JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 119.148.40.139

119.148.40.139 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 49%: ?

49%

ISP	Agni Systems Limited,
Usage Type	Fixed Line ISP
ASN	AS23923
Domain Name	agni.com
Country	🇧🇩 Bangladesh
City	Dhaka, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 119.148.40.139

Whois 119.148.40.139

IP Abuse Reports for 119.148.40.139:

This IP address has been reported a total of 33 times from 22 distinct sources. 119.148.40.139 was first reported on June 29th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 rh24	2026-09-20 17:20:36 (2 days ago)	(wordpress) Failed wordpress login from 119.148.40.139 (BD/Bangladesh/-)	Brute-Force
🇩🇪 wpadm4	2026-09-19 15:01:42 (4 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-09-12 14:42:42 (1 week ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
Anonymous	2026-09-06 15:42:26 (2 weeks ago)	[redacted] 119.148.40.139 - - [06/Sep/2026:17:41:42 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 119.148.40.139 - - [06/Sep/2026:17:41:42 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" [redacted] 119.148.40.139 - - [06/Sep/2026:17:41:52 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 119.148.40.139 - - [06/Sep/2026:17:42:03 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.3; http://site62701615.com" [redacted] 119.148.40.139 - - [06/Sep/2026:17:42:14 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 119.148.40.139 - - [06/Sep/2026:17:42:25 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" ... show less	Hacking Web App Attack
🇺🇸 IndigoRidge	2026-09-05 19:44:33 (2 weeks ago)	[05/Sep/2026:15:41:48.376978 --0400] apxweh3ViE1vjLY9AfoeegAAA4A 119.148.40.139 47402 205.233.18.17 ... show more [05/Sep/2026:15:41:48.376978 --0400] apxweh3ViE1vjLY9AfoeegAAA4A 119.148.40.139 47402 205.233.18.17 7081 [05/Sep/2026:15:41:57.680907 --0400] apxwhRI1y-@L08EdMys2bQAAAco 119.148.40.139 41814 205.233.18.17 7081 [05/Sep/2026:15:42:52.856360 --0400] apxwvJVeellSCUfiRdVhCwAAA0E 119.148.40.139 55236 205.233.18.17 7081 [05/Sep/2026:15:43:15.079766 --0400] apxw05VeellSCUfiRdVhDQAAA00 119.148.40.139 42638 205.233.18.17 7081 [05/Sep/2026:15:44:32.490517 --0400] apxxIDX5mX2vW3a@g8biLQAAA8k 119.148.40.139 37204 205.233.18.17 7081 ... show less	Hacking
🇺🇸 IndigoRidge	2026-09-05 19:28:54 (2 weeks ago)	[05/Sep/2026:15:25:17.712227 --0400] apxsnR3ViE1vjLY9AfodOAAAA4o 119.148.40.139 58358 205.233.18.17 ... show more [05/Sep/2026:15:25:17.712227 --0400] apxsnR3ViE1vjLY9AfodOAAAA4o 119.148.40.139 58358 205.233.18.17 7081 [05/Sep/2026:15:27:16.389329 --0400] apxtFCpoDWFq8ni5eHpiCQAAAMQ 119.148.40.139 34170 205.233.18.17 7081 [05/Sep/2026:15:27:27.242305 --0400] apxtH2OnqmDwaCdcQ@XPAAAAAZM 119.148.40.139 43860 205.233.18.17 7081 [05/Sep/2026:15:28:21.148285 --0400] apxtVSpoDWFq8ni5eHpiMQAAAME 119.148.40.139 50954 205.233.18.17 7081 [05/Sep/2026:15:28:53.486772 --0400] apxtdVFc9-QZ6xBIBn8VrgAAAVM 119.148.40.139 57356 205.233.18.17 7081 ... show less	Hacking
Anonymous	2026-09-05 17:23:44 (2 weeks ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇺🇸 IndigoRidge	2026-09-05 14:42:57 (2 weeks ago)	119.148.40.139 - - [05/Sep/2026:10:41:40 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5752 "-" "WordPress. ... show more 119.148.40.139 - - [05/Sep/2026:10:41:40 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5752 "-" "WordPress.com; https://wordpress.com" 119.148.40.139 - - [05/Sep/2026:10:42:02 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5752 "-" "WordPress.com; https://wordpress.com" 119.148.40.139 - - [05/Sep/2026:10:42:12 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5752 "-" "WordPress.com; https://wordpress.com" 119.148.40.139 - - [05/Sep/2026:10:42:47 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5752 "-" "WordPress.com; https://wordpress.com" 119.148.40.139 - - [05/Sep/2026:10:42:56 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5752 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇫🇮 KnightIndustries	2026-08-29 18:30:25 (3 weeks ago)	2026-08-29T20:30:03.183792+02:00 milkyway wordpress(fawcettcomputerservices.com)[855022]: XML-RPC au ... show more 2026-08-29T20:30:03.183792+02:00 milkyway wordpress(fawcettcomputerservices.com)[855022]: XML-RPC authentication failure for joshua from 119.148.40.139 2026-08-29T20:30:13.738792+02:00 milkyway wordpress(fawcettcomputerservices.com)[846840]: XML-RPC authentication failure for joshua from 119.148.40.139 2026-08-29T20:30:24.496605+02:00 milkyway wordpress(fawcettcomputerservices.com)[846836]: XML-RPC authentication failure for joshua from 119.148.40.139 ... show less	Brute-Force Web App Attack
🇺🇸 kosada.com	2026-08-26 15:59:25 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 LSPCCU	2026-08-26 03:14:01 (4 weeks ago)	TSEC Honeypot Network report. Threat score: 62/100. Categories: DDoS Attack, Hacking, Brute-Force, W ... show more TSEC Honeypot Network report. Threat score: 62/100. Categories: DDoS Attack, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: h0neytr4p. Context: 119.148.40.139 classified as botnet node participating in coordinated attack campaigns (high confidence). show less	DDoS Attack Hacking Brute-Force Web App Attack SSH
🇳🇱 ConsulHosting	2026-08-25 15:26:19 (4 weeks ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇫🇷 Zkillu	2026-08-19 21:09:39 (1 month ago)	UDP flood (DDoS) vs AS215599: 38 pkts / 0.05 MB to UDP 8443 across 31 dst IP(s), 2026-08-19 21:46 to ... show more UDP flood (DDoS) vs AS215599: 38 pkts / 0.05 MB to UDP 8443 across 31 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 21:09:39 (1 month ago)	UDP flood (DDoS) vs AS215599: 38 pkts / 0.05 MB to UDP 8443 across 31 dst IP(s), 2026-08-19 21:46 to ... show more UDP flood (DDoS) vs AS215599: 38 pkts / 0.05 MB to UDP 8443 across 31 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇮 YF	2026-08-19 16:30:41 (1 month ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.232

🇨🇳 121.46.239.196

🇰🇷 112.184.15.64

🇻🇳 14.241.61.225

🇨🇳 222.74.219.131

🇧🇪 198.235.24.227

🇧🇪 198.235.24.220

🇦🇺 170.64.173.74

🇦🇷 152.169.112.69

🇺🇸 147.185.132.114

🇺🇸 145.132.103.64

🇰🇷 121.188.201.185

🇬🇧 45.82.76.116

🇵🇰 39.38.136.45

🇭🇰 38.237.240.31

🇬🇧 5.252.83.121

🇧🇪 198.235.24.193

🇹🇼 198.235.24.127

🇦🇷 152.168.235.100

🇮🇶 151.244.150.136