JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 192.140.148.71

192.140.148.71 was found in our database!

This IP was reported 64 times. Confidence of Abuse is 75%: ?

75%

ISP	Cyber Internet Services Pakistan
Usage Type	Fixed Line ISP
ASN	AS9541
Domain Name	cyber.net.pk
Country	🇵🇰 Pakistan
City	Peshawar, Khyber Pakhtunkhwa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 192.140.148.71

Whois 192.140.148.71

IP Abuse Reports for 192.140.148.71:

This IP address has been reported a total of 64 times from 34 distinct sources. 192.140.148.71 was first reported on October 11th 2023, and the most recent report was 50 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-07-14 22:27:46 (50 minutes ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 17:48:39 (5 hours ago)	(mod_security) mod_security (id:240335) triggered by 192.140.148.71 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 192.140.148.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 13:48:31.125397 2026] [security2:error] [pid 3898847:tid 3898847] [client 192.140.148.71:24926] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 192.140.148.71 (+1 hits since last alert)\|drbolen.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "drbolen.com"] [uri "/xmlrpc.php"] [unique_id "alZ2b6llPZwRibEP-MEKDgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-14 15:01:31 (8 hours ago)	[redacted] 192.140.148.71 - - [14/Jul/2026:17:00:37 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "Je ... show more [redacted] 192.140.148.71 - - [14/Jul/2026:17:00:37 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "Jetpack by WordPress.com" [redacted] 192.140.148.71 - - [14/Jul/2026:17:00:59 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "Jetpack by WordPress.com" [redacted] 192.140.148.71 - - [14/Jul/2026:17:01:09 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "WordPress.com; https://wordpress.com" [redacted] 192.140.148.71 - - [14/Jul/2026:17:01:19 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)" [redacted] 192.140.148.71 - - [14/Jul/2026:17:01:30 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "Jetpack/13.0; WordPress/6.3; http://site46254044.com" ... show less	Hacking Web App Attack
🇪🇸 masterguru	2026-07-13 16:33:58 (1 day ago)	(xmlrpc) Failed xmlrpc access from 192.140.148.71 (PK/Pakistan/-): 5 in the last 3600 secs (0-122)	Hacking
🇫🇷 dynamix	2026-07-13 16:28:29 (1 day ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇸🇪 vaia.cloud	2026-07-10 22:42:02 (4 days ago)	trying wp-login.php/xmlrpc.php 38 times in 1 minutes	Brute-Force Web App Attack
🇧🇷 dominioz	2026-07-10 18:11:08 (4 days ago)	2026-07-10 18:10:03 POST /xmlrpc.php - - 192.140.148.71 HTTP/1.1 WordPress.com;+https://wordpress.co ... show more 2026-07-10 18:10:03 POST /xmlrpc.php - - 192.140.148.71 HTTP/1.1 WordPress.com;+https://wordpress.com - 200 650 2026-07-10 18:10:12 POST /xmlrpc.php - - 192.140.148.71 HTTP/1.1 Jetpack+by+WordPress.com - 200 650 2026-07-10 18:10:14 POST /xmlrpc.php - - 192.140.148.71 HTTP/1.1 WordPress.com;+https://wordpress.com - 200 650 2026-07-10 18:10:37 POST /xmlrpc.php - - 192.140.148.71 HTTP/1.1 WordPress.com;+https://wordpress.com - 200 650 ... show less	Web App Attack
🇦🇺 AWW-Admin	2026-07-10 16:06:31 (4 days ago)	(wordpress) Failed wordpress login from 192.140.148.71 (PK/Pakistan/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-07-10 15:38:29 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 192.140.148.71 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 192.140.148.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 11:38:22.322376 2026] [security2:error] [pid 9250:tid 9269] [client 192.140.148.71:25132] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 192.140.148.71 (+1 hits since last alert)\|illianapartyrentals.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "illianapartyrentals.com"] [uri "/xmlrpc.php"] [unique_id "alER7kFN_lw1AiMstqX7DwAAANE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-10 15:37:11 (4 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇫🇷 LRob	2026-07-09 14:36:44 (5 days ago)	CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: ["/xmlrpc.php"] \| UA: ["Jetpack by WordPr ... show more CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: ["/xmlrpc.php"] \| UA: ["Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)","Jetpack by WordPress.com","Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)","Jetpack show less	Brute-Force Web App Attack
🇫🇷 dynamix	2026-07-08 22:47:06 (6 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇲🇹 Malta	2026-07-08 15:27:50 (6 days ago)	192.140.148.71 - - [08/Jul/2026:17:27:50 +0200] "POST /xmlrpc.php HTTP/1.1" "Jetpack by WordPress.co ... show more 192.140.148.71 - - [08/Jul/2026:17:27:50 +0200] "POST /xmlrpc.php HTTP/1.1" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)" show less	Hacking Web App Attack
🇫🇷 LRob	2026-07-07 19:39:21 (1 week ago)	CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: ["/xmlrpc.php"] \| UA: ["Jetpack by WordPr ... show more CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: ["/xmlrpc.php"] \| UA: ["Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)","WordPress.com; https://wordpress.com","Jetpack by WordPress.com (Jetpack 13.0; WordPress 6. show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 18:00:36 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 192.140.148.71 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 192.140.148.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 14:00:21.253174 2026] [security2:error] [pid 18359:tid 18359] [client 192.140.148.71:24383] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 192.140.148.71 (+1 hits since last alert)\|fundaciondamashcc.org.ec\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fundaciondamashcc.org.ec"] [uri "/xmlrpc.php"] [unique_id "ak0-tUz24YT8eAr_1g3URQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 64 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 210.94.179.20

🇧🇪 198.235.24.143

🇲🇽 189.220.53.232

🇧🇷 177.212.121.34

🇨🇳 114.113.152.240

🇮🇳 103.86.180.10

🇳🇱 91.92.40.200

🇺🇸 76.79.213.69

🇳🇿 45.133.7.4

🇨🇳 202.103.55.158

🇷🇴 193.32.162.84

🇳🇱 178.16.54.137

🇺🇸 162.241.132.172

🇨🇳 101.96.200.56

🇺🇸 20.169.85.72

🇺🇸 20.163.15.131

🇨🇳 220.181.108.156

🇧🇷 187.16.96.250

🇷🇺 178.251.140.3

🇱🇻 151.242.43.229