🇺🇸
Jason Howell
2026-06-16 19:10:03
(4 days ago)
130.49.10.145 - - [16/Jun/2026:14:09:51 -0500] "GET /wp-login.php HTTP/1.1" 301 570 "-" "Mozilla/5.0 ...
show more
130.49.10.145 - - [16/Jun/2026:14:09:51 -0500] "GET /wp-login.php HTTP/1.1" 301 570 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.224 Safari/534.10"
130.49.10.145 - - [16/Jun/2026:14:09:58 -0500] "GET /wp-login.php HTTP/1.1" 200 6346 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.224 Safari/534.10"
130.49.10.145 - - [16/Jun/2026:14:10:00 -0500] "POST /wp-login.php HTTP/1.1" 200 2979 "https://lhrareenacting.com/wp-login.php" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.224 Safari/534.10"
130.49.10.145 - - [16/Jun/2026:14:10:01 -0500] "GET /wp-login.php HTTP/1.1" 301 570 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.224 Safari/534.10"
130.49.10.145 - - [16/Jun/2026:14:10:02 -0500] "GET /wp-login.php HTTP/1.1" 200 2619 "-" "Mozilla/5.0 (Windows; U; Wind
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-05-04 00:24:31
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 130.49.10.145 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.10.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 03 20:24:28.198835 2026] [security2:error] [pid 27920:tid 27920] [client 130.49.10.145:13605] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||internetnameregistration.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "internetnameregistration.com"] [uri "/"] [unique_id "affnPDmvPsJWybHfqx64FgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-04-07 07:48:41
(2 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇦🇺
screwlooseit.com.au
2026-03-28 07:53:32
(2 months ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
US/United States/-
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 17:13:40
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.10.145 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.10.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 13:13:34.172477 2026] [security2:error] [pid 3205:tid 3205] [client 130.49.10.145:19451] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||monopolimusic.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "monopolimusic.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acVpPizv0emnz-cxvVrQQQAAAAs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2026-01-26 12:26:26
(4 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2025-11-15 17:19:10
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 130.49.10.145 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.10.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 15 12:18:58.292980 2025] [security2:error] [pid 25717:tid 25717] [client 130.49.10.145:40747] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||imaginationbyme.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "imaginationbyme.com"] [uri "/"] [unique_id "aRi2AvjWjaMyyvYxFTYPFwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-10-21 06:17:23
(7 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-10-17 15:10:27
(8 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH