JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 146.19.140.16

146.19.140.16 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 24%: ?

24%

ISP	Quality Network US LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	traffictransitsolution.us
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 146.19.140.16

Whois 146.19.140.16

IP Abuse Reports for 146.19.140.16:

This IP address has been reported a total of 14 times from 11 distinct sources. 146.19.140.16 was first reported on February 2nd 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Yepngo	2026-08-23 23:26:48 (1 day ago)	146.19.140.16 - - [24/Aug/2026:01:21:48 +0200] "POST /wp-login.php HTTP/2.0" 200 12487 "https://yepn ... show more 146.19.140.16 - - [24/Aug/2026:01:21:48 +0200] "POST /wp-login.php HTTP/2.0" 200 12487 "https://yepngo.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 146.19.140.16 - - [24/Aug/2026:01:26:48 +0200] "POST /wp-login.php HTTP/2.0" 200 12492 "https://yepngo.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇺🇸 IndigoRidge	2026-08-18 23:11:04 (6 days ago)	146.19.140.16 - - [18/Aug/2026:19:10:59 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5105 "-" "Apache-Http ... show more 146.19.140.16 - - [18/Aug/2026:19:10:59 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5105 "-" "Apache-HttpClient/4.5.13 (Java/17.0.18)" 146.19.140.16 - - [18/Aug/2026:19:11:00 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5105 "-" "Apache-HttpClient/4.5.13 (Java/17.0.18)" 146.19.140.16 - - [18/Aug/2026:19:11:01 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5547 "-" "Apache-HttpClient/4.5.13 (Java/17.0.18)" 146.19.140.16 - - [18/Aug/2026:19:11:02 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5547 "-" "Apache-HttpClient/4.5.13 (Java/17.0.18)" 146.19.140.16 - - [18/Aug/2026:19:11:03 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5547 "-" "Apache-HttpClient/4.5.13 (Java/17.0.18)" ... show less	Web App Attack
🇺🇸 oncord	2026-07-07 17:29:28 (1 month ago)	Form spam	Web Spam
Anonymous	2026-07-06 12:20:03 (1 month ago)	\| Multiple SQL injection attempts from same source ip.(multiple servers)	Web App Attack Hacking SQL Injection
🇫🇷 Tilellit.PRO	2026-07-05 03:56:24 (1 month ago)	WP Armour Plugin detection	Web Spam Brute-Force
🇫🇷 Tilellit.PRO	2026-06-29 10:51:13 (1 month ago)	Fail2Ban banned 146.19.140.16 for security violations in jail wp-armour. Log: 2026/06/29 10:51:12 [e ... show more Fail2Ban banned 146.19.140.16 for security violations in jail wp-armour. Log: 2026/06/29 10:51:12 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 146.19.140.16 \| Target: wplogin" , client: 146.19.140.16, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇫🇷 Tilellit.PRO	2026-06-27 16:05:43 (1 month ago)	Fail2Ban banned 146.19.140.16 for security violations in jail wp-armour. Log: 2026/06/27 16:05:43 [e ... show more Fail2Ban banned 146.19.140.16 for security violations in jail wp-armour. Log: 2026/06/27 16:05:43 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 146.19.140.16 \| Target: wplogin" , client: 146.19.140.16, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇺🇸 TPI-Abuse	2026-05-13 20:11:16 (3 months ago)	(mod_security) mod_security (id:211030) triggered by 146.19.140.16 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:211030) triggered by 146.19.140.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 16:11:06.937592 2026] [security2:error] [pid 1657:tid 1657] [client 146.19.140.16:36921] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at ARGS. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "17"] [id "211030"] [rev "3"] [msg "COMODO WAF: LDAP Injection Attack\|\|www.genesis-castle.com\|F\|2"] [data "Matched Data: (%'%~%'%\|%\|%( found within ARGS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.genesis-castle.com"] [uri "/gallery/index.php"] [unique_id "agTa2k81yMwJkhYAZ0pIcgAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-05 09:55:03 (1 year ago)	(mod_security) mod_security (id:217200) triggered by 146.19.140.16 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:217200) triggered by 146.19.140.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 05 05:54:58.370658 2025] [security2:error] [pid 2087606:tid 2087606] [client 146.19.140.16:42643] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header\|\|nextlevelcharge.com\|F\|2"] [data "/xmlrpc.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "nextlevelcharge.com"] [uri "/xmlrpc.php"] [unique_id "aEFpciomyTUiri2VHc5FgwAAAAI"], referer: https://nextlevelcharge.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 wil.com	2025-04-01 10:30:57 (1 year ago)	GlobalProtect login attempts with user cmatlock.	VPN IP Brute-Force
Anonymous	2024-09-27 18:41:09 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇷🇴 INTEQ	2024-09-19 21:14:10 (1 year ago)	Web attack from 146.19.140.16	Web App Attack
🇪🇸 10dencehispahard SL	2024-06-29 14:05:56 (2 years ago)	Unauthorized login attempts [ accesslogs]	Brute-Force
🇵🇱 Might Man	2023-02-02 09:02:25 (3 years ago)	h	Hacking Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.182

🇪🇨 177.234.219.169

🇹🇭 165.154.51.27

🇵🇰 119.156.42.218

🇮🇳 49.206.194.29

🇺🇸 45.194.67.44

🇳🇱 45.148.10.157

🇬🇧 2a06:4880:c000::f1

🇷🇺 176.98.148.26

🇸🇬 172.70.208.85

🇸🇬 172.70.142.173

🇩🇪 167.94.146.68

🇸🇬 152.32.217.163

🇧🇩 103.138.123.67

🇺🇸 45.61.177.198

🇬🇧 35.203.210.87

🇷🇺 5.45.240.255

🇷🇴 2.57.122.238

🇨🇳 1.192.212.172

🇶🇦 2600:1900:4260:40e::28