JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.150.0.21

185.150.0.21 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 80%: ?

80%

ISP	VPN Consumer Singapore, Republic of Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.150.0.21

Whois 185.150.0.21

IP Abuse Reports for 185.150.0.21:

This IP address has been reported a total of 24 times from 20 distinct sources. 185.150.0.21 was first reported on April 17th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-07-02 10:55:34 (1 day ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇩🇪 Marc	2026-07-02 09:28:48 (1 day ago)	185.150.0.21 - - [02/Jul/2026:10:57:40 +0200] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.als-a ... show more 185.150.0.21 - - [02/Jul/2026:10:57:40 +0200] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.als-arnsberg.de%2Fwp-admin%2Fprofile.php&reauth=1 HTTP/1.1" 200 5922 "https://www.als-arnsberg.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" 185.150.0.21 - - [02/Jul/2026:10:57:42 +0200] "POST /wp-login.php HTTP/1.1" 200 4030 "https://www.als-arnsberg.de/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 185.150.0.21 - - [02/Jul/2026:10:57:46 +0200] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.als-arnsberg.de%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 5921 "https://www.als-arnsberg.de/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:118.0) Gecko/20100101 Firefox/118.0" 185.150.0.21 - - [02/Jul/2026:11:28:44 +0200] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.als-arnsberg.de%2Fwp-admin%2Fplugins.php&reauth=1 HTTP/1.1" 200 5924 "https://www.als-arnsberg.de/wp-login.php" "Mozilla/5.0 (Windows N show less	Brute-Force Web App Attack
🇺🇸 Victor López	2026-07-01 05:00:18 (2 days ago)	vpardilalaw.com 185.150.0.21 - - [01/Jul/2026:00:00:10 -0500] "GET /wp-login.php?redirect_to=https%3 ... show more vpardilalaw.com 185.150.0.21 - - [01/Jul/2026:00:00:10 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fvpardilalaw.com%2Fwp-admin%2Fprofile.php&reauth=1 HTTP/1.1" 200 1936 "https://vpardilalaw.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" vpardilalaw.com 185.150.0.21 - - [01/Jul/2026:00:00:13 -0500] "POST /wp-login.php HTTP/1.1" 200 2084 "https://vpardilalaw.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" vpardilalaw.com 185.150.0.21 - - [01/Jul/2026:00:00:17 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fvpardilalaw.com%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 1935 "https://vpardilalaw.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" ... show less	Hacking Web App Attack
🇩🇪 abdubhai	2026-06-29 09:47:17 (4 days ago)	185.150.0.21 - - [29/Jun/2026:14 ...	Brute-Force
🇳🇱 MacLotsen	2026-06-28 19:12:44 (5 days ago)	185.150.0.21 - - [28/Jun/2026:20:47:29 +0200] "POST /wp-login.php HTTP/1.1" 200 4108 "https://afkewi ... show more 185.150.0.21 - - [28/Jun/2026:20:47:29 +0200] "POST /wp-login.php HTTP/1.1" 200 4108 "https://afkewiersma.nl/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 185.150.0.21 - - [28/Jun/2026:20:50:51 +0200] "POST /wp-login.php HTTP/1.1" 200 4102 "https://afkewiersma.nl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:120.0) Gecko/20100101 Firefox/120.0" 185.150.0.21 - - [28/Jun/2026:20:52:47 +0200] "POST /wp-login.php HTTP/1.1" 200 4107 "https://afkewiersma.nl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.150.0.21 - - [28/Jun/2026:20:55:21 +0200] "POST /wp-login.php HTTP/1.1" 200 4101 "https://afkewiersma.nl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:121.0) Gecko/20100101 Firefox/121.0" 185.150.0.21 - - [28/Jun/2026:20:57:37 +0200] "POST /wp-login.php HTTP/1.1" 200 4101 "https://af ... show less	Web App Attack Brute-Force
🇳🇱 Site.eu	2026-06-28 16:45:33 (5 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-06-28 11:32:12 (5 days ago)	185.150.0.21 - - [28/Jun/2026:13:31:55 +0200] "POST /wp-login.php HTTP/1.1" 200 8360 "https://arv-su ... show more 185.150.0.21 - - [28/Jun/2026:13:31:55 +0200] "POST /wp-login.php HTTP/1.1" 200 8360 "https://arv-suchhundestaffel.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 185.150.0.21 - - [28/Jun/2026:13:32:00 +0200] "POST /wp-login.php HTTP/1.1" 200 8360 "https://arv-suchhundestaffel.de/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 185.150.0.21 - - [28/Jun/2026:13:32:10 +0200] "POST /wp-login.php HTTP/1.1" 200 8301 "https://arv-suchhundestaffel.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 jormaster3k	2026-06-28 10:27:53 (5 days ago)	Attack against WordPress	Web App Attack
🇦🇹 penguin-solutions.at	2026-06-28 03:41:40 (5 days ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇺🇸 cwytech	2026-06-27 11:54:59 (6 days ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-web-high.	Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-06-27 11:39:09 (6 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇳🇱 debestelapp	2026-06-27 08:05:03 (6 days ago)		Exploited Host
🇺🇸 jormaster3k	2026-06-27 04:07:46 (6 days ago)	Attack against WordPress	Web App Attack
🇫🇷 masterguru	2026-06-27 01:07:42 (6 days ago)	(wordpress) Apache: Failed WordPress login from 185.150.0.21 (SG/Singapore/-): 10 in the last 3600 s ... show more (wordpress) Apache: Failed WordPress login from 185.150.0.21 (SG/Singapore/-): 10 in the last 3600 secs (0-197) show less	Hacking
🇺🇸 TPI-Abuse	2026-06-26 22:53:08 (6 days ago)	(mod_security) mod_security (id:225170) triggered by 185.150.0.21 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 185.150.0.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 18:53:04.892723 2026] [security2:error] [pid 10222:tid 10222] [client 185.150.0.21:54623] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|aabondwnc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aabondwnc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aj8C0MlvE4VJdNb60QoO9AAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 175.12.60.34

🇳🇱 80.82.77.139

🇧🇷 200.165.70.141

🇺🇸 199.127.62.250

🇬🇧 193.163.125.106

🇩🇪 185.168.31.196

🇨🇮 160.154.233.93

🇸🇬 128.199.182.152

🇨🇳 110.52.19.243

🇩🇪 45.3.47.246

🇬🇧 35.203.211.235

🇷🇴 2.57.121.25

🇸🇬 172.217.44.218

🇺🇸 162.210.21.220

🇺🇸 147.185.132.76

🇮🇪 98.71.8.129

🇳🇱 45.148.10.141

🇨🇳 39.148.164.125

🇪🇸 217.160.226.51

🇺🇸 198.98.56.205