🇪🇸
librebit
2026-06-20 10:26:47
(4 days ago)
Brute force
Brute-Force
🇮🇩
Burayot
2026-05-29 12:56:58
(3 weeks ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 130.49.114.186 (FR/France/-): 1 in t ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 130.49.114.186 (FR/France/-): 1 in the last 3600 secs
show less
Web App Attack
🇫🇷
tilellit.pro
2026-05-06 21:32:47
(1 month ago)
Fail2Ban banned 130.49.114.186 for security violations in jail wp-armour. Log: 2026/05/06 21:32:46 [ ...
show more
Fail2Ban banned 130.49.114.186 for security violations in jail wp-armour. Log: 2026/05/06 21:32:46 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 130.49.114.186 | Target: wplogin" , client: 130.49.114.186, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇬🇧
noise.agency
2026-04-27 23:22:09
(1 month ago)
(mod_security) mod_security triggered on hostname [redacted] 130.49.114.186 (FR/France/-)
SQL Injection
🇺🇸
TPI-Abuse
2026-04-09 14:25:25
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.114.186 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.114.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 09 10:25:18.176784 2026] [security2:error] [pid 3453946:tid 3453946] [client 130.49.114.186:32121] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ehrlichfamily.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ehrlichfamily.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ade2zv5ojtAtR2XMTYlAfgAAAAY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-02 22:21:18
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.114.186 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.114.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 18:21:13.758968 2026] [security2:error] [pid 23200:tid 23200] [client 130.49.114.186:44875] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||crucialpins.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "crucialpins.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ac7r2cb43X1o8siNewBURgAAAAs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 13:54:38
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.114.186 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.114.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 09:54:33.994983 2026] [security2:error] [pid 25739:tid 25739] [client 130.49.114.186:19125] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||aimer.es|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aimer.es"] [uri "/wp-json/wp/v2/users"] [unique_id "acvSGT2ozP6nAVMoSTlTgwAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2026-02-25 01:21:44
(3 months ago)
(wordpress) Failed wordpress login from 130.49.114.186 (FR/France/Manche/Montmartin-sur-Mer/-/[redac ...
show more
(wordpress) Failed wordpress login from 130.49.114.186 (FR/France/Manche/Montmartin-sur-Mer/-/[redacted]): (CF_ENABLE)
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-01-23 03:26:41
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.114.186 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.114.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 22:26:34.345228 2026] [security2:error] [pid 12575:tid 12575] [client 130.49.114.186:32485] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||d365geek.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "d365geek.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXLqauRdcaXRVWGA0HZtfgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-22 19:57:58
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.114.186 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.114.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 14:57:51.595628 2026] [security2:error] [pid 12588:tid 12588] [client 130.49.114.186:52479] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.taekwondoit.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.taekwondoit.com"] [uri "/about-us/wp-json/wp/v2/users"] [unique_id "aXKBP15eXmsuSAAmSh7cFQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-22 18:33:27
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.114.186 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.114.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 13:33:19.644314 2026] [security2:error] [pid 7508:tid 7508] [client 130.49.114.186:33361] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fletcherdouglas.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fletcherdouglas.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXJtb5Z3eQf_40b9IvEUmwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-22 13:38:50
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.114.186 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.114.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 08:38:42.762479 2026] [security2:error] [pid 23654:tid 23654] [client 130.49.114.186:62181] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||protection4allsecurity.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "protection4allsecurity.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXIoYoCRd8y6Qj2581n33gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-29 13:06:10
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇬🇧
relianoid.com
2025-12-28 08:27:25
(5 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇺🇸
TPI-Abuse
2025-11-21 15:55:41
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 130.49.114.186 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.114.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 21 10:55:37.340227 2025] [security2:error] [pid 7118:tid 7118] [client 130.49.114.186:26001] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||chatsupply.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "chatsupply.us"] [uri "/"] [unique_id "aSCLeXBC3GAKhyV1oIDioAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack