🇺🇸
nationaleventpros.com
2026-09-03 01:33:38
(13 hours ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-08-28 18:34:48
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 130.49.77.165 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.77.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 14:34:41.693416 2026] [security2:error] [pid 5164:tid 5164] [client 130.49.77.165:55761] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||onyxcc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "onyxcc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apHUwSC9ElmDts6u5vkLFgAAABw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-08-20 16:19:47
(1 week ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-08-06 21:13:06
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 130.49.77.165 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.77.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 06 17:12:59.660050 2026] [security2:error] [pid 1156089:tid 1156089] [client 130.49.77.165:10791] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||stormwlf.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stormwlf.com"] [uri "/wp-json/wp/v2/users"] [unique_id "anT42zteBvyQLtpyHKWtYwAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-07-23 05:06:16
(1 month ago)
CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc | req: /xmlrpc.php | UA: Apache-HttpClient/4.5.1 ...
show more
CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc | req: /xmlrpc.php | UA: Apache-HttpClient/4.5.13 (Java/17.0.18)
show less
Brute-Force
Web App Attack
🇫🇷
Tilellit.PRO
2026-07-02 04:35:29
(2 months ago)
tilellit/wp-armour-ban
Hacking
🇫🇷
Tilellit.PRO
2026-06-27 05:37:13
(2 months ago)
Fail2Ban banned 130.49.77.165 for security violations in jail wp-armour. Log: 2026/06/27 05:37:12 [e ...
show more
Fail2Ban banned 130.49.77.165 for security violations in jail wp-armour. Log: 2026/06/27 05:37:12 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 130.49.77.165 | Target: wplogin" , client: 130.49.77.165, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇺🇸
TPI-Abuse
2026-06-21 22:31:14
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.77.165 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.77.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 18:31:08.704932 2026] [security2:error] [pid 19976:tid 19976] [client 130.49.77.165:58869] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hischurchatwork.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hischurchatwork.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajhmLFdL0T_bluw-qUH2hQAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
VXG-NET
2026-05-27 15:34:02
(3 months ago)
port=80, indicator_type=sql-injection
SQL Injection
🇦🇹
neo72
2026-03-19 06:48:01
(5 months ago)
Detected malicious activity - bulk block
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-02-18 02:23:30
(6 months ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
2026-02-02 02:58:29
(7 months ago)
WordPress Brute Force
Brute-Force
🇺🇸
nowyouknow
2025-12-18 14:35:36
(8 months ago)
(From [email protected] ) Hi Team,
I typed your main service keywords into Google today, a ...
show more
(From [email protected] ) Hi Team,
I typed your main service keywords into Google today, and I noticed something frustrating. Your website is professionally designed, but it’s buried on Page 2.
Meanwhile, 2 or 3 of your direct competitors, who frankly have weaker websites than you—are sitting at the top of Page 1.
They are effectively "stealing" leads that were looking for you. They aren't better than you; they just have better SEO signals.
I’ve already analyzed exactly what they are doing differently.
If you want to see the comparison report, just reply "Yes" and I’ll send it over.
Cheers,
QIK
show less
Phishing
Web Spam
🇬🇧
noise.agency
2025-11-08 23:58:48
(9 months ago)
(wordpress) Failed wordpress login from 130.49.77.165 (FR/France/-)
Brute-Force