🇺🇸
TPI-Abuse
2026-11-10 14:58:48
UTC ·
(20 hours ago)
(mod_security) mod_security (id:225170) triggered by 190.5.36.149 (host190.5.36.149.dynamic.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 09:58:42.136214 2026] [security2:error] [pid 31566:tid ...
show more
(mod_security) mod_security (id:225170) triggered by 190.5.36.149 (host190.5.36.149.dynamic.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 09:58:42.136214 2026] [security2:error] [pid 31566:tid 31566] [client 190.5.36.149:32612] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ftiptondds.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ftiptondds.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avMxIsHC2pbDqzubag3w2QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 14:35:36
UTC ·
(21 hours ago)
(mod_security) mod_security (id:225170) triggered by 190.5.36.149 (host190.5.36.149.dynamic.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 09:35:29.575920 2026] [security2:error] [pid 5173:tid 5 ...
show more
(mod_security) mod_security (id:225170) triggered by 190.5.36.149 (host190.5.36.149.dynamic.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 09:35:29.575920 2026] [security2:error] [pid 5173:tid 5194] [client 190.5.36.149:32302] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pwihatah.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pwihatah.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avMrsYjiijBUs4YYY3-gEgAAAUo"], referer: http://pwihatah.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-11-05 01:33:46
UTC ·
(6 days ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 190.5.36.149
2026-11-05T02:17:37+0100 vpn Access-Reject station: 190.5.36.149
Brute-Force
Web App Attack
🇩🇪
EGP Abuse Dept
2026-11-03 11:08:22
UTC ·
(1 week ago)
Scanning for web/db/file exploits on www.schonkerenbv.nl
SQL Injection
Bad Web Bot
Web App Attack
🇫🇷
✨
2026-11-03 02:46:18
UTC ·
(1 week ago)
Rule : WORDPRESS BOT
[2026-11-03 02:43:22] Unauthorized login attempt to fitraproductions.com wordpress from IP 190.5.36.149 with username admin
Port Scan
🇺🇸
TPI-Abuse
2026-11-02 00:37:42
UTC ·
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 190.5.36.149 (host190.5.36.149.dynamic.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 19:37:35.597185 2026] [security2:error] [pid 8618:tid 8 ...
show more
(mod_security) mod_security (id:225170) triggered by 190.5.36.149 (host190.5.36.149.dynamic.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 19:37:35.597185 2026] [security2:error] [pid 8618:tid 8743] [client 190.5.36.149:32468] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cynosurelandscapers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cynosurelandscapers.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aufbT_ntWC3c5LbvRhiodAAAAEg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
YF
2026-10-31 15:30:55
UTC ·
(1 week ago)
WordPress author enumeration
Web App Attack
2026-10-31 13:29:35
UTC ·
(1 week ago)
Web probing (5 hits in 24h) on default-vhost,www.historischarchiefvalkenburg.nl: sensitive-path scans and/or 404 bursts. Reported by CRMON.
Web App Attack
🇨🇿
Countryman
2026-10-31 01:10:01
UTC ·
(1 week ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
solantex
2026-10-29 13:38:05
UTC ·
(1 week ago)
Unauthorized automated scanning and reconnaissance against Solantex resources. No crawl, scan or test permission has been granted to this source.
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 02:29:18
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 190.5.36.149 (host190.5.36.149.dynamic.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 22:29:11.226411 2026] [security2:error] [pid 12640:tid ...
show more
(mod_security) mod_security (id:210350) triggered by 190.5.36.149 (host190.5.36.149.dynamic.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 22:29:11.226411 2026] [security2:error] [pid 12640:tid 12640] [client 190.5.36.149:41238] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||joescherzi.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "joescherzi.com"] [uri "/"] [unique_id "auAMd5t1thLQTBjJb6tP6wAAAAA"], referer: https://simplycg.net/?f=33&page=topic&t=1175
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
JRID
2026-10-20 22:30:26
UTC ·
(3 weeks ago)
Detected by CrowdSec + Suricata IDS: automated attack/scan against web servers.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 15:52:41
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 190.5.36.149 (host190.5.36.149.dynamic.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 11:52:37.711598 2026] [security2:error] [pid 27884:tid ...
show more
(mod_security) mod_security (id:225170) triggered by 190.5.36.149 (host190.5.36.149.dynamic.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 11:52:37.711598 2026] [security2:error] [pid 27884:tid 27884] [client 190.5.36.149:32490] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||100pairofpajamas.srtmanagementservices.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "100pairofpajamas.srtmanagementservices.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atJIRUkEEp_cTgffB7QVmgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Celtic
2026-10-15 03:37:29
UTC ·
(3 weeks ago)
Blocked by Fail2Ban with Jail (plesk-modsecurity)
Brute-Force
SSH
🇩🇪
Packets-Decreaser.NET
2026-10-12 15:27:52
UTC ·
(4 weeks ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
