🇺🇸
TPI-Abuse
2026-11-15 01:54:23
UTC ·
(27 minutes ago)
(mod_security) mod_security (id:210350) triggered by 130.49.8.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 20:54:19.274776 2026] [security2:error] [pid 26662:tid 26662] [client 130.49.8.95:25849] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.8.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 20:54:19.274776 2026] [security2:error] [pid 26662:tid 26662] [client 130.49.8.95:25849] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.caferutadelaseda.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.caferutadelaseda.com"] [uri "/images/source/assets/owlcarousel/assets/assets/js/lib/jquery.mousewheel-3.0.6.pack.js"] [unique_id "avkQyxuNM-a7p3WNEWPvwwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 15:17:30
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 130.49.8.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:17:25.268291 2026] [security2:error] [pid 4201:tid 4211] [client 130.49.8.95:26279] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.8.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:17:25.268291 2026] [security2:error] [pid 4201:tid 4211] [client 130.49.8.95:26279] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||fiefblondel.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "fiefblondel.com"] [uri "/Events.html"] [unique_id "avXYhTtUqBT7cQIEASVppwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
openstrike.co.uk
2026-11-11 09:05:26
UTC ·
(3 days ago)
7 packets to port 2096
Port Scan
🇮🇹
[email protected]
2026-11-08 06:12:31
UTC ·
(6 days ago)
2026-11-08 07:12:30,279 fail2ban.actions [1274]: NOTICE [wordpress] Ban 130.49.8.952026-11-08 07:12:30,808 fail2ban.actions [1274]: NOTICE [apache-auth] Ban 130.49.8.95
Brute-Force
🇺🇸
nationaleventpros.com
2026-09-05 02:57:11
UTC ·
(2 months ago)
WordPress login attempt
Brute-Force
🇺🇸
nationaleventpros.com
2026-09-03 04:54:51
UTC ·
(2 months ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-08-31 21:10:37
UTC ·
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.8.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 17:10:30.692495 2026] [security2:error] [pid 32417:tid 32417] [client 130.49.8.95:62895] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.8.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 17:10:30.692495 2026] [security2:error] [pid 32417:tid 32417] [client 130.49.8.95:62895] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||easternimport.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "easternimport.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apXtxlCmDxLf2mpTsAR88wAAABU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-24 10:24:52
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.8.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 06:24:44.857214 2026] [security2:error] [pid 99659:tid 99659] [client 130.49.8.95:28363] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.8.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 06:24:44.857214 2026] [security2:error] [pid 99659:tid 99659] [client 130.49.8.95:28363] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lbee.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lbee.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amM9bLKgOAEv7T2rz1XZEQAAAAk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-23 05:41:06
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.8.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 01:40:58.390470 2026] [security2:error] [pid 2543122:tid 2543122] [client 130.49.8.95:16151] M ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.8.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 01:40:58.390470 2026] [security2:error] [pid 2543122:tid 2543122] [client 130.49.8.95:16151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||grayowl.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "grayowl.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amGpahowRN0bJ3LEIkIA7wAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Tilellit.PRO
2026-07-05 04:28:59
UTC ·
(4 months ago)
WP Armour Plugin detection
Web Spam
Brute-Force
🇫🇷
Tilellit.PRO
2026-06-29 08:57:40
UTC ·
(4 months ago)
Fail2Ban banned 130.49.8.95 for security violations in jail wp-armour. Log: 2026/06/29 08:57:39 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 130.49.8.95 | Target: wplogin" , client: 130.49.8.95, server: [REDACTED], request: "POST ...
show more
Fail2Ban banned 130.49.8.95 for security violations in jail wp-armour. Log: 2026/06/29 08:57:39 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 130.49.8.95 | Target: wplogin" , client: 130.49.8.95, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
Tilellit.PRO
2026-06-27 06:38:25
UTC ·
(4 months ago)
Fail2Ban banned 130.49.8.95 for security violations in jail wp-armour. Log: 2026/06/27 06:38:25 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 130.49.8.95 | Target: wplogin" , client: 130.49.8.95, server: [REDACTED], request: "POST ...
show more
Fail2Ban banned 130.49.8.95 for security violations in jail wp-armour. Log: 2026/06/27 06:38:25 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 130.49.8.95 | Target: wplogin" , client: 130.49.8.95, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇪🇸
librebit
2026-06-24 11:34:52
UTC ·
(4 months ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-06-21 08:29:32
UTC ·
(4 months ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-06-19 10:47:14
UTC ·
(4 months ago)
Brute force
Brute-Force
