JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

128.199.146.215

Neutral Activity

Abuse confidence score ?

0% Low Risk

28 reports

11 reporters · latest 3 years ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

128.199.146.215 has been reported 28 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 128.199.146.215

Export CSV

This IP address has been reported a total of 28 times from 11 distinct sources. 128.199.146.215 was first reported on January 14th 2023, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2023-01-27 06:08:39 (3 years ago)	[Fri Jan 27 12:37:17.218383 2023] [security2:error] [pid 74454:tid 139946744292928] [client 128.199. ... show more [Fri Jan 27 12:37:17.218383 2023] [security2:error] [pid 74454:tid 139946744292928] [client 128.199.146.215:59966] [client 128.199.146.215] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:rsd. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "501"] [id "921170"] [data "Matched Data: r found within ARGS_NAMES:rsd: rsd request_line = GET //xmlrpc.php?rsd HTTP/1.1"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/3"] [tag "OWASP_CRS"] [tag "capec/1000/152/137/15/460"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/xmlrpc.php"] [unique_id "Y9NjDQG11JvOj4LzwL7cLAAAAxI"] [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[74532] [izgnQkCj+CA] [Y9NjDQG11JvOj4LzwL7cLAAAAxI] keep_alive=[0] [2023-01-27 12:37:17.218387] [R:Y9NjDQG11JvOj4LzwL7cLAAAAxI] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 ... show less	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2023-01-26 23:56:30 (3 years ago)	128.199.146.215 - - [27/Jan/2023:01:55:33 +0200] "GET /wp-admin/style.php HTTP/1.1" 404 275 "www.bin ... show more 128.199.146.215 - - [27/Jan/2023:01:55:33 +0200] "GET /wp-admin/style.php HTTP/1.1" 404 275 "www.bing.com" "wp_is_mobile" 128.199.146.215 - - [27/Jan/2023:01:56:28 +0200] "GET /wp-content/export.php HTTP/1.1" 404 196 "www.bing.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" ... show less	Web App Attack
🇩🇪 niceshops.com	2023-01-26 12:58:06 (3 years ago)	Web Attack ([26/Jan/2023:13:58:04.144] GET //wp-includes/wlwmanifest.xml)	Web App Attack
🇬🇧 Delta Whiskey	2023-01-26 12:25:22 (3 years ago)	Multiple failed WordPress authentication attempts	Brute-Force Web App Attack
🇮🇩 hermawan	2023-01-26 11:35:05 (3 years ago)	[Thu Jan 26 18:30:36.771207 2023] [security2:error] [pid 7528:tid 139909912016448] [client 128.199.1 ... show more [Thu Jan 26 18:30:36.771207 2023] [security2:error] [pid 7528:tid 139909912016448] [client 128.199.146.215:50225] [client 128.199.146.215] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:rsd. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "501"] [id "921170"] [data "Matched Data: r found within ARGS_NAMES:rsd: rsd request_line = GET //xmlrpc.php?rsd HTTP/1.1"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/3"] [tag "OWASP_CRS"] [tag "capec/1000/152/137/15/460"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/xmlrpc.php"] [unique_id "Y9JkXMwhDMNvGN2nFefipgAAAbM"] [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[7666] [8nHnExF9Kqs] [Y9JkXMwhDMNvGN2nFefipgAAAbM] keep_alive=[0] [2023-01-26 18:30:36.771211] [R:Y9JkXMwhDMNvGN2nFefipgAAAbM] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ... show less	Hacking Web App Attack
🇮🇩 Secmon	2023-01-25 13:00:05 (3 years ago)	Attack web	Hacking Web App Attack
🇮🇩 hermawan	2023-01-25 08:12:40 (3 years ago)	[Wed Jan 25 15:09:08.259805 2023] [security2:error] [pid 10190:tid 140097127179840] [client 128.199. ... show more [Wed Jan 25 15:09:08.259805 2023] [security2:error] [pid 10190:tid 140097127179840] [client 128.199.146.215:52934] [client 128.199.146.215] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:dizo. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "501"] [id "921170"] [data "Matched Data: d found within ARGS_NAMES:dizo: dizo request_line = GET /wp-signin.php?dizo&ping HTTP/1.1"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/3"] [tag "OWASP_CRS"] [tag "capec/1000/152/137/15/460"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/wp-signin.php"] [unique_id "Y9DjpBJQj1hH5P9w4XQgJgAAAng"], referer www.bing.com [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[10254] [a2aHJepfuEA] [Y9DjpBJQj1hH5P9w4XQgJgAAAng] keep_alive=[0] [2023-01-25 15:09:08.259809] [R:Y9DjpBJQj1hH5P9w4XQgJgAAAng] UA:'wp_is_mobile' Host:'kar ... show less	Hacking Web App Attack
🇮🇩 hermawan	2023-01-25 04:12:26 (3 years ago)	[Wed Jan 25 09:30:40.494065 2023] [security2:error] [pid 263595:tid 139976046003776] [client 128.199 ... show more [Wed Jan 25 09:30:40.494065 2023] [security2:error] [pid 263595:tid 139976046003776] [client 128.199.146.215:62727] [client 128.199.146.215] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:dizo. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "501"] [id "921170"] [data "Matched Data: d found within ARGS_NAMES:dizo: dizo request_line = GET /wp-signin.php?dizo&ping HTTP/1.1"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/3"] [tag "OWASP_CRS"] [tag "capec/1000/152/137/15/460"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/wp-signin.php"] [unique_id "Y9CUUKyuKWLcAeLkTC7rGgAAA5Y"], referer www.bing.com [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[263703] [1l0Xa3WMZQA] [Y9CUUKyuKWLcAeLkTC7rGgAAA5Y] keep_alive=[0] [2023-01-25 09:30:40.494068] [R:Y9CUUKyuKWLcAeLkTC7rGgAAA5Y] UA:'wp_is_mobile' Host:'k ... show less	Hacking Web App Attack
🇮🇩 hermawan	2023-01-21 09:13:07 (3 years ago)	[Sat Jan 21 15:59:21.451246 2023] [security2:error] [pid 777266:tid 139803970483776] [client 128.199 ... show more [Sat Jan 21 15:59:21.451246 2023] [security2:error] [pid 777266:tid 139803970483776] [client 128.199.146.215:60539] [client 128.199.146.215] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:rsd. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "501"] [id "921170"] [data "Matched Data: r found within ARGS_NAMES:rsd: rsd request_line = GET //xmlrpc.php?rsd HTTP/1.1"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/3"] [tag "OWASP_CRS"] [tag "capec/1000/152/137/15/460"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/xmlrpc.php"] [unique_id "Y8upadccYkA4cq_9_Y4RBQAABCU"] [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[777339] [zifEYfpVL/8] [Y8upadccYkA4cq_9_Y4RBQAABCU] keep_alive=[0] [2023-01-21 15:59:21.451250] [R:Y8upadccYkA4cq_9_Y4RBQAABCU] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 ... show less	Hacking Web App Attack
🇩🇪 niceshops.com	2023-01-21 07:35:20 (3 years ago)	Web Attack ([21/Jan/2023:08:35:18.529] GET //wp-includes/wlwmanifest.xml)	Web App Attack
🇩🇪 niceshops.com	2023-01-20 14:08:37 (3 years ago)	Web Attack ([20/Jan/2023:15:08:34.963] GET //wp-includes/wlwmanifest.xml)	Web App Attack
🇮🇩 Secmon	2023-01-20 09:47:25 (3 years ago)	Web	Hacking Web App Attack
🇮🇩 Secmon	2023-01-20 08:11:35 (3 years ago)	Attack web	Hacking Web App Attack
🇮🇩 hermawan	2023-01-20 05:14:12 (3 years ago)	[Fri Jan 20 10:11:11.411384 2023] [security2:error] [pid 305343:tid 139817979450944] [client 128.199 ... show more [Fri Jan 20 10:11:11.411384 2023] [security2:error] [pid 305343:tid 139817979450944] [client 128.199.146.215:62556] [client 128.199.146.215] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:rsd. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "501"] [id "921170"] [data "Matched Data: r found within ARGS_NAMES:rsd: rsd request_line = GET //xmlrpc.php?rsd HTTP/1.1"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/3"] [tag "OWASP_CRS"] [tag "capec/1000/152/137/15/460"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/xmlrpc.php"] [unique_id "Y8oGT2Wnv9c7ddEyftw0HwAAAuE"] [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[305442] [QmrDZhE227c] [Y8oGT2Wnv9c7ddEyftw0HwAAAuE] keep_alive=[0] [2023-01-20 10:11:11.411387] [R:Y8oGT2Wnv9c7ddEyftw0HwAAAuE] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 ... show less	Hacking Web App Attack
🇺🇸 ChamberofCommerce.com	2023-01-20 01:31:03 (3 years ago)	Unauthorized Bot Spam - Based on Confidence Score of:65 - Per Minute Requests:29	Bad Web Bot

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.80.223.144

🇺🇸 204.10.175.56

🇨🇴 190.145.192.106

🇮🇳 172.232.108.36

🇺🇸 168.158.74.94

🇫🇮 128.1.198.78

🇨🇦 85.217.149.23

🇧🇬 84.238.218.123

🇺🇸 64.62.156.11

🇱🇹 62.60.130.242

🇮🇩 36.64.68.99

🇬🇧 35.203.211.209

🇯🇵 2400:8500:2002:2950:160:251:138:74

🇺🇸 2001:19f0:ac01:1ad7:5400:6ff:fe72:b8f2

🇨🇳 219.159.79.61

🇰🇪 197.248.207.138

🇳🇱 192.253.248.226

🇦🇷 181.164.141.25

🇮🇳 117.218.75.251

🇺🇸 103.144.3.181