JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.117.148.154

138.117.148.154 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 87%: ?

87%

ISP	SOC. COMERCIAL WIRENET CHILE LTDA.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS265831
Hostname(s)	int4.cpanelhost.cl
Domain Name	wirenetchile.com
Country	🇨🇱 Chile
City	Santiago, Santiago Metropolitan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.117.148.154

Whois 138.117.148.154

IP Abuse Reports for 138.117.148.154:

This IP address has been reported a total of 29 times from 15 distinct sources. 138.117.148.154 was first reported on August 20th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-09-03 10:32:13 (3 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 07:26:23 (7 hours ago)	(mod_security) mod_security (id:225170) triggered by 138.117.148.154 (int4.cpanelhost.cl): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 138.117.148.154 (int4.cpanelhost.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 03:26:17.407060 2026] [security2:error] [pid 12611:tid 12611] [client 138.117.148.154:57840] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cathybermanmft.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cathybermanmft.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apkhGcU17fXUGWK4NGDDiAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 06:26:10 (8 hours ago)	(mod_security) mod_security (id:225170) triggered by 138.117.148.154 (int4.cpanelhost.cl): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 138.117.148.154 (int4.cpanelhost.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 02:26:04.451342 2026] [security2:error] [pid 30575:tid 30575] [client 138.117.148.154:44888] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|leolion.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "leolion.net"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apkS_IByh1xU4KSyoCLWRQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-09-02 04:50:24 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 04:07:16 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 138.117.148.154 (int4.cpanelhost.cl): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 138.117.148.154 (int4.cpanelhost.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 00:07:08.549051 2026] [security2:error] [pid 14629:tid 14629] [client 138.117.148.154:33932] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|hellomdinc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hellomdinc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apeg7FP2k8aBj9o5vcPw-gAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-09-01 20:55:53 (1 day ago)	[01/Sep/2026:23:55:53 +0300] -- 138.117.148.154 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp ... show more [01/Sep/2026:23:55:53 +0300] -- 138.117.148.154 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-json/wp/v2/media?per_page=50&_fields=author HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 06:26:00 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 138.117.148.154 (int4.cpanelhost.cl): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 138.117.148.154 (int4.cpanelhost.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 02:25:53.187122 2026] [security2:error] [pid 18222:tid 18222] [client 138.117.148.154:49664] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|gegkal.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gegkal.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apZv8VQGAhfPDCA3-CH7swAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-01 05:19:04 (2 days ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /wp-login.php \| 2026-09-01 05:19 UTC show less	Hacking Web App Attack
Anonymous	2026-09-01 05:07:40 (2 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇲🇽 octageeks.com	2026-09-01 04:16:00 (2 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 22:01:04 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 138.117.148.154 (int4.cpanelhost.cl): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 138.117.148.154 (int4.cpanelhost.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 18:00:55.980663 2026] [security2:error] [pid 11725:tid 11758] [client 138.117.148.154:58512] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|streamriders.com.hdtv55.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "streamriders.com.hdtv55.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apX5lwSkRn7-f-KLKg774gAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 Progetto1	2026-08-31 21:25:02 (2 days ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇩🇪 Hazzard	2026-08-31 19:42:00 (2 days ago)	(wordpress) Failed wordpress login from 138.117.148.154 (CL/Chile/Santiago Metropolitan/Santiago/int ... show more (wordpress) Failed wordpress login from 138.117.148.154 (CL/Chile/Santiago Metropolitan/Santiago/int4.cpanelhost.cl/[redacted]): (CF_ENABLE) show less	Brute-Force
🇫🇷 ELYAZ	2026-08-31 17:20:59 (2 days ago)	(wordpress) Failed wordpress login from 138.117.148.154 (CL/Chile/int4.cpanelhost.cl): (CF_ENABLE)	Brute-Force
🇩🇪 FeG Deutschland	2026-08-31 14:41:23 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:e8e9:2001

🇺🇸 209.38.152.19

🇦🇷 181.46.185.127

🇨🇴 108.174.156.122

🇺🇸 73.147.39.126

🇺🇸 66.132.195.103

🇺🇸 45.131.195.197

🇺🇸 20.127.239.250

🇬🇧 206.237.74.174

🇨🇳 124.66.79.145

🇫🇷 77.239.124.171

🇺🇸 64.227.110.161

🇺🇸 20.163.3.20

🇺🇸 185.117.225.185

🇭🇰 157.254.191.103

🇹🇭 134.236.70.32

🇮🇳 103.42.199.115

🇺🇸 47.89.209.143

🇬🇧 35.203.210.132

🇰🇷 14.39.124.140