AbuseIPDB » 58.140.22.90

58.140.22.90 was found in our database!

This IP was reported 82 times. Confidence of Abuse is 34%: ?

34%

ISP	DLIVE
Usage Type	Fixed Line ISP
Domain Name	dlive.kr
Country	Korea (the Republic of)
City	Seoul, Seoul-teukbyeolsi

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 58.140.22.90

Whois 58.140.22.90

IP Abuse Reports for 58.140.22.90:

This IP address has been reported a total of 82 times from 34 distinct sources. 58.140.22.90 was first reported on October 3rd 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
weblite	2024-02-03 04:07:27 (8 months ago)	WP_LOGIN_FAIL WP_XMLRPC_ABUSE	Brute-Force Web App Attack
Hippoline	2024-02-01 16:41:04 (8 months ago)	Feb 1 17:41:01 local wp(XXXX-A)[6830]: Authentication attempt for unknown user blog from 58.140.22. ... show moreFeb 1 17:41:01 local wp(XXXX-A)[6830]: Authentication attempt for unknown user blog from 58.140.22.90 ... show less	Brute-Force Web App Attack
TPI-Abuse	2024-01-29 12:51:27 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 58.140.22.90 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:225170) triggered by 58.140.22.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 29 07:51:18.957673 2024] [security2:error] [pid 12467] [client 58.140.22.90:52701] [client 58.140.22.90] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.clayrivers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.clayrivers.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZbefRlTfnIC2b7oKSXf0KQAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
FeG Deutschland	2024-01-27 05:25:39 (8 months ago)	Wordfence - Login with invalid Username	Brute-Force
MAGIC	2024-01-19 07:04:48 (8 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
niceshops.com	2024-01-18 08:32:52 (8 months ago)	Web Attack ([18/Jan/2024:09:32:51.747] GET /wp-login.php)	Web App Attack
TPI-Abuse	2024-01-06 15:14:44 (9 months ago)	(mod_security) mod_security (id:225170) triggered by 58.140.22.90 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:225170) triggered by 58.140.22.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 06 10:14:35.794550 2024] [security2:error] [pid 10475] [client 58.140.22.90:53330] [client 58.140.22.90] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|grabagame.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "grabagame.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZZluW19bwJC7px96ylsx6QAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
niceshops.com	2024-01-05 03:13:35 (9 months ago)	Web Attack ([05/Jan/2024:04:13:34.013] GET /wp-login.php)	Web App Attack
Anonymous	2024-01-01 14:08:33 (9 months ago)	Bot / scanning and/or hacking attempts: GET /wp-login.php HTTP/1.1, GET /xmlrpc.php HTTP/1.1	Hacking Web App Attack
MAGIC	2023-12-30 07:17:42 (9 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
MAGIC	2023-12-28 12:04:53 (9 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
URAN Publishing Service	2023-12-27 01:14:29 (9 months ago)	58.140.22.90 - - [27/Dec/2023:03:14:25 +0200] "GET /wp-login.php HTTP/1.1" 404 4781 "-" "Mozilla/5.0 ... show more58.140.22.90 - - [27/Dec/2023:03:14:25 +0200] "GET /wp-login.php HTTP/1.1" 404 4781 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 58.140.22.90 - - [27/Dec/2023:03:14:27 +0200] "GET /xmlrpc.php HTTP/1.1" 404 366 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Web App Attack
niceshops.com	2023-12-26 16:05:26 (9 months ago)	Web Attack ([26/Dec/2023:17:05:25.768] GET /wp-login.php)	Web App Attack
taivas.nl	2023-12-24 04:02:53 (9 months ago)	Wordpress_xmlrpc_attack	Bad Web Bot
niceshops.com	2023-12-22 08:22:32 (9 months ago)	Web Attack ([22/Dec/2023:09:22:31.894] GET /wp-login.php)	Web App Attack