JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 192.140.148.98

192.140.148.98 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 91%: ?

91%

ISP	Cyber Internet Services Pakistan
Usage Type	Fixed Line ISP
ASN	AS9541
Domain Name	cyber.net.pk
Country	🇵🇰 Pakistan
City	Peshawar, Khyber Pakhtunkhwa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 192.140.148.98

Whois 192.140.148.98

IP Abuse Reports for 192.140.148.98:

This IP address has been reported a total of 39 times from 21 distinct sources. 192.140.148.98 was first reported on January 27th 2025, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 WeekendWeb	2026-07-16 18:23:43 (6 hours ago)	Wordpress Vunerability attack	Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 15:13:36 (9 hours ago)	(mod_security) mod_security (id:240335) triggered by 192.140.148.98 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 192.140.148.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 11:13:29.878236 2026] [security2:error] [pid 28232:tid 28232] [client 192.140.148.98:47399] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 192.140.148.98 (+1 hits since last alert)\|mfleetservice.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mfleetservice.com"] [uri "/xmlrpc.php"] [unique_id "alj1GXCuZLg0r-cr3xWMvQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-16 01:32:47 (23 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 01:12:36 (23 hours ago)	(mod_security) mod_security (id:240335) triggered by 192.140.148.98 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 192.140.148.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 21:12:31.105373 2026] [security2:error] [pid 22818:tid 22818] [client 192.140.148.98:46724] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 192.140.148.98 (+1 hits since last alert)\|tgaguide.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tgaguide.com"] [uri "/xmlrpc.php"] [unique_id "algv_4z_CAy0pKZ-brYYGwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 15:20:59 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 192.140.148.98 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 192.140.148.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 11:20:49.780261 2026] [security2:error] [pid 9554:tid 9554] [client 192.140.148.98:46970] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 192.140.148.98 (+1 hits since last alert)\|stinsonbeachsurfandkayak.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "stinsonbeachsurfandkayak.com"] [uri "/xmlrpc.php"] [unique_id "alelUb2IMFOU9h-j92Qf2QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 madeit	2026-07-14 17:39:02 (2 days ago)		Web App Attack
🇦🇺 clapper	2026-07-14 05:00:15 (2 days ago)	(mod_security) mod_security (id:350202) triggered by 192.140.148.98 (PK/Pakistan/-): 5 in the last 6 ... show more (mod_security) mod_security (id:350202) triggered by 192.140.148.98 (PK/Pakistan/-): 5 in the last 600 secs; ID: rub show less	Brute-Force Bad Web Bot
🇩🇪 abdubhai	2026-07-14 04:27:37 (2 days ago)	192.140.148.98 - - [14/Jul/2026: ...	Brute-Force
🇺🇸 TPI-Abuse	2026-07-12 23:06:28 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 192.140.148.98 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 192.140.148.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 19:06:21.581865 2026] [security2:error] [pid 29214:tid 29214] [client 192.140.148.98:47105] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 192.140.148.98 (+1 hits since last alert)\|firstunitedreserve.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "firstunitedreserve.com"] [uri "/xmlrpc.php"] [unique_id "alQd7XJ113ElkmKL3iVuFwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-12 22:05:15 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 192.140.148.98 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 192.140.148.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 18:05:05.238825 2026] [security2:error] [pid 21008:tid 21017] [client 192.140.148.98:46889] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 192.140.148.98 (+1 hits since last alert)\|culturallyyours.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "culturallyyours.org"] [uri "/xmlrpc.php"] [unique_id "alQPka2--ybOyliVw03u6AAAAIY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 IndigoRidge	2026-07-12 21:19:37 (4 days ago)	192.140.148.98 - - [12/Jul/2026:17:18:00 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5507 "-" "WordPress. ... show more 192.140.148.98 - - [12/Jul/2026:17:18:00 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5507 "-" "WordPress.com; https://wordpress.com" 192.140.148.98 - - [12/Jul/2026:17:18:21 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5523 "-" "WordPress.com; https://wordpress.com" 192.140.148.98 - - [12/Jul/2026:17:18:32 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5507 "-" "WordPress.com; https://wordpress.com" 192.140.148.98 - - [12/Jul/2026:17:19:15 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5507 "-" "WordPress.com; https://wordpress.com" 192.140.148.98 - - [12/Jul/2026:17:19:36 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5507 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇺🇸 Jason Howell	2026-07-12 17:55:52 (4 days ago)	192.140.148.98 - - [12/Jul/2026:12:55:08 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4359 "-" "Jetpack by ... show more 192.140.148.98 - - [12/Jul/2026:12:55:08 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4359 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" 192.140.148.98 - - [12/Jul/2026:12:55:19 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4360 "-" "Jetpack/12.1; WordPress/6.2; http://site21507490.com" 192.140.148.98 - - [12/Jul/2026:12:55:30 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4358 "-" "WordPress.com; https://wordpress.com" 192.140.148.98 - - [12/Jul/2026:12:55:41 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4360 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" 192.140.148.98 - - [12/Jul/2026:12:55:51 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4359 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇳🇱 Site.eu	2026-07-11 05:21:14 (5 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇪🇸 masterguru	2026-07-11 03:34:57 (5 days ago)	(xmlrpc) Failed xmlrpc access from 192.140.148.98 (PK/Pakistan/-): 5 in the last 3600 secs (0-122)	Hacking
🇺🇸 TPI-Abuse	2026-07-10 17:38:44 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 192.140.148.98 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 192.140.148.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 13:38:38.177660 2026] [security2:error] [pid 8826:tid 8826] [client 192.140.148.98:47606] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 192.140.148.98 (+1 hits since last alert)\|lawrencehale.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lawrencehale.net"] [uri "/xmlrpc.php"] [unique_id "alEuHluRoS6SWBuILz0-UgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 2404:6800:4005:c02::124

🇳🇱 172.94.9.186

🇺🇸 147.185.132.125

🇵🇱 83.97.117.72

🇺🇸 45.33.113.82

🇵🇷 24.50.217.192

🇧🇷 20.206.89.130

🇺🇸 13.89.124.208

🇬🇧 2.57.17.83

🇨🇳 223.223.199.221

🇰🇿 185.35.223.45

🇺🇸 172.202.117.178

🇧🇷 170.83.210.207

🇫🇮 147.185.133.203

🇺🇸 143.42.164.34

🇭🇰 103.81.170.109

🇺🇸 98.90.43.197

🇺🇸 64.62.197.60

🇺🇸 50.116.20.82

🇻🇪 45.186.209.183