🇨🇭
Origon
2026-10-14 13:55:59
(16 hours ago)
http-bad-user-agent - IP: 130.49.10.36 - time="2026-10-14T15:55:58+02:00" level=info msg="(555f66b4 ...
show more
http-bad-user-agent - IP: 130.49.10.36 - time="2026-10-14T15:55:58+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 130.49.10.36 (NL/59651) : 4h ban on Ip 130.49.10.36" module=db
show less
Bad Web Bot
🇳🇱
Alt255
2026-09-22 14:03:44
(3 weeks ago)
[ti-01sc] WordPress XML-RPC abuse: 3 suspicious requests detected by fail2ban jail apache-xmlrpc. Ex ...
show more
[ti-01sc] WordPress XML-RPC abuse: 3 suspicious requests detected by fail2ban jail apache-xmlrpc. Example: 130.49.10.36 - - [22/Sep/2026:15:11:41 +0200] "POST /xmlrpc.php HTTP/2.0" 403 90 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
130.49.10.36 - - [22/Sep/2026:15:54:59 +0200] "POST /xmlrpc.php HTTP/2.0" 403 90 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
130.49.10.36 - - [22/Sep/2026:16:03:37 +0200] "POST /xmlrpc.php HTTP/2.0" 403 90 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
bittiguru.fi
2026-09-20 17:36:41
(3 weeks ago)
130.49.10.36 - [20/Sep/2026:20:35:49 +0300] "POST /xmlrpc.php HTTP/2.0" 404 12528 "-" "Mozilla/5.0 ( ...
show more
130.49.10.36 - [20/Sep/2026:20:35:49 +0300] "POST /xmlrpc.php HTTP/2.0" 404 12528 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" "4.66"
130.49.10.36 - [20/Sep/2026:20:36:40 +0300] "POST /xmlrpc.php HTTP/2.0" 404 12528 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" "4.66"
...
show less
Hacking
Brute-Force
Web App Attack
🇩🇪
Hazzard
2026-09-17 21:45:48
(3 weeks ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)
Bad Web Bot
2026-09-15 09:34:11
(4 weeks ago)
130.49.10.36 detected on srv01
Brute-Force
🇳🇱
Savvii
2026-09-09 10:51:19
(1 month ago)
20 attempts against mh_ha-misbehave-ban on bud
Brute-Force
Bad Web Bot
Web App Attack
2026-09-05 02:14:08
(1 month ago)
Fail2ban filtered
...
Web App Attack
2026-09-03 11:08:02
(1 month ago)
Fail2ban filtered
...
Web App Attack
🇺🇸
TPI-Abuse
2026-05-03 09:35:12
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.10.36 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.10.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 03 05:35:08.572396 2026] [security2:error] [pid 15305:tid 15305] [client 130.49.10.36:50335] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||st-johns.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "st-johns.us"] [uri "/wp-json/wp/v2/users"] [unique_id "afcWzF4FLTAdWeY4wIT2vgAAAA0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-23 00:41:24
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.10.36 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.10.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 19:41:03.435044 2026] [security2:error] [pid 4109909:tid 4109941] [client 130.49.10.36:14015] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||michaelrandon.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "michaelrandon.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXLDn35P4F6qvCb0fRBm9QAAAgs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-22 13:33:19
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.10.36 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.10.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 08:33:12.031621 2026] [security2:error] [pid 24917:tid 24917] [client 130.49.10.36:16711] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kicking2achieve.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kicking2achieve.org"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aXInGJbJqdXOLjvXCgjHkQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-01-20 18:57:51
(8 months ago)
wordpress-trap
Web App Attack
🇩🇪
LRob
2025-12-27 16:18:32
(9 months ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇨🇭
backslash
2025-12-25 13:00:16
(9 months ago)
block ruleset 486D2EE5E731CC049D1E480D68D04DFFE28AADF1
Bad Web Bot
