AbuseIPDB » 192.248.9.137
192.248.9.137
This IP was reported 6 times. Confidence of
Abuse
is 20% : ?
ISP
Lanka Education and Research Network (LEARN)
Usage Type
University/College/School
ASN
AS38229
Domain Name
learn.ac.lk
Country
🇱🇰
Sri Lanka
City
Colombo, Western Province
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 192.248.9.137 :
This IP address has been reported a total of
6
times from
5 distinct
sources.
192.248.9.137 was first reported on
July 22nd 2021 , and the most recent report was
1 week ago
Old Reports:
The most recent abuse report for this IP address is from
1 week ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
IndigoRidge
2026-10-15 14:14:07
(1 week ago)
192.248.9.137 - - [15/Oct/2026:10:12:18 -0400] "GET /wp-json/wp/v2/users HTTP/1.1" 403 5525 "-" "Moz ...
show more
192.248.9.137 - - [15/Oct/2026:10:12:18 -0400] "GET /wp-json/wp/v2/users HTTP/1.1" 403 5525 "-" "Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)"
192.248.9.137 - - [15/Oct/2026:10:13:02 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5231 "-" "Mozilla/5.0 (Linux; Android 10; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36"
192.248.9.137 - - [15/Oct/2026:10:13:24 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5231 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/14.0.0.0 Safari/537.36"
192.248.9.137 - - [15/Oct/2026:10:13:45 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5231 "-" "Mozilla/5.0 (Windows NT 10.0; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/15.0.0.0 Safari/537.36"
192.248.9.137 - - [15/Oct/2026:10:14:06 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5231 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
IndigoRidge
2026-10-14 17:13:57
(1 week ago)
192.248.9.137 - - [14/Oct/2026:13:12:20 -0400] "GET /wp-json/wp/v2/users HTTP/1.1" 403 5525 "-" "Moz ...
show more
192.248.9.137 - - [14/Oct/2026:13:12:20 -0400] "GET /wp-json/wp/v2/users HTTP/1.1" 403 5525 "-" "Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)"
192.248.9.137 - - [14/Oct/2026:13:12:52 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5231 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/10.0.0.0 Safari/537.36"
192.248.9.137 - - [14/Oct/2026:13:13:14 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5231 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/13.0.0.0 Safari/537.36"
192.248.9.137 - - [14/Oct/2026:13:13:36 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5231 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36"
192.248.9.137 - - [14/Oct/2026:13:13:56 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5231 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/11.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇦🇺
AWW-Admin
2026-10-14 16:42:37
(1 week ago)
(wordpress) Failed wordpress login from 192.248.9.137 (LK/Sri Lanka/-)
Brute-Force
2026-10-09 09:59:42
(1 week ago)
[redacted] 192.248.9.137 - - [09/Oct/2026:11:58:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "M ...
show more
[redacted] 192.248.9.137 - - [09/Oct/2026:11:58:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.0.0 Safari/537.36"
[redacted] 192.248.9.137 - - [09/Oct/2026:11:59:00 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 10.0; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
[redacted] 192.248.9.137 - - [09/Oct/2026:11:59:12 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Linux; Android 10; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.0.0 Safari/537.36"
[redacted] 192.248.9.137 - - [09/Oct/2026:11:59:39 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.0.0 Safari/537.36"
[redacted] 192.248.9.137 - - [09/Oct/2026:11:59:41 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; arm64) AppleWebKit/537.36
...
show less
Hacking
Web App Attack
🇺🇸
kosada.com
2026-02-18 05:40:08
(8 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇲🇾
syokadmin
2021-07-22 00:33:16
(5 years ago)
(mod_security) mod_security (id:949110) triggered by 192.248.9.137 (LK/Sri Lanka/-): 1 in the last 3 ...
show more
(mod_security) mod_security (id:949110) triggered by 192.248.9.137 (LK/Sri Lanka/-): 1 in the last 3600 secs
show less
Brute-Force
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: