AbuseIPDB » 149.18.84.138

149.18.84.138 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 0%: ?

ISP	LogicWeb Inc
Usage Type	Data Center/Web Hosting/Transit
Domain Name	logicweb.com
Country	Viet Nam
City	Hanoi, Ha Noi

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 149.18.84.138

Whois 149.18.84.138

IP Abuse Reports for 149.18.84.138:

This IP address has been reported a total of 11 times from 7 distinct sources. 149.18.84.138 was first reported on July 16th 2023, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
unifr	2024-03-27 18:10:19 (5 months ago)	Unauthorized IMAP connection attempt	Brute-Force
HASF	2024-03-06 13:08:00 (6 months ago)	03/06/2024 05:57:30 - 33 - Users - Alert - 149.18.84.138, X1 - xxx.xxx.xxx.xxx, 443, X1 - tcp - User ... show more03/06/2024 05:57:30 - 33 - Users - Alert - 149.18.84.138, X1 - xxx.xxx.xxx.xxx, 443, X1 - tcp - User: root - User login denied due to bad credentials show less	VPN IP Brute-Force SSH
HASF	2024-03-05 13:28:00 (6 months ago)	03/05/2024 04:24:23 - 33 - Users - Alert - 149.18.84.138, X1 - xxx.xxx.xxx.xxx, 443, X1 - tcp - User ... show more03/05/2024 04:24:23 - 33 - Users - Alert - 149.18.84.138, X1 - xxx.xxx.xxx.xxx, 443, X1 - tcp - User: root - User login denied due to bad credentials show less	VPN IP Brute-Force SSH
thormaster	2024-03-03 17:59:00 (6 months ago)	Failed Login Attempt (Router) Weiser-TramsormcoUnit163Orange An attempt to log in as the root user f ... show moreFailed Login Attempt (Router) Weiser-TramsormcoUnit163Orange An attempt to log in as the root user from 149.18.84.138 has failed. 2024-03-02 02:27:27 MST show less	Brute-Force
Excalibur	2024-02-28 11:08:00 (6 months ago)	VPN Brute Force Attempts	Brute-Force
saima.info	2024-02-05 10:33:11 (7 months ago)	Port scanning, proxy abuse	Port Scan Brute-Force
saima.info	2024-02-05 10:33:11 (7 months ago)	Port scanning, proxy abuse	Port Scan Brute-Force
ufn.edu.br	2023-07-17 01:51:39 (1 year ago)	[Sun Jul 16 22:51:35.844640 2023] [access_compat:error] [pid 20713] [client 149.18.84.138:39668] AH0 ... show more[Sun Jul 16 22:51:35.844640 2023] [access_compat:error] [pid 20713] [client 149.18.84.138:39668] AH01797: client denied by server configuration: /var/www/html/xleet.php [Sun Jul 16 22:51:36.732050 2023] [access_compat:error] [pid 20612] [client 149.18.84.138:39777] AH01797: client denied by server configuration: /var/www/html/0byte.php [Sun Jul 16 22:51:38.483670 2023] [access_compat:error] [pid 20613] [client 149.18.84.138:40021] AH01797: client denied by server configuration: /var/www/html/sym.php ... show less	Exploited Host Web App Attack
URAN Publishing Service	2023-07-16 22:46:51 (1 year ago)	149.18.84.138 - - [17/Jul/2023:01:46:50 +0300] "GET /wp-admin/Deadcode1975xxxxxxxxxxxxxxxxxxxxxxxxxx ... show more149.18.84.138 - - [17/Jul/2023:01:46:50 +0300] "GET /wp-admin/Deadcode1975xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php%20=%20%3E%3E%20shell%20no%20work HTTP/1.1" 404 272 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)" ... show less	Web App Attack
URAN Publishing Service	2023-07-16 18:02:38 (1 year ago)	149.18.84.138 - - [16/Jul/2023:21:02:37 +0300] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 404 ... show more149.18.84.138 - - [16/Jul/2023:21:02:37 +0300] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 404 276 "-" "Go-http-client/1.1" ... show less	Web App Attack
URAN Publishing Service	2023-07-16 15:25:16 (1 year ago)	149.18.84.138 - - [16/Jul/2023:18:23:51 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 196 "-" "Mozilla/5 ... show more149.18.84.138 - - [16/Jul/2023:18:23:51 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 149.18.84.138 - - [16/Jul/2023:18:25:15 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" ... show less	Web App Attack