JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 128.199.146.215

128.199.146.215 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 128.199.146.215

Whois 128.199.146.215

IP Abuse Reports for 128.199.146.215:

This IP address has been reported a total of 28 times from 11 distinct sources. 128.199.146.215 was first reported on January 14th 2023, and the most recent report was 3 years ago.

Old Reports: The most recent abuse report for this IP address is from 3 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2023-01-27 06:08:39 (3 years ago)	[Fri Jan 27 12:37:17.218383 2023] [security2:error] [pid 74454:tid 139946744292928] [client 128.199. ... show more [Fri Jan 27 12:37:17.218383 2023] [security2:error] [pid 74454:tid 139946744292928] [client 128.199.146.215:59966] [client 128.199.146.215] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:rsd. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "501"] [id "921170"] [data "Matched Data: r found within ARGS_NAMES:rsd: rsd request_line = GET //xmlrpc.php?rsd HTTP/1.1"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/3"] [tag "OWASP_CRS"] [tag "capec/1000/152/137/15/460"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/xmlrpc.php"] [unique_id "Y9NjDQG11JvOj4LzwL7cLAAAAxI"] [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[74532] [izgnQkCj+CA] [Y9NjDQG11JvOj4LzwL7cLAAAAxI] keep_alive=[0] [2023-01-27 12:37:17.218387] [R:Y9NjDQG11JvOj4LzwL7cLAAAAxI] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 ... show less	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2023-01-26 23:56:30 (3 years ago)	128.199.146.215 - - [27/Jan/2023:01:55:33 +0200] "GET /wp-admin/style.php HTTP/1.1" 404 275 "www.bin ... show more 128.199.146.215 - - [27/Jan/2023:01:55:33 +0200] "GET /wp-admin/style.php HTTP/1.1" 404 275 "www.bing.com" "wp_is_mobile" 128.199.146.215 - - [27/Jan/2023:01:56:28 +0200] "GET /wp-content/export.php HTTP/1.1" 404 196 "www.bing.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" ... show less	Web App Attack
🇩🇪 niceshops.com	2023-01-26 12:58:06 (3 years ago)	Web Attack ([26/Jan/2023:13:58:04.144] GET //wp-includes/wlwmanifest.xml)	Web App Attack
🇬🇧 Delta Whiskey	2023-01-26 12:25:22 (3 years ago)	Multiple failed WordPress authentication attempts	Brute-Force Web App Attack
🇮🇩 hermawan	2023-01-26 11:35:05 (3 years ago)	[Thu Jan 26 18:30:36.771207 2023] [security2:error] [pid 7528:tid 139909912016448] [client 128.199.1 ... show more [Thu Jan 26 18:30:36.771207 2023] [security2:error] [pid 7528:tid 139909912016448] [client 128.199.146.215:50225] [client 128.199.146.215] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:rsd. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "501"] [id "921170"] [data "Matched Data: r found within ARGS_NAMES:rsd: rsd request_line = GET //xmlrpc.php?rsd HTTP/1.1"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/3"] [tag "OWASP_CRS"] [tag "capec/1000/152/137/15/460"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/xmlrpc.php"] [unique_id "Y9JkXMwhDMNvGN2nFefipgAAAbM"] [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[7666] [8nHnExF9Kqs] [Y9JkXMwhDMNvGN2nFefipgAAAbM] keep_alive=[0] [2023-01-26 18:30:36.771211] [R:Y9JkXMwhDMNvGN2nFefipgAAAbM] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ... show less	Hacking Web App Attack
🇮🇩 Secmon	2023-01-25 13:00:05 (3 years ago)	Attack web	Hacking Web App Attack
🇮🇩 hermawan	2023-01-25 08:12:40 (3 years ago)	[Wed Jan 25 15:09:08.259805 2023] [security2:error] [pid 10190:tid 140097127179840] [client 128.199. ... show more [Wed Jan 25 15:09:08.259805 2023] [security2:error] [pid 10190:tid 140097127179840] [client 128.199.146.215:52934] [client 128.199.146.215] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:dizo. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "501"] [id "921170"] [data "Matched Data: d found within ARGS_NAMES:dizo: dizo request_line = GET /wp-signin.php?dizo&ping HTTP/1.1"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/3"] [tag "OWASP_CRS"] [tag "capec/1000/152/137/15/460"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/wp-signin.php"] [unique_id "Y9DjpBJQj1hH5P9w4XQgJgAAAng"], referer www.bing.com [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[10254] [a2aHJepfuEA] [Y9DjpBJQj1hH5P9w4XQgJgAAAng] keep_alive=[0] [2023-01-25 15:09:08.259809] [R:Y9DjpBJQj1hH5P9w4XQgJgAAAng] UA:'wp_is_mobile' Host:'kar ... show less	Hacking Web App Attack
🇮🇩 hermawan	2023-01-25 04:12:26 (3 years ago)	[Wed Jan 25 09:30:40.494065 2023] [security2:error] [pid 263595:tid 139976046003776] [client 128.199 ... show more [Wed Jan 25 09:30:40.494065 2023] [security2:error] [pid 263595:tid 139976046003776] [client 128.199.146.215:62727] [client 128.199.146.215] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:dizo. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "501"] [id "921170"] [data "Matched Data: d found within ARGS_NAMES:dizo: dizo request_line = GET /wp-signin.php?dizo&ping HTTP/1.1"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/3"] [tag "OWASP_CRS"] [tag "capec/1000/152/137/15/460"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/wp-signin.php"] [unique_id "Y9CUUKyuKWLcAeLkTC7rGgAAA5Y"], referer www.bing.com [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[263703] [1l0Xa3WMZQA] [Y9CUUKyuKWLcAeLkTC7rGgAAA5Y] keep_alive=[0] [2023-01-25 09:30:40.494068] [R:Y9CUUKyuKWLcAeLkTC7rGgAAA5Y] UA:'wp_is_mobile' Host:'k ... show less	Hacking Web App Attack
🇮🇩 hermawan	2023-01-21 09:13:07 (3 years ago)	[Sat Jan 21 15:59:21.451246 2023] [security2:error] [pid 777266:tid 139803970483776] [client 128.199 ... show more [Sat Jan 21 15:59:21.451246 2023] [security2:error] [pid 777266:tid 139803970483776] [client 128.199.146.215:60539] [client 128.199.146.215] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:rsd. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "501"] [id "921170"] [data "Matched Data: r found within ARGS_NAMES:rsd: rsd request_line = GET //xmlrpc.php?rsd HTTP/1.1"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/3"] [tag "OWASP_CRS"] [tag "capec/1000/152/137/15/460"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/xmlrpc.php"] [unique_id "Y8upadccYkA4cq_9_Y4RBQAABCU"] [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[777339] [zifEYfpVL/8] [Y8upadccYkA4cq_9_Y4RBQAABCU] keep_alive=[0] [2023-01-21 15:59:21.451250] [R:Y8upadccYkA4cq_9_Y4RBQAABCU] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 ... show less	Hacking Web App Attack
🇩🇪 niceshops.com	2023-01-21 07:35:20 (3 years ago)	Web Attack ([21/Jan/2023:08:35:18.529] GET //wp-includes/wlwmanifest.xml)	Web App Attack
🇩🇪 niceshops.com	2023-01-20 14:08:37 (3 years ago)	Web Attack ([20/Jan/2023:15:08:34.963] GET //wp-includes/wlwmanifest.xml)	Web App Attack
🇮🇩 Secmon	2023-01-20 09:47:25 (3 years ago)	Web	Hacking Web App Attack
🇮🇩 Secmon	2023-01-20 08:11:35 (3 years ago)	Attack web	Hacking Web App Attack
🇮🇩 hermawan	2023-01-20 05:14:12 (3 years ago)	[Fri Jan 20 10:11:11.411384 2023] [security2:error] [pid 305343:tid 139817979450944] [client 128.199 ... show more [Fri Jan 20 10:11:11.411384 2023] [security2:error] [pid 305343:tid 139817979450944] [client 128.199.146.215:62556] [client 128.199.146.215] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:rsd. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "501"] [id "921170"] [data "Matched Data: r found within ARGS_NAMES:rsd: rsd request_line = GET //xmlrpc.php?rsd HTTP/1.1"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/3"] [tag "OWASP_CRS"] [tag "capec/1000/152/137/15/460"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/xmlrpc.php"] [unique_id "Y8oGT2Wnv9c7ddEyftw0HwAAAuE"] [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[305442] [QmrDZhE227c] [Y8oGT2Wnv9c7ddEyftw0HwAAAuE] keep_alive=[0] [2023-01-20 10:11:11.411387] [R:Y8oGT2Wnv9c7ddEyftw0HwAAAuE] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 ... show less	Hacking Web App Attack
🇺🇸 ChamberofCommerce.com	2023-01-20 01:31:03 (3 years ago)	Unauthorized Bot Spam - Based on Confidence Score of:65 - Per Minute Requests:29	Bad Web Bot

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 2400:cb00:927:1000:f5e:764:f9ec:d7ce

🇺🇸 192.155.90.220

🇩🇪 167.94.146.61

🇬🇧 165.22.125.197

🇭🇺 151.0.81.179

🇸🇬 118.139.164.171

🇹🇼 111.70.29.130

🇨🇳 111.53.185.153

🇻🇳 103.153.68.24

🇸🇮 102.220.161.86

🇧🇬 79.124.49.14

🇧🇬 78.128.113.46

🇬🇧 77.67.26.205

🇨🇴 45.230.33.200

🇺🇸 34.182.140.203

🇳🇱 34.91.233.34

🇪🇸 2400:cb00:927:1000:ef56:5086:c3a6:45cd

🇪🇸 2400:cb00:927:1000:ea33:87e1:dca2:e46b

🇪🇸 2400:cb00:927:1000:db77:ddd7:eef:57f8

🇪🇸 2400:cb00:927:1000:b74b:bcbe:3083:1879