JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 50.116.86.130

50.116.86.130 was found in our database!

This IP was reported 253 times. Confidence of Abuse is 0%: ?

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Hostname(s)	srv206.prodns.com.br
Domain Name	oracle.com
Country	🇧🇷 Brazil
City	Vinhedo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 50.116.86.130

Whois 50.116.86.130

IP Abuse Reports for 50.116.86.130:

This IP address has been reported a total of 253 times from 102 distinct sources. 50.116.86.130 was first reported on July 31st 2021, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 big-cloud.nl	2025-12-01 17:24:28 (7 months ago)	Try to access /xmlrpc.php	Web App Attack
Anonymous	2025-11-15 22:30:12 (8 months ago)	Failed Wordpress Logins	Web App Attack
🇺🇸 octageeks.com	2025-11-06 05:08:12 (8 months ago)	Wordpress malicious attack:[octawp]	Web App Attack
🇫🇷 SpaceHost-Server	2025-11-05 23:41:54 (8 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-11-05 20:09:45 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 octageeks.com	2025-11-05 05:07:15 (8 months ago)	Wordpress malicious attack:[octawp]	Web App Attack
🇫🇷 SpaceHost-Server	2025-11-04 23:40:56 (8 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-11-04 20:09:44 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 TPI-Abuse	2025-11-04 15:04:22 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 50.116.86.130 (srv206.prodns.com.br): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 50.116.86.130 (srv206.prodns.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 04 10:04:15.566143 2025] [security2:error] [pid 21390:tid 21390] [client 50.116.86.130:12452] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|sliconswamp.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sliconswamp.com"] [uri "/wp-json/wp/V2/users"] [unique_id "aQoV7_0ACbdnuXvVm9DNxwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-04 11:47:47 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 50.116.86.130 (srv206.prodns.com.br): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 50.116.86.130 (srv206.prodns.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 04 06:47:40.392865 2025] [security2:error] [pid 3912705:tid 3912705] [client 50.116.86.130:13068] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|lightningbug.farm\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lightningbug.farm"] [uri "/wp-json/wp/v2/users.json"] [unique_id "aQnn3PLsHu89R0NhHLiiEwAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 neckaralb-admin.de	2025-11-04 11:40:27 (8 months ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2025-11-04 11:03:53 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 50.116.86.130 (srv206.prodns.com.br): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 50.116.86.130 (srv206.prodns.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 04 06:03:50.414366 2025] [security2:error] [pid 3840:tid 3840] [client 50.116.86.130:25518] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.produktives.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.produktives.com"] [uri "/wp-json/Wp/v2/users"] [unique_id "aQndlndWqtcdqzoiOb05mwAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇹 Malta	2025-11-04 06:49:35 (8 months ago)	50.116.86.130 - - [04/Nov/2025:07:49:35 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ... show more 50.116.86.130 - - [04/Nov/2025:07:49:35 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇫🇷 SEOAlexRamon	2025-11-04 06:42:33 (8 months ago)	Multiple POST /wp-login.php - Fail2Ban	Hacking Web App Attack
🇫🇷 dynamix	2025-11-04 05:40:24 (8 months ago)	WordPress wp-login.php Brute Force Attack	Brute-Force Web App Attack

Showing 1 to 15 of 253 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.183

🇨🇳 180.76.61.232

🇨🇴 130.250.230.177

🇰🇷 125.143.224.252

🇷🇺 83.242.110.89

🇺🇸 66.132.195.79

🇫🇷 51.254.103.32

🇺🇸 35.255.25.17

🇺🇸 34.182.241.128

🇺🇸 34.139.183.169

🇺🇸 34.46.142.213

🇲🇽 2607:f8b0:4023:2407::126

🇺🇸 216.131.74.185

🇦🇺 170.64.157.122

🇩🇪 167.94.145.28

🇨🇦 146.190.254.192

🇪🇸 87.235.59.208

🇬🇷 79.167.180.222

🇺🇸 54.210.172.55

🇺🇸 44.203.139.246