🇩🇪
Hazzard
2026-11-15 06:53:15
UTC ·
(5 hours ago)
(wordpress) Failed wordpress login from 190.5.48.61 (CL/Chile/Biobio/San Pedro de la Paz/190-5-48-61.static.pacificored.cl/[redacted]): (CF_ENABLE)
Brute-Force
🇵🇱
bmino.pl
2026-11-13 19:05:19
UTC ·
(1 day ago)
Autoban IP(2): 190.5.48.61 - Hostname: Pacifico Cable SPA. - City: San Pedro de la Paz - Country: Chile - Organization: Pacifico Cable SPA - Reason: POST /xmlrpc.php HTTP/2.0
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 02:55:45
UTC ·
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 190.5.48.61 (190-5-48-61.static.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:55:41.856465 2026] [security2:error] [pid 17093:tid 17093] ...
show more
(mod_security) mod_security (id:225170) triggered by 190.5.48.61 (190-5-48-61.static.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:55:41.856465 2026] [security2:error] [pid 17093:tid 17093] [client 190.5.48.61:13964] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paleopathologist.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paleopathologist.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avZ8LTFzn3sQICI89czj7AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 18:14:11
UTC ·
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 190.5.48.61 (190-5-48-61.static.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:14:04.707594 2026] [security2:error] [pid 13172:tid 13172] ...
show more
(mod_security) mod_security (id:225170) triggered by 190.5.48.61 (190-5-48-61.static.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:14:04.707594 2026] [security2:error] [pid 13172:tid 13172] [client 190.5.48.61:14472] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dougrhodes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dougrhodes.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "avYB7E8oUdYye6J9n2tWyQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Tripwire
2026-11-10 21:01:26
UTC ·
(4 days ago)
Probing for Wordpress - /xmlrpc.php
Brute-Force
Web App Attack
🇫🇷
LRob
2026-11-06 12:33:58
UTC ·
(1 week ago)
Web exploit attempt | method: GET | path: /wp-json/wp/v2/users | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
Hacking
Web App Attack
🇪🇸
pipeline.es
2026-11-05 04:40:02
UTC ·
(1 week ago)
WordPress login brute-force | URL: https://gacetadelturismo.com/wp-login.php | Evidence: {\"integration\":\"wordfence\",\"ts\":\"2026-11-05T04:38:41Z\",\"action\":\"blocked:wfsn\",\"description\":\"Blocked by Wordfence Security Network\",\"srcip\":\" ...
show more
WordPress login brute-force | URL: https://gacetadelturismo.com/wp-login.php | Evidence: {\"integration\":\"wordfence\",\"ts\":\"2026-11-05T04:38:41Z\",\"action\":\"blocked:wfsn\",\"description\":\"Blocked by Wordfence Security Network\",\"srcip\":\"190.5.48.61\",\"status_code\":503,\"url\":\"https://gacetadelturismo.com/wp-login.php\",\"user_agent\":\"Mozilla/5.0 (iPhone; CPU iPhone OS 26_6_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/155.0.8059.37 Mobile/15E148 Sa | ASN: Pacifico Cable SPA. | Country: CL
show less
Brute-Force
🇨🇿
Countryman
2026-11-05 01:10:01
UTC ·
(1 week ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-11-04 13:13:54
UTC ·
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 190.5.48.61 (190-5-48-61.static.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 08:13:50.854564 2026] [security2:error] [pid 28069:tid 28069] ...
show more
(mod_security) mod_security (id:225170) triggered by 190.5.48.61 (190-5-48-61.static.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 08:13:50.854564 2026] [security2:error] [pid 28069:tid 28069] [client 190.5.48.61:16522] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bigislandhawaiirealestate.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bigislandhawaiirealestate.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ausvjuF6yAjp3uMF9LY_PgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
jann
2026-11-04 09:49:22
UTC ·
(1 week ago)
Honeypot: connection to unused port 23 at 2026-11-04 09:49:22 UTC. No service runs there, any connection is unsolicited scanning.
Port Scan
🇨🇿
lp
2026-10-31 20:02:41
UTC ·
(2 weeks ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 190.5.48.61
2026-10-31T20:43:11+0100 vpn Access-Reject station: 190.5.48.61
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-10-31 01:10:01
UTC ·
(2 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇬🇧
SCLwebadministrator
2026-10-30 08:01:00
UTC ·
(2 weeks ago)
Bruteforce WordPress logins
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-10-29 16:57:34
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 190.5.48.61 (190-5-48-61.static.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 12:57:28.660664 2026] [security2:error] [pid 17289:tid 17300] ...
show more
(mod_security) mod_security (id:225170) triggered by 190.5.48.61 (190-5-48-61.static.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 12:57:28.660664 2026] [security2:error] [pid 17289:tid 17300] [client 190.5.48.61:15326] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nabsci.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nabsci.com"] [uri "/wp-json/wp/v2/users"] [unique_id "auN6-IcSYPdXRGUixoC1MQAAAcI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 15:49:17
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 190.5.48.61 (190-5-48-61.static.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 11:49:13.064970 2026] [security2:error] [pid 27761:tid 27804] ...
show more
(mod_security) mod_security (id:225170) triggered by 190.5.48.61 (190-5-48-61.static.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 11:49:13.064970 2026] [security2:error] [pid 27761:tid 27804] [client 190.5.48.61:16321] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cjherbalremedies.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cjherbalremedies.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atoweWoHXq4pLeMh3WVP-gAAAFY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
