AbuseIPDB » 148.251.178.148

Check an IP Address, Domain Name, or Subnet

e.g. 44.200.168.16, microsoft.com, or 5.188.10.0/24

148.251.178.148 was found in our database!

This IP was reported 92 times. Confidence of Abuse is 37%: ?

37%

ISP	Hetzner Online AG
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	h101.pngservers.net
Domain Name	hetzner.de
Country	Germany
City	Berlin, Berlin

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 148.251.178.148

Whois 148.251.178.148

IP Abuse Reports for 148.251.178.148:

This IP address has been reported a total of 92 times from 28 distinct sources. 148.251.178.148 was first reported on August 23rd 2022, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
MAGIC	20 Feb 2023	Distributed DDOS attempts for multiple sites	DDoS Attack Bad Web Bot
Anonymous	20 Feb 2023	(mod_security) mod_security (id:972687) triggered by 148.251.178.148 (DE/Germany/h101.pngservers.net ... show more(mod_security) mod_security (id:972687) triggered by 148.251.178.148 (DE/Germany/h101.pngservers.net): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Feb 20 13:16:48.765974 2023] [:error] [pid 2066769] [client 148.251.178.148:50188] [client 148.251.178.148] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "7"] [id "972687"] [msg "xmlrpc request blocked, no referrer"] [hostname "www.acsk.com.br"] [uri "/xmlrpc.php"] [unique_id "Y_Oc8EqwL5KE5neH2HV8PQAAAAA"] [Mon Feb 20 13:16:48.769205 2023] [:error] [pid 2062815] [client 148.251.178.148:50176] [client 148.251.178.148] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "7"] [id "972687"] [msg "xmlrpc request blocked, no referrer"] [hostname "www.acsk.com.br"] [uri "/xmlrpc.php"] [unique_id "Y_Oc8BWYwV8p0GVYcrfjTQAAAAE"] show less	Port Scan
bittiguru.fi	19 Feb 2023	148.251.178.148 - - \[20/Feb/2023:01:42:01 +0200\] "POST /xmlrpc.php HTTP/1.1" 403 357148.251.178.14 ... show more148.251.178.148 - - \[20/Feb/2023:01:42:01 +0200\] "POST /xmlrpc.php HTTP/1.1" 403 357148.251.178.148 - - \[20/Feb/2023:01:42:01 +0200\] "POST /xmlrpc.php HTTP/1.1" 403 357 ... show less	Hacking Brute-Force Web App Attack
websase.com	19 Feb 2023	WordPress XMLRPC Brute Force Attacks	Brute-Force Web App Attack
Anonymous	17 Feb 2023	XMLRPC Hack Attempts	Hacking Brute-Force
Anonymous	16 Feb 2023	www.fahrlehrerfortbildung-hessen.de 148.251.178.148 [16/Feb/2023:13:04:19 +0100] "POST /xmlrpc.php H ... show morewww.fahrlehrerfortbildung-hessen.de 148.251.178.148 [16/Feb/2023:13:04:19 +0100] "POST /xmlrpc.php HTTP/1.1" 200 5745 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" WWW.FAHRLEHRERFORTBILDUNG-HESSEN.DE 148.251.178.148 [16/Feb/2023:13:04:19 +0100] "POST /xmlrpc.php HTTP/1.1" 200 5745 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" show less	Web App Attack
websase.com	15 Feb 2023	WordPress XMLRPC Brute Force Attacks	Brute-Force Web App Attack
Olivia Davis	15 Feb 2023		Web Spam
MAGIC	14 Feb 2023	Distributed DDOS attempts for multiple sites	DDoS Attack Bad Web Bot
rsiddall	14 Feb 2023	148.251.178.148 - - [13/Feb/2023:19:49:22 -0500] "POST /BLOG/xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozi ... show more148.251.178.148 - - [13/Feb/2023:19:49:22 -0500] "POST /BLOG/xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 148.251.178.148 - - [13/Feb/2023:19:49:22 -0500] "POST /blog/xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" ... show less	Brute-Force
MAGIC	13 Feb 2023	Distributed DDOS attempts for multiple sites	DDoS Attack Bad Web Bot
rsiddall	13 Feb 2023	148.251.178.148 - - [12/Feb/2023:20:12:40 -0500] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozilla/5 ... show more148.251.178.148 - - [12/Feb/2023:20:12:40 -0500] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 148.251.178.148 - - [12/Feb/2023:20:12:40 -0500] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" ... show less	Brute-Force
smithclass.net	11 Feb 2023	Feb 11 22:49:30 gravy wordpress(LALLYGAG.NET)[3666983]: Blocked authentication attempt for admin fro ... show moreFeb 11 22:49:30 gravy wordpress(LALLYGAG.NET)[3666983]: Blocked authentication attempt for admin from 148.251.178.148 ... show less	Hacking Brute-Force
niceshops.com	09 Feb 2023	Web Attack ([09/Feb/2023:14:19:05.946] GET /blog/wp-includes/wlwmanifest.xml)	Web App Attack
Anonymous	09 Feb 2023	ft-1848-basketball.de 148.251.178.148 [09/Feb/2023:12:51:18 +0100] "POST /xmlrpc.php HTTP/1.1" 200 5 ... show moreft-1848-basketball.de 148.251.178.148 [09/Feb/2023:12:51:18 +0100] "POST /xmlrpc.php HTTP/1.1" 200 580 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" FT-1848-BASKETBALL.DE 148.251.178.148 [09/Feb/2023:12:51:18 +0100] "POST /xmlrpc.php HTTP/1.1" 200 580 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" show less	Web App Attack