JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 150.129.21.193

150.129.21.193 was found in our database!

This IP was reported 93 times. Confidence of Abuse is 100%: ?

100%

ISP	Mega Truenet Communication Co., Ltd.
Usage Type	Fixed Line ISP
ASN	AS139628
Domain Name	megatruenet.com
Country	🇰🇭 Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 150.129.21.193

Whois 150.129.21.193

IP Abuse Reports for 150.129.21.193:

This IP address has been reported a total of 93 times from 38 distinct sources. 150.129.21.193 was first reported on June 7th 2026, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 i-turnradio.nl	2026-07-21 03:43:03 (22 hours ago)	2026-07-21 @ 05:43:02 (CET) ~ Blocked for trying to access: /erker/wp/wp-login.php/wp-login.php	Web App Attack
🇫🇷 solution.it	2026-07-20 18:48:23 (1 day ago)	[Mon Jul 20 20:48:23.594025 2026] [php7:error] [pid 576255:tid 576255] [client 150.129.21.193:62791] ... show more [Mon Jul 20 20:48:23.594025 2026] [php7:error] [pid 576255:tid 576255] [client 150.129.21.193:62791] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat show less	Web App Attack
🇩🇪 FeG Deutschland	2026-07-20 11:53:36 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇧🇷 dominioz	2026-07-20 06:44:52 (1 day ago)	2026-07-19 13:16:41 POST /wordpress/wp-login.php/wp-login.php - - 150.129.21.193 HTTP/1.1 python-req ... show more 2026-07-19 13:16:41 POST /wordpress/wp-login.php/wp-login.php - - 150.129.21.193 HTTP/1.1 python-requests/2.34.2 - 403 320 2026-07-20 06:44:13 GET /wordpress/wp-login.php - - 150.129.21.193 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/120.0.6099.71+Safari/537.36 - 403 695 2026-07-20 06:44:14 POST /wordpress/wp-login.php - - 150.129.21.193 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/120.0.6099.71+Safari/537.36 - 403 695 2026-07-20 06:44:19 GET /wordpress/wp-login.php redirect_to=https%3A%2F%2Fwww.clinicadurand.com.br%2Fwordpress%2Fwp-admin%2F&reauth=1 - 150.129.21.193 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/120.0.6099.71+Safari/537.36 - 403 580 ... show less	Web App Attack
🇩🇪 4server	2026-07-19 00:21:30 (3 days ago)	[SunJul1902:21:23.4789582026][security2:error][pid3340047:tid3340092][client150.129.21.193:0]ModSecu ... show more [SunJul1902:21:23.4789582026][security2:error][pid3340047:tid3340092][client150.129.21.193:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.restaurantgandria.ch\"][uri\"/xmlrpc.php\"][unique_id\"alwYg2zIox-trc1F0XvGcAAAAEk\"] show less	Port Scan Brute-Force Web App Attack
🇦🇺 paulshipley.com.au	2026-07-18 21:24:07 (3 days ago)	[Sun Jul 19 07:24:06.757322 2026] [security2:error] [pid 830531] [client 150.129.21.193:57065] [clie ... show more [Sun Jul 19 07:24:06.757322 2026] [security2:error] [pid 830531] [client 150.129.21.193:57065] [client 150.129.21.193] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "alvu9nQ0cGw7ueqIMjJqigAAAGA"] ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 19:52:44 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 150.129.21.193 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 150.129.21.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 15:52:34.772878 2026] [security2:error] [pid 2554:tid 2554] [client 150.129.21.193:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|hvacs-aircon.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hvacs-aircon.com"] [uri "/ar/wp-json/wp/v2/users/"] [unique_id "alvZgmvPYzvyy4QeyqR_UQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-18 19:02:03 (3 days ago)	2026-07-18T21:02:03.293815+02:00 polaris wp(sahpa.co.za)[62788]: Blocked authentication attempt for ... show more 2026-07-18T21:02:03.293815+02:00 polaris wp(sahpa.co.za)[62788]: Blocked authentication attempt for [email protected] from 150.129.21.193 ... show less	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-07-18 18:13:57 (3 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇳🇱 i-turnradio.nl	2026-07-18 17:38:01 (3 days ago)	2026-07-18 @ 19:38:01 (CET) ~ Blocked for trying to access: /erker/wp/wp-login.php/wp-login.php	Web App Attack
🇹🇷 baku.hosting	2026-07-16 18:31:02 (5 days ago)	CSF Auto Report: (cpanel) Failed cPanel login from 150.129.21.193 (KH/Cambodia/-): 4 in the last 360 ... show more CSF Auto Report: (cpanel) Failed cPanel login from 150.129.21.193 (KH/Cambodia/-): 4 in the last 3600 secs show less	Brute-Force Web App Attack
🇧🇷 dominioz	2026-07-12 18:43:47 (1 week ago)	2026-07-12 12:46:34 GET /wordpress/xmlrpc.php rsd - 150.129.21.193 HTTP/1.1 Mozilla/5.0+(Windows+NT+ ... show more 2026-07-12 12:46:34 GET /wordpress/xmlrpc.php rsd - 150.129.21.193 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/78.0.3904.108+Safari/537.36 - 200 1232 2026-07-12 12:46:35 GET /wordpress/wp-login.php - - 150.129.21.193 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/78.0.3904.108+Safari/537.36 - 403 695 2026-07-12 18:43:38 GET /wp-includes/wlwmanifest.xml - - 150.129.21.193 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/78.0.3904.108+Safari/537.36 - 404 1440 2026-07-12 18:43:39 GET /xmlrpc.php rsd - 150.129.21.193 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/78.0.3904.108+Safari/537.36 - 404 1440 ... show less	Web App Attack
🇧🇷 dominioz	2026-07-12 12:47:25 (1 week ago)	2026-07-12 04:22:30 GET /wordpress/wp-includes/wlwmanifest.xml - - 150.129.21.193 HTTP/1.1 Mozilla/5 ... show more 2026-07-12 04:22:30 GET /wordpress/wp-includes/wlwmanifest.xml - - 150.129.21.193 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/78.0.3904.108+Safari/537.36 - 404 23943 2026-07-12 04:22:30 GET /wordpress/xmlrpc.php rsd - 150.129.21.193 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/78.0.3904.108+Safari/537.36 - 200 1232 2026-07-12 04:22:31 GET /wordpress/wp-login.php - - 150.129.21.193 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/78.0.3904.108+Safari/537.36 - 403 695 2026-07-12 12:46:34 GET /wordpress/wp-includes/wlwmanifest.xml - - 150.129.21.193 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/78.0.3904.108+Safari/537.36 - 404 23943 ... show less	Web App Attack
🇪🇸 alferez	2026-07-12 10:56:18 (1 week ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
🇩🇪 FeG Deutschland	2026-07-12 09:49:46 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12457	Exploited Host Web App Attack

Showing 1 to 15 of 93 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 185.247.137.240

🇳🇱 185.223.235.56

🇷🇺 185.31.166.162

🇨🇳 183.201.208.25

🇸🇪 176.126.104.75

🇳🇱 164.92.148.188

🇨🇳 125.93.252.89

🇮🇳 110.44.3.70

🇫🇷 91.231.89.209

🇧🇷 201.20.90.158

🇺🇸 167.172.131.105

🇳🇱 164.92.147.219

🇳🇱 164.92.146.142

🇳🇱 164.92.144.99

🇨🇳 159.75.205.114

🇨🇳 125.91.106.248

🇨🇳 125.91.105.135

🇨🇳 125.91.33.72

🇺🇸 107.172.150.149

🇺🇸 104.194.223.68