JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 115.66.183.149

115.66.183.149

Recent Activity

19 reports found in our database

77% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

SingNET Broadband

Usage Type

Fixed Line ISP

ASN

AS9506

Hostname(s)

bb115-66-183-149.singnet.com.sg

Domain Name

singtel.com

Country

🇸🇬 Singapore

City

Bukit Panjang New Town

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 115.66.183.149:

This IP address has been reported a total of 19 times from 16 distinct sources. 115.66.183.149 was first reported on May 27th 2026, and the most recent report was 18 hours ago. In the last 60 days, the top reporter locations were: Germany with 7 reports; United States of America with 5 reports; Belgium with 1 report. The most common categories in these recent reports were: Web App Attack 13 times; Brute-Force 8 times; Bad Web Bot 4 times; Exploited Host 2 times; Blog Spam 1 time; Other 5 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-09-09 16:10:22 (18 hours ago)	WordPress login brute-force \| path: /wp-login.php \| 2026-09-09 16:10 UTC	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-09-09 05:46:15 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇧🇪 brechtr	2026-09-09 05:41:53 (1 day ago)	[Press84-BanHammer] bad username — Sourced from: brechtryckaert.com — Request: POST /wp-login.php	Brute-Force
🇮🇹 CoreTech srl	2026-09-09 05:23:57 (1 day ago)	cloudlinux2 fail2ban: 2026-09-09 07:19:06,276 fail2ban.filter [1892]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-09-09 07:19:06,276 fail2ban.filter [1892]: INFO [plesk-modsecurity] Found 150.107.173.185 - 2026-09-09 07:19:06cloudlinux2 fail2ban: 2026-09-09 07:19:45,255 fail2ban.filter [1892]: INFO [plesk-proftpd] Found 138.197.194.83 - 2026-09-09 07:19:45cloudlinux2 fail2ban: 2026-09-09 07:20:34,901 fail2ban.filter [1892]: INFO [plesk-wordpress] Found 193.36.225.175 - 2026-09-09 07:20:34cloudlinux2 fail2ban: 2026-09-09 07:21:03,532 fail2ban.filter [1892]: INFO [plesk-wordpress] Found 45.92.229.75 - 2026-09-09 07:21:02cloudlinux2 fail2ban: 2026-09-09 07:21:09,631 fail2ban.filter [1892]: INFO [plesk-modsecurity] Found 62.250.124.10 - 2026-09-09 07:21:09cloudlinux2 fail2ban: 2026-09-09 07:21:54,251 fail2ban.filter [1892]: INFO [plesk-wordpress] Found 142.111.152.49 - 2026-09-09 07:21:53cloudlinux2 fail2ban: 2026-09-09 07:22:10,699 fail2ban.actions [1892]: NOTICE [plesk-modsecurity] Unban 9.246.91.150cloudlinux2 fail2ban: 20 show less	FTP Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-09 01:11:20 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 115.66.183.149 (bb115-66-183-149.singnet.com.sg ... show more (mod_security) mod_security (id:225170) triggered by 115.66.183.149 (bb115-66-183-149.singnet.com.sg): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 21:11:15.873074 2026] [security2:error] [pid 14993:tid 14993] [client 115.66.183.149:37848] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bikiniadvice.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bikiniadvice.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqCyMzcwp8r6yCxPsDk9DQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 spamverify.com	2026-09-09 00:17:11 (1 day ago)	Honeypot Hit: WordPress Users	Web Spam Blog Spam Bad Web Bot Web App Attack
🇩🇪 F242	2026-09-08 22:09:59 (1 day ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇩🇪 london2038.com	2026-09-08 22:00:07 (1 day ago)	Probing for exploits 115.66.183.149 - - [09/Sep/2026:00:00:02 +0200] "GET /wp-login.php HTTP/2.0" 30 ... show more Probing for exploits 115.66.183.149 - - [09/Sep/2026:00:00:02 +0200] "GET /wp-login.php HTTP/2.0" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 115.66.183.149 - - [09/Sep/2026:00:00:05 +0200] "POST /wp-login.php HTTP/2.0" 301 0 "https://v97746.<REDACTED>/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-08 19:55:30 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 115.66.183.149 (bb115-66-183-149.singnet.com.sg ... show more (mod_security) mod_security (id:225170) triggered by 115.66.183.149 (bb115-66-183-149.singnet.com.sg): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 15:55:24.074133 2026] [security2:error] [pid 10505:tid 10505] [client 115.66.183.149:36638] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|coyotebytes.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "coyotebytes.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqBoLMRJUuKWlmCh_QTLYgAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-08 14:05:42 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 115.66.183.149 (bb115-66-183-149.singnet.com.sg ... show more (mod_security) mod_security (id:225170) triggered by 115.66.183.149 (bb115-66-183-149.singnet.com.sg): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 10:05:36.731138 2026] [security2:error] [pid 32447:tid 32447] [client 115.66.183.149:43522] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mccompu.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mccompu.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqAWMEoz9w7bu2dIid_-gwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 stinpriza	2026-09-08 13:58:07 (1 day ago)	Web App Attack	Web App Attack
🇩🇪 LRob	2026-09-08 06:03:27 (2 days ago)	WordPress login brute-force \| path: /wp-login.php \| 2026-09-08 06:03 UTC	Brute-Force Web App Attack
🇺🇸 nationaleventpros.com	2026-09-08 04:19:45 (2 days ago)	WordPress login attempt	Brute-Force
🇩🇪 georgengelmann	2026-09-07 20:57:01 (2 days ago)	Failed login attempt for bchpls	Brute-Force Web App Attack
🇺🇸 lostswordfish.com	2026-09-07 18:20:05 (2 days ago)	Wordfence waf block on secure2024 libjusco	Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 188.166.95.31

🇪🇨 186.42.173.68

🇺🇸 146.190.159.139

🇫🇷 93.21.78.90

🇭🇷 86.32.234.95

🇫🇷 85.217.140.39

🇺🇸 64.202.186.161

🇧🇪 34.38.113.217

🇺🇸 4.150.189.16

🇺🇸 205.210.31.27

🇦🇷 200.112.142.213

🇵🇰 153.117.69.215

🇺🇸 142.254.104.223

🇨🇦 142.44.135.252

🇨🇳 113.218.235.138

🇨🇳 106.75.25.139

🇺🇸 66.132.186.221

🇭🇺 62.165.247.187

🇰🇷 59.8.109.37

🇿🇦 41.193.79.202