JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.148.16.102

193.148.16.102 was found in our database!

This IP was reported 243 times. Confidence of Abuse is 1%: ?

ISP	M247 LTD Tokyo Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247global.com
Country	🇯🇵 Japan
City	Ebara, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.148.16.102

Whois 193.148.16.102

IP Abuse Reports for 193.148.16.102:

This IP address has been reported a total of 243 times from 86 distinct sources. 193.148.16.102 was first reported on April 28th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 Scan	2026-08-10 07:05:18 (3 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 mnsf	2026-06-20 01:05:29 (2 months ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇧🇪 cmbplf	2026-06-10 01:49:03 (2 months ago)	143 requests with url.path //xmlrpc.php	Brute-Force Bad Web Bot
🇺🇸 bigwavedave	2026-05-08 11:15:41 (3 months ago)	Wordpress Attack	Web App Attack
🇫🇷 masterguru	2026-05-08 01:31:10 (3 months ago)	(wordpress) Apache: Failed WordPress login from 193.148.16.102 (JP/Japan/-): 10 in the last 3600 sec ... show more (wordpress) Apache: Failed WordPress login from 193.148.16.102 (JP/Japan/-): 10 in the last 3600 secs (0-196) show less	Hacking
Anonymous	2026-05-08 01:30:45 (3 months ago)	Failed Wordpress Logins	Web App Attack
🇫🇷 SpaceHost-Server	2026-05-07 22:32:15 (3 months ago)		Brute-Force Web App Attack
🇨🇳 pengpeng	2026-03-29 13:40:26 (5 months ago)	monitor: on VM-0-7-ubuntu \| port: 39435 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 39435 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 pengpeng	2026-03-23 20:40:54 (5 months ago)	monitor: on VM-0-7-ubuntu \| port: 26412 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 26412 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 donarev419	2026-01-08 20:18:32 (7 months ago)	Abused smb on 445 2026-01-08T20:18:32Z client "00000045ff534d4272000000001801c800000000000000000000 ... show more Abused smb on 445 2026-01-08T20:18:32Z client "00000045ff534d4272000000001801c8000000000000000000000000ffff000000000000002200024e54204c4d20302e31320002534d4220322e3030320002534d4220322e3f3f3f00" 2026-01-08T20:18:32Z server "00000090fe534d420000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000" show less	Hacking Brute-Force
🇦🇺 oncord	2025-12-11 13:58:25 (8 months ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2025-11-02 06:09:22 (9 months ago)	(mod_security) mod_security (id:240000) triggered by 193.148.16.102 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 193.148.16.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 02 01:09:16.244136 2025] [security2:error] [pid 9003:tid 9003] [client 193.148.16.102:40900] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "87"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|brewhound.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "brewhound.net"] [uri "/images/stories/themes.php"] [unique_id "aQb1jGZ7iknQcejYo3BxQAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Mendip_Defender	2025-10-27 14:07:47 (10 months ago)	193.148.16.102 - - [27/Oct/2025:14:07:40 +0000] "GET /manager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 ... show more 193.148.16.102 - - [27/Oct/2025:14:07:40 +0000] "GET /manager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.148.16.102 - - [27/Oct/2025:14:07:41 +0000] "GET /bless.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.148.16.102 - - [27/Oct/2025:14:07:41 +0000] "GET /O-Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" ... show less	Hacking Web App Attack
🇫🇷 HerrWolf	2025-10-26 05:45:03 (10 months ago)	CrowdSec Detection: crowdsecurity/http-admin-interface-probing	Web App Attack
🇨🇦 Mediashaker	2025-10-24 20:38:49 (10 months ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 193.148.16.102 (JP/Japan ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 193.148.16.102 (JP/Japan/-) show less	Port Scan

Showing 1 to 15 of 243 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 218.233.182.39

🇺🇸 198.211.99.18

🇩🇪 194.187.176.81

🇦🇷 186.22.110.115

🇺🇸 172.104.10.101

🇺🇸 147.185.132.149

🇺🇸 75.112.23.30

🇺🇸 45.79.2.36

🇧🇪 34.38.226.251

🇬🇧 5.252.83.27

🇫🇷 2001:41d0:303:7487::1

🇬🇧 213.166.84.51

🇮🇩 210.79.142.201

🇩🇪 206.189.50.23

🇹🇼 198.235.24.30

🇺🇸 195.184.76.153

🇺🇸 195.184.76.79

🇵🇱 178.73.12.66

🇺🇸 162.216.150.72

🇫🇮 147.185.133.15