This IP address has been reported a total of
8
times from
6 distinct
sources.
190.131.130.18 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United Kingdom of Great Britain and Northern Ireland
with 1
report;
United States of America
with 1
report.
The most common categories in these recent reports were:
Web App Attack
2
times;
Bad Web Bot
1
time;
Brute-Force
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(mod_security) mod_security (id:210350) triggered by 190.131.130.18 (hfce-190-131-130-18.customer.cl ...
show more(mod_security) mod_security (id:210350) triggered by 190.131.130.18 (hfce-190-131-130-18.customer.claro.com.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 08:15:23.802478 2026] [security2:error] [pid 30938:tid 30961] [client 190.131.130.18:44534] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||nimbll.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "nimbll.com"] [uri "/"] [unique_id "at3y23LvHm_AlY7Lyj6EygAAAJQ"], referer: https://palisadeirrigationdistrict.org/2016/04
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Honeypot: http-public probing for vulnerable paths /archive/worlds/datapacks-staff-notes/2023-08/sur ...
show moreHoneypot: http-public probing for vulnerable paths /archive/worlds/datapacks-staff-notes/2023-08/survival-posters/to-sort/misc/misc
show less
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show moreDistributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
show less
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.10 is noted in report tim ...
show moreAttempted brute force login to web vpn 1 time(s); last attempt for 2025.12.10 is noted in report timestamp
show less
