🇩🇪
Ilop
2026-10-12 11:30:47
(2 days ago)
[hp-100] 19 unsolicited packets to honeypot ports 5555 (OCI DShield sensor)
Port Scan
🇨🇿
Countryman
2026-09-14 00:10:01
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
nationaleventpros.com
2026-09-05 03:04:36
(1 month ago)
WordPress login attempt
Brute-Force
🇺🇸
nationaleventpros.com
2026-09-03 01:18:36
(1 month ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-09-01 19:19:35
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 130.49.77.16 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.77.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 15:19:30.510973 2026] [security2:error] [pid 21830:tid 21830] [client 130.49.77.16:23433] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||srosa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "srosa.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apclQihJNI5ipe2BHXolZgAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-28 23:25:35
(1 month ago)
Web password guessing
Brute-Force
🇺🇸
nationaleventpros.com
2026-08-20 16:47:28
(1 month ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-08-14 21:20:38
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.77.16 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.77.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 17:20:30.722489 2026] [security2:error] [pid 1439:tid 1439] [client 130.49.77.16:47267] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ingberinteriors.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ingberinteriors.com"] [uri "/wp-json/wp/v2/users"] [unique_id "an-Gnv-9YayK1l5R-3EzBAAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Tilellit.PRO
2026-07-14 01:39:57
(3 months ago)
WP Armour Plugin detection
Web Spam
Brute-Force
🇺🇸
TPI-Abuse
2026-07-02 02:05:06
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.77.16 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.77.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 22:05:02.015892 2026] [security2:error] [pid 31382:tid 31382] [client 130.49.77.16:64153] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||andrsn.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "andrsn.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akXHTi5Qnw8B9UNDbW12NgAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Tilellit.PRO
2026-06-28 09:11:18
(3 months ago)
Fail2Ban banned 130.49.77.16 for security violations in jail wp-armour. Log: 2026/06/28 09:11:17 [er ...
show more
Fail2Ban banned 130.49.77.16 for security violations in jail wp-armour. Log: 2026/06/28 09:11:17 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 130.49.77.16 | Target: wplogin" , client: 130.49.77.16, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
Tilellit.PRO
2026-06-27 15:25:34
(3 months ago)
Fail2Ban banned 130.49.77.16 for security violations in jail wp-armour. Log: 2026/06/27 15:25:34 [er ...
show more
Fail2Ban banned 130.49.77.16 for security violations in jail wp-armour. Log: 2026/06/27 15:25:34 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 130.49.77.16 | Target: wplogin" , client: 130.49.77.16, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
Tilellit.PRO
2026-06-27 05:35:43
(3 months ago)
Fail2Ban banned 130.49.77.16 for security violations in jail wp-armour. Log: 2026/06/27 05:35:42 [er ...
show more
Fail2Ban banned 130.49.77.16 for security violations in jail wp-armour. Log: 2026/06/27 05:35:42 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 130.49.77.16 | Target: wplogin" , client: 130.49.77.16, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇺🇸
TPI-Abuse
2026-05-08 13:00:23
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.77.16 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.77.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 09:00:16.992932 2026] [security2:error] [pid 9460:tid 9460] [client 130.49.77.16:36921] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||flamberge.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "flamberge.com"] [uri "/wp-json/wp/v2/users"] [unique_id "af3eYOMkk4S08mRV-6g4BwAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
oralunal
2026-04-08 06:13:15
(6 months ago)
IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds
...
Bad Web Bot
Web App Attack
