JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

185.69.122.198

Recent Activity

Abuse confidence score ?

35% Elevated

18 reports

11 reporters · latest 4 days ago

ISP	UP-NETWORK Sarl
Usage Type	Data Center/Web Hosting/Transit
ASN	AS213929
Domain Name	up-network.ch
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	Farnham Royal, England

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 185.69.122.198

This IP address has been reported a total of 18 times from 11 distinct sources. 185.69.122.198 was first reported on August 19th 2026, and the most recent report was 4 days ago. In the last 60 days, the top reporter locations were: Australia with 6 reports; United States of America with 4 reports; Germany with 3 reports. Over the same time period, 185.69.122.198 has changed country of origin 2 times. The most common categories in these recent reports were: Web App Attack 15 times; SQL Injection 3 times; Hacking 2 times; Exploited Host 2 times; Brute-Force 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-18 13:19:54 (4 days ago)	Attack detected: 185.69.122.198 [2026-09-18] Categories: 21 --- wp2shell/batch exploit (2 hits) --- ... show more Attack detected: 185.69.122.198 [2026-09-18] Categories: 21 --- wp2shell/batch exploit (2 hits) --- 185.69.122.198 - - [20/Aug/2026:00:45:36 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 5203 "-" "wp2shell" 185.69.122.198 - - [20/Aug/2026:13:00:53 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 5205 "-" "wp2shell" show less	Web App Attack
Anonymous	2026-09-03 13:12:26 (2 weeks ago)	Attack detected: 185.69.122.198 [2026-09-03] Categories: 21 --- wp2shell/batch exploit (2 hits) --- ... show more Attack detected: 185.69.122.198 [2026-09-03] Categories: 21 --- wp2shell/batch exploit (2 hits) --- 185.69.122.198 - - [20/Aug/2026:00:45:36 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 5203 "-" "wp2shell" 185.69.122.198 - - [20/Aug/2026:13:00:53 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 5205 "-" "wp2shell" show less	Web App Attack
🇩🇪 ghostwarriors	2026-08-20 15:20:28 (1 month ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-08-20 15:12:18 (1 month ago)	185.69.122.198 - - [20/Aug/2026:01:03:41 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 4536 "-" ... show more 185.69.122.198 - - [20/Aug/2026:01:03:41 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 4536 "-" "wp2shell" 185.69.122.198 - - [20/Aug/2026:11:52:56 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 4537 "-" "wp2shell" 185.69.122.198 - - [20/Aug/2026:09:13:47 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 4578 "-" "wp2shell" 185.69.122.198 - - [19/Aug/2026:13:21:45 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 4580 "-" "wp2shell" show less	Web App Attack Brute-Force
🇦🇺 paulshipley.com.au	2026-08-20 13:05:43 (1 month ago)	[Thu Aug 20 23:05:42.878811 2026] [security2:error] [pid 11613] [client 185.69.122.198:34844] [clien ... show more [Thu Aug 20 23:05:42.878811 2026] [security2:error] [pid 11613] [client 185.69.122.198:34844] [client 185.69.122.198] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/"] [unique_id "aob7pv9beqGBf4POvt18QgAAAAE"] ... show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-08-20 12:32:40 (1 month ago)	[Thu Aug 20 22:32:40.568161 2026] [security2:error] [pid 9867] [client 185.69.122.198:37728] [client ... show more [Thu Aug 20 22:32:40.568161 2026] [security2:error] [pid 9867] [client 185.69.122.198:37728] [client 185.69.122.198] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "angleseaarthouse.com.au"] [uri "/"] [unique_id "aobz6Mtce6btjw5jI7R4wQAAAAo"] ... show less	Web App Attack
🇺🇸 gu-alvareza	2026-08-20 05:05:33 (1 month ago)	WordPress.REST.API.batch-route.SQL.Injection	SQL Injection Web App Attack
🇦🇺 paulshipley.com.au	2026-08-20 00:48:47 (1 month ago)	[Thu Aug 20 10:48:47.223628 2026] [security2:error] [pid 444560] [client 185.69.122.198:34578] [clie ... show more [Thu Aug 20 10:48:47.223628 2026] [security2:error] [pid 444560] [client 185.69.122.198:34578] [client 185.69.122.198] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/"] [unique_id "aoZO7yZ7FKkgpZ5X2s0NygAAAAM"] ... show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-08-20 00:29:15 (1 month ago)	[Thu Aug 20 10:29:14.413929 2026] [security2:error] [pid 407732] [client 185.69.122.198:33964] [clie ... show more [Thu Aug 20 10:29:14.413929 2026] [security2:error] [pid 407732] [client 185.69.122.198:33964] [client 185.69.122.198] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "angleseaarthouse.com.au"] [uri "/"] [unique_id "aoZKWpbgDIFea0cnON0CMAAAAAk"] ... show less	Web App Attack
🇪🇸 alferez	2026-08-19 23:32:24 (1 month ago)	wp2shell bug exploit	Hacking Exploited Host Web App Attack
🇯🇵 VXG-NET	2026-08-19 22:46:23 (1 month ago)	port=80, indicator_type=sql-injection	SQL Injection
🇩🇪 FeG Deutschland	2026-08-19 22:43:14 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12	Exploited Host Web App Attack
🇹🇭 MWA SOC	2026-08-19 22:39:33 (1 month ago)		SQL Injection
🇮🇪 RoboSOC	2026-08-19 13:47:19 (1 month ago)	WordPress Core author exclude SQL Injection Vulnerability, PTR: PTR record not found	Hacking
Anonymous	2026-08-19 13:07:06 (1 month ago)	Attack detected: 185.69.122.198 [2026-08-19] Categories: 21 --- wp2shell/batch exploit (1 hits) --- ... show more Attack detected: 185.69.122.198 [2026-08-19] Categories: 21 --- wp2shell/batch exploit (1 hits) --- 185.69.122.198 - - [19/Aug/2026:12:18:18 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 5229 "-" "wp2shell" show less	Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.41

🇬🇧 212.100.184.82

🇳🇱 204.76.203.222

🇹🇳 196.239.173.73

🇮🇩 182.253.89.117

🇨🇳 182.44.4.202

🇨🇳 180.108.64.164

🇰🇷 175.215.126.141

🇨🇦 159.203.44.105

🇨🇳 120.48.76.190

🇨🇳 120.48.60.44

🇨🇳 120.48.60.18

🇨🇳 120.48.56.8

🇮🇩 103.79.90.26

🇭🇰 77.90.180.182

🇺🇸 70.183.226.75

🇵🇰 39.35.204.167

🇹🇼 35.194.186.91

🇺🇸 20.171.192.137

🇳🇱 167.99.210.137