🇺🇸
JustMeHere
2026-09-05 05:41:35
(5 days ago)
[Sat Sep 05 01:41:30.271319 2026] [security2:error] [pid 42135:tid 42182] [client 146.19.90.83:40781 ...
show more
[Sat Sep 05 01:41:30.271319 2026] [security2:error] [pid 42135:tid 42182] [client 146.19.90.83:40781] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "yorknation.com"] [uri "/xmlrpc.php"] [unique_id "apurivX5U2sBrwJgmEZ66gAAANM"]
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 01:04:33
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 146.19.90.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 146.19.90.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 21:04:27.662626 2026] [security2:error] [pid 17173:tid 17173] [client 146.19.90.83:11617] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||slusarczyk.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "slusarczyk.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aptqmzYgydFzIFpsbUONKQAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-03 00:30:57
(1 week ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-08-07 11:18:47
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 146.19.90.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 146.19.90.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 07:18:40.898983 2026] [security2:error] [pid 2415361:tid 2415361] [client 146.19.90.83:63289] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||varnadorefamily.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "varnadorefamily.com"] [uri "/wp-json/wp/v2/users"] [unique_id "anW_EFeJ0RVJz98lwIUgmwAAAB8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-07 00:27:19
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 146.19.90.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 146.19.90.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 06 20:27:12.471831 2026] [security2:error] [pid 15658:tid 15658] [client 146.19.90.83:61043] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||siciliafamily.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "siciliafamily.com"] [uri "/wp-json/wp/v2/users"] [unique_id "anUmYLrsFyBlBiXaAa1yjQAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-04 18:35:41
(1 month ago)
Web password guessing
Brute-Force
🇺🇸
rsiddall
2026-07-08 20:09:46
(2 months ago)
146.19.90.83 - - [08/Jul/2026:16:09:24 -0400] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Apache-HttpC ...
show more
146.19.90.83 - - [08/Jul/2026:16:09:24 -0400] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Apache-HttpClient/4.5.13 (Java/17.0.18)"
146.19.90.83 - - [08/Jul/2026:16:09:45 -0400] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Apache-HttpClient/4.5.13 (Java/17.0.18)"
...
show less
Brute-Force
🇳🇱
GabrielJST
2026-06-29 09:00:19
(2 months ago)
(wordpress) Failed wordpress login from 146.19.90.83 (SC/Seychelles/-)
Brute-Force
🇫🇷
Tilellit.PRO
2026-06-28 09:03:25
(2 months ago)
Fail2Ban banned 146.19.90.83 for security violations in jail wp-armour. Log: 2026/06/28 09:03:25 [er ...
show more
Fail2Ban banned 146.19.90.83 for security violations in jail wp-armour. Log: 2026/06/28 09:03:25 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 146.19.90.83 | Target: wplogin" , client: 146.19.90.83, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇺🇸
TPI-Abuse
2026-06-21 06:21:48
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 146.19.90.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 146.19.90.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 02:21:44.185499 2026] [security2:error] [pid 23741:tid 23741] [client 146.19.90.83:60227] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||calvarycavaliers.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "calvarycavaliers.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajeC-JVbDc62stJD-rfcHQAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 20:52:11
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 146.19.90.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 146.19.90.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 16:52:08.362478 2026] [security2:error] [pid 30428:tid 30428] [client 146.19.90.83:28321] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||birdlovers.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "birdlovers.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajb9eJlylqHwj7LlVqkeggAAABQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-15 10:32:03
(6 months ago)
wordpress-trap
Web App Attack
🇷🇺
sms.ru
2024-09-27 01:05:04
(1 year ago)
SMS pumping attack from foreign country
DDoS Attack
