JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.90.148.112

111.90.148.112 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 0%: ?

ISP	Shinjiru Technology Sdn Bhd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45839
Hostname(s)	server1.kamon.la
Domain Name	shinjiru.com.my
Country	🇲🇾 Malaysia
City	Kuala Lumpur, Kuala Lumpur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.90.148.112

Whois 111.90.148.112

IP Abuse Reports for 111.90.148.112:

This IP address has been reported a total of 14 times from 12 distinct sources. 111.90.148.112 was first reported on January 10th 2023, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 Mr-Money	2023-12-29 21:33:37 (2 years ago)	27/Dec/2023:09:04:48 +0100111.90.148.112 - - [29/Dec/2023:22:33:35 +0100] "GET /.env HTTP/1.1" 404 4 ... show more 27/Dec/2023:09:04:48 +0100111.90.148.112 - - [29/Dec/2023:22:33:35 +0100] "GET /.env HTTP/1.1" 404 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" 27/Dec/2023:09:04:48 +0100111.90.148.112 - - [29/Dec/2023:22:33:36 +0100] "GET /.env HTTP/1.1" 404 5101 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" 27/Dec/2023:09:04:48 +0100111.90.148.112 - - [29/Dec/2023:22:33:37 +0100] "GET /.vscode/sftp.json HTTP/1.1" 404 465 "-" "-" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇨🇦 mitsurugi	2023-12-24 16:47:33 (2 years ago)	Xmlrpc attack.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2023-12-23 17:21:44 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 111.90.148.112 (mail.kolentiumos.cc): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 111.90.148.112 (mail.kolentiumos.cc): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 23 12:21:40.793941 2023] [security2:error] [pid 25326] [client 111.90.148.112:61011] [client 111.90.148.112] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.doctoredwinalvarez.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.doctoredwinalvarez.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZYcXJHFpXQoje5vEjn4XWwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2023-12-23 14:02:00 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2023-12-23 13:29:40 (2 years ago)	(wordpress) Failed wordpress login from 111.90.148.112 (MY/Malaysia/mail.kolentiumos.cc)	Brute-Force
Anonymous	2023-12-23 13:16:32 (2 years ago)	Bot / scanning and/or hacking attempts: POST /wp-login.php HTTP/1.1, POST /xmlrpc.php HTTP/1.1, GET ... show more Bot / scanning and/or hacking attempts: POST /wp-login.php HTTP/1.1, POST /xmlrpc.php HTTP/1.1, GET /?author=1 HTTP/1.1, GET /wp-login.php HTTP/1.1, GET / HTTP/1.1, GET /feed/ HTTP/1.1, GET /wp-includes/ID3/license.txt HTTP/1.1, GET /xmlrpc.php?rsd HTTP/1.1, GET /wp-json/wp/v2/users/ HTTP/1.1, GET /wp-json/oembed/1.0/embed?url=http://wotnxt.com HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 tradenet	2023-12-23 12:28:49 (2 years ago)	111.90.148.112 - - [23/Dec/2023:06:28:37 -0600] "POST //xmlrpc.php HTTP/1.1" 200 413 "-" "Mozilla/5. ... show more 111.90.148.112 - - [23/Dec/2023:06:28:37 -0600] "POST //xmlrpc.php HTTP/1.1" 200 413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 111.90.148.112 - - [23/Dec/2023:06:28:38 -0600] "POST //xmlrpc.php HTTP/1.1" 200 413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 111.90.148.112 - - [23/Dec/2023:06:28:39 -0600] "POST //xmlrpc.php HTTP/1.1" 200 413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 111.90.148.112 - - [23/Dec/2023:06:28:41 -0600] "POST //xmlrpc.php HTTP/1.1" 200 413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 111.90.148.112 - - [23/Dec/2023:06:28:42 -0600] "POST //xmlrpc.php HTTP/1.1" 200 413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrom ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-12-23 12:13:02 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 111.90.148.112 (mail.kolentiumos.cc): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 111.90.148.112 (mail.kolentiumos.cc): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 23 07:12:58.770446 2023] [security2:error] [pid 2657] [client 111.90.148.112:51213] [client 111.90.148.112] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|natickvillagerentals.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "natickvillagerentals.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZYbOysFheOFeUsBAgt75eQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-12-23 11:50:43 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 111.90.148.112 (mail.kolentiumos.cc): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 111.90.148.112 (mail.kolentiumos.cc): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 23 06:50:39.419186 2023] [security2:error] [pid 12491] [client 111.90.148.112:50203] [client 111.90.148.112] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bennoyes.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bennoyes.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZYbJjxjAUmZaNCnkx-W1GwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 KIsmay	2023-12-23 10:42:55 (2 years ago)	Dec 23 05:42:52 www4 WPAudit[1702511]: 111.90.148.112 www.terencegower.com "Mozilla/5.0 (Windows NT ... show more Dec 23 05:42:52 www4 WPAudit[1702511]: 111.90.148.112 www.terencegower.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" tonyg:admin FAIL Dec 23 05:42:53 www4 WPAudit[1702511]: 111.90.148.112 www.terencegower.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" tonyg:123456 FAIL Dec 23 05:42:53 www4 WPAudit[1702511]: 111.90.148.112 www.terencegower.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" tonyg:pass FAIL Dec 23 05:42:54 www4 WPAudit[1702511]: 111.90.148.112 www.terencegower.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" tonyg:pass123 FAIL Dec 23 05:42:54 www4 WPAudit[1702511]: 111.90.148.112 www.terencegower.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrom ... show less	Brute-Force Web App Attack
🇮🇱 Dolphi	2023-12-23 09:50:03 (2 years ago)	POST //xmlrpc.php	Brute-Force Web App Attack
🇬🇧 NotCool	2023-12-23 09:48:37 (2 years ago)	(XMLRPC) WP XMLPRC Attack 111.90.148.112 (MY/Malaysia/mail.kolentiumos.cc): 10 in the last 3600 secs ... show more (XMLRPC) WP XMLPRC Attack 111.90.148.112 (MY/Malaysia/mail.kolentiumos.cc): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER show less	Brute-Force
🇬🇧 Apache	2023-12-23 09:36:44 (2 years ago)	(mod_security) mod_security (id:210410) triggered by 111.90.148.112 (MY/Malaysia/mail.kolentiumos.cc ... show more (mod_security) mod_security (id:210410) triggered by 111.90.148.112 (MY/Malaysia/mail.kolentiumos.cc): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇬🇧 A8le_Arch3r	2023-01-10 11:00:36 (3 years ago)	Phishing mail host	Email Spam Hacking

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.201.231.57

🇲🇽 187.189.95.94

🇸🇬 152.32.218.244

🇲🇾 121.122.86.115

🇨🇳 116.179.37.13

🇫🇷 85.217.140.53

🇩🇪 69.5.169.8

🇺🇸 47.251.140.192

🇪🇸 46.253.45.10

🇳🇱 195.93.244.97

🇺🇸 188.213.202.137

🇮🇳 182.95.102.190

🇬🇧 172.69.224.58

🇸🇪 158.174.211.17

🇺🇸 155.103.69.40

🇫🇮 147.185.133.151

🇺🇸 144.86.173.15

🇹🇷 94.154.43.87

🇷🇺 94.51.221.66

🇫🇮 2.27.42.28