AbuseIPDB » 201.148.165.129
201.148.165.129 was found in our database!
This IP was reported 8 times. Confidence of
Abuse
is 0%: ?
| ISP |
New Net Informatica e Telecomunicações
|
| Usage Type |
Fixed Line ISP
|
| ASN |
AS61670
|
| Hostname(s) |
dynamic-201-148-165-129.newnetprovedor.net.br
|
| Domain Name |
newnetprovedor.net.br
|
| Country |
🇧🇷
Brazil
|
| City |
Campos dos Goytacazes, Rio de Janeiro
|
IP info including ISP, Usage Type, and Location provided
by IPInfo. Updated weekly.
IP Abuse Reports for 201.148.165.129:
This IP address has been reported a total of
8
times from
7 distinct
sources.
201.148.165.129 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
| Reporter |
IoA Timestamp (UTC)
|
Comment |
Categories |
|
|
🇨🇳
ThreatBook.io
|
|
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/201.148.165.129
|
SSH
|
|
|
🇮🇩
hermawan
|
|
[Sun Nov 30 03:16:42.052880 2025] [security2:error] [pid 55485:tid 140580537472704] [client 201.148. ...
show more
[Sun Nov 30 03:16:42.052880 2025] [security2:error] [pid 55485:tid 140580537472704] [client 201.148.165.129:18873] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:id. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "730"] [id "921170"] [msg "deny 921170"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: i found within ARGS_NAMES:id: id request_line = GET /index.php?id=3930 HTTP/1.1 Request URI RAW = /index.php?id=3930 Request Basename = index.php"] [ver "OWASP_CRS/4.20.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ATTACK"] [tag "capec/1000/152/137/15/460"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "aStUqrz5W1IEWyJovNSyygAAAAw"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[55524] [t+iUbAEt97U] [aStUqrz5W1IEWyJovN
...
show less
|
Hacking
Web App Attack
|
|
|
Anonymous
|
|
scanning http requests from known botnet
|
Web App Attack
|
|
|
Anonymous
|
|
scanning http requests from known botnet
|
Web App Attack
|
|
|
🇳🇱
exxos
|
|
Attacks with Bad user agents
|
Hacking
|
|
|
🇪🇸
Global Cyber Police
|
|
Malicious bot activity detected: Hitting honeypot page. Part of massive botnet.
|
DDoS Attack
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇬🇷
gbetsis
|
|
TCP Port Scanning
|
Port Scan
Exploited Host
|
|
|
🇺🇸
djc82k
|
|
31-Jan-2024 08:39:45.061 client @0x7f79cdc08640 201.148.165.129#38311 (atlassian.com): query (cache) ...
show more
31-Jan-2024 08:39:45.061 client @0x7f79cdc08640 201.148.165.129#38311 (atlassian.com): query (cache) 'atlassian.com/TXT/IN' denied
31-Jan-2024 08:39:59.894 client @0x7f79cdc08640 201.148.165.129#41080 (atlassian.com): query (cache) 'atlassian.com/TXT/IN' denied
31-Jan-2024 08:40:02.858 client @0x7f79cdc08640 201.148.165.129#12646 (atlassian.com): query (cache) 'atlassian.com/TXT/IN' denied
31-Jan-2024 08:40:08.742 client @0x7f79cdc08640 201.148.165.129#43171 (globo.com): query (cache) 'globo.com/TXT/IN' denied
31-Jan-2024 08:40:27.218 client @0x7f79c80eeb30 201.148.165.129#32990 (atlassian.com): query (cache) 'atlassian.com/TXT/IN' denied
31-Jan-2024 08:40:28.750 client @0x7f79c80eeb30 201.148.165.129#19762 (atlassian.com): query (cache) 'atlassian.com/TXT/IN' denied
31-Jan-2024 08:40:35.299 client @0x7f79c80eeb30 201.148.165.129#48786 (globo.com): query (cache) 'globo.com/TXT/IN' denied
31-Jan-2024 08:40:35.711 client @0x7f79c80eeb30 201.148.165.129#49064 (globo.com): query (cache) 'g
...
show less
|
DDoS Attack
|
|
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: