This IP address has been reported a total of
8
times from
5 distinct
sources.
172.59.138.250 was first reported on
November 25th 2025 , and the most recent report was
1 week ago Germany
with 1
report.
The most common categories in these recent reports were:
Web App Attack
1
time;
DDoS Attack
1
time.
Old Reports
The most recent abuse report for this IP address is from
1 week ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
LRob
2026-10-02 17:47:57
(1 week ago)
Shop search flood (L7 DDoS) | path: /4-velos-electriques | query: order=product.position.asc&product ...
show more
Shop search flood (L7 DDoS) | path: /4-velos-electriques | query: order=product.position.asc&productListView=list&q=Famille-Axis-iRide | src_port: 18081
show less
DDoS Attack
Web App Attack
🇧🇪
voormedia
2025-11-28 11:16:15
(10 months ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 07:13:11
(10 months ago)
(mod_security) mod_security (id:225170) triggered by 172.59.138.250 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 172.59.138.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 02:13:07.039993 2025] [security2:error] [pid 23528:tid 23528] [client 172.59.138.250:38460] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tecnoconce.cl|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tecnoconce.cl"] [uri "/wp-json/wp/v2/users"] [unique_id "aSlLg_9woFZMJp5zjC8HUQAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2025-11-28 05:45:04
(10 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2025-11-27 20:15:05
(10 months ago)
(mod_security) mod_security (id:225170) triggered by 172.59.138.250 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 172.59.138.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 15:14:59.044319 2025] [security2:error] [pid 1151:tid 1151] [client 172.59.138.250:28589] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||callahan-co.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "callahan-co.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aSixQwgEGjIh6mBpio7aHAAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-27 17:51:30
(10 months ago)
(mod_security) mod_security (id:225170) triggered by 172.59.138.250 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 172.59.138.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 12:51:26.290341 2025] [security2:error] [pid 27322:tid 27322] [client 172.59.138.250:41900] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lisagilinger.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lisagilinger.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aSiPnh69btVXBl56z-FqXwAAABQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 09:58:39
(10 months ago)
(mod_security) mod_security (id:225170) triggered by 172.59.138.250 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 172.59.138.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:58:32.606521 2025] [security2:error] [pid 12008:tid 12008] [client 172.59.138.250:28240] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lsippell.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lsippell.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aSbPSOJDgD07IMmZ_6n8aAAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
flws
2025-11-25 06:23:57
(10 months ago)
Using APIs to sign up a huge number of fake users
Exploited Host
Web App Attack
Showing 1 to
8
of 8 reports
