.49.8.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 05:11:57.066416 2026] [security2:error] [pid 2116:tid 2204] [client 130.49.8.78:37497] ModSecu ... show more (mod_security) mod_security (id:210350) triggered by 130.49.8.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 05:11:57.066416 2026] [security2:error] [pid 2116:tid 2204] [client 130.49.8.78:37497] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cargomarexpress.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cargomarexpress.com"] [uri "/cargomar-express-cabecera/"] [unique_id "avLt7TEE25gEihNM5zRW4gAAAcM"] show less

Botnet flood DDOS activity

(mod_security) mod_security (id:210350) triggered by 130.49.8.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 10:17:51.063867 2026] [security2:error] [pid 14907:tid 14907] [client 130.49.8.78:46463] ModSe ... show more (mod_security) mod_security (id:210350) triggered by 130.49.8.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 10:17:51.063867 2026] [security2:error] [pid 14907:tid 14907] [client 130.49.8.78:46463] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2010/06/26/promise-and-peril-in-guinea/"] [unique_id "aun7H7KhbytLlXjNGBT-AAAAAAU"] show less

(mod_security) mod_security (id:210350) triggered by 130.49.8.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 06:54:20.521057 2026] [security2:error] [pid 25333:tid 25349] [client 130.49.8.78:18627] ModSe ... show more (mod_security) mod_security (id:210350) triggered by 130.49.8.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 06:54:20.521057 2026] [security2:error] [pid 25333:tid 25349] [client 130.49.8.78:18627] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||newtrendmag.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "newtrendmag.org"] [uri "/ntma1268.htm"] [unique_id "auR3XLC25isBPwGGRw9vfgAAAYg"] show less

(mod_security) mod_security (id:210350) triggered by 130.49.8.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 13:13:31.995460 2026] [security2:error] [pid 17585:tid 17585] [client 130.49.8.78:20737] ModSe ... show more (mod_security) mod_security (id:210350) triggered by 130.49.8.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 13:13:31.995460 2026] [security2:error] [pid 17585:tid 17585] [client 130.49.8.78:20737] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.sundancepei.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.sundancepei.com"] [uri "/251 Sdance Lane.html"] [unique_id "auItO7fCFdaiKd2X5deitwAAAAY"] show less

(mod_security) mod_security (id:210350) triggered by 130.49.8.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:25:07.170057 2026] [security2:error] [pid 3589:tid 3589] [client 130.49.8.78:9925] ModSecur ... show more (mod_security) mod_security (id:210350) triggered by 130.49.8.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:25:07.170057 2026] [security2:error] [pid 3589:tid 3589] [client 130.49.8.78:9925] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.markaandrews.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.markaandrews.com"] [uri "/2012/12/17/gun-control-begins-at-home/"] [unique_id "atDiQ05SrAZc59xZYtIsCAAAAAM"] show less

Unauthorized VPN login attempts: 2 attempts were recorded from 130.49.8.78 2026-09-15T02:32:32+02:00 vpn Access-Reject 'branch3' station: 130.49.8.78 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' ... show more Unauthorized VPN login attempts: 2 attempts were recorded from 130.49.8.78 2026-09-15T02:32:32+02:00 vpn Access-Reject 'branch3' station: 130.49.8.78 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2026-09-15T02:33:52+02:00 vpn Access-Reject 'branch4' station: 130.49.8.78 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less

Unauthorized VPN login attempts: 1 attempts were recorded from 130.49.8.78 2026-09-14T05:49:15+02:00 vpn Access-Reject 'title1-4' station: 130.49.8.78 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'

repeated unauthorized VPN login attempt, user sweep

repeated unauthorized VPN login attempt, user sweep

Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail

(mod_security) mod_security (id:225170) triggered by 130.49.8.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 19:45:22.889344 2026] [security2:error] [pid 31329:tid 31329] [client 130.49.8.78:30637] ModSe ... show more (mod_security) mod_security (id:225170) triggered by 130.49.8.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 19:45:22.889344 2026] [security2:error] [pid 31329:tid 31329] [client 130.49.8.78:30637] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||delstarr.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "delstarr.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ac7_kg0JS6Jr1rFXdTyrXwAAAAw"], referer: https://www.google.com show less

Firewall Blocked - Unauthorized Port Scanning ...