Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
130.61.72.50 has been reported 68
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
[rede-168-134] 130.61.72.50 (DE/Germany/-), more than 10 Apache 404 hits in the last 3600 secs; Ports: 80,443; Direction: in; Trigger: LF_APACHE_404; Logs:
(mod_security) mod_security (id:218420) triggered by 130.61.72.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 20:41:06.054762 2024] [security2:error] [pid 25790:tid 25790] [client 130.61.72.50:53342] [cl ...
show more(mod_security) mod_security (id:218420) triggered by 130.61.72.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 20:41:06.054762 2024] [security2:error] [pid 25790:tid 25790] [client 130.61.72.50:53342] [client 130.61.72.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||192.64.150.30:443|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.30"] [uri "/hello.world"] [unique_id "Zv3oIrQh9pJ6JjNCldb9jQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Oct 3 02:32:38 C1D543E sshd[770077]: Invalid user uzytkownik from 130.61.72.50 port 35562
Oct 3 02:32:38 C1D543E sshd[770077]: Failed password for invalid user uzytkownik from 130.61.72.50 port 35562 ssh2
Oct 3 02:32:48 C1D543E sshd[770080]: Inval ...
show moreOct 3 02:32:38 C1D543E sshd[770077]: Invalid user uzytkownik from 130.61.72.50 port 35562
Oct 3 02:32:38 C1D543E sshd[770077]: Failed password for invalid user uzytkownik from 130.61.72.50 port 35562 ssh2
Oct 3 02:32:48 C1D543E sshd[770080]: Invalid user kafka from 130.61.72.50 port 40250
Oct 3 02:32:48 C1D543E sshd[770080]: Failed password for invalid user kafka from 130.61.72.50 port 40250 ssh2
Oct 3 02:32:58 C1D543E sshd[770082]: Invalid user zabbix from 130.61.72.50 port 44170
...
show less
Oct 3 02:07:09 schenklradio sshd[3162427]: Invalid user masc from 130.61.72.50 port 56516
Oct 3 02:07:19 schenklradio sshd[3162518]: Invalid user mcserver from 130.61.72.50 port 60282
Oct 3 02:07:29 schenklradio sshd[3162684]: Invalid user patrick ...
show moreOct 3 02:07:09 schenklradio sshd[3162427]: Invalid user masc from 130.61.72.50 port 56516
Oct 3 02:07:19 schenklradio sshd[3162518]: Invalid user mcserver from 130.61.72.50 port 60282
Oct 3 02:07:29 schenklradio sshd[3162684]: Invalid user patrick from 130.61.72.50 port 35758
Oct 3 02:07:39 schenklradio sshd[3162710]: Invalid user gfy from 130.61.72.50 port 39260
Oct 3 02:07:49 schenklradio sshd[3162714]: Invalid user kafka from 130.61.72.50 port 42736
...
show less