JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

23.101.149.146

Neutral Activity

Abuse confidence score ?

0% Low Risk

78 reports

43 reporters · latest 3 years ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

23.101.149.146 has been reported 78 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 23.101.149.146

This IP address has been reported a total of 78 times from 43 distinct sources. 23.101.149.146 was first reported on July 24th 2023, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 sumnone	2023-08-01 04:58:08 (3 years ago)	Wordpress vulnerability probing: Error 404. The requested page (/wp-content/themes/seotheme/db.php) ... show more Wordpress vulnerability probing: Error 404. The requested page (/wp-content/themes/seotheme/db.php) was not found show less	Bad Web Bot Exploited Host Web App Attack
🇬🇧 Buster	2023-07-31 11:24:28 (3 years ago)	Repeated script kiddie distributed attack attempts on multiple sites from Perm Blocked ASN & country ... show more Repeated script kiddie distributed attack attempts on multiple sites from Perm Blocked ASN & country: show less	DDoS Attack Open Proxy Hacking Web App Attack
🇦🇺 advena	2023-07-31 09:45:59 (3 years ago)	23.101.149.146 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2023-07-31T09:39:09Z after vi ... show more 23.101.149.146 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2023-07-31T09:39:09Z after violating WAF directive: 7deac62381044a1a91c2dd4a4d048ece. Pre-cautionary/corrective action applied: managed_challenge. show less	Web Spam Hacking Brute-Force Web App Attack
🇳🇱 i-turnradio.nl	2023-07-31 05:04:57 (3 years ago)	2023-07-31 @ 07:04:56 (CET) ~ Blocked for trying to access: /ALFA_DATA/alfacgiapi/perl.alfa	Web App Attack
🇬🇧 findlab	2023-07-31 04:07:21 (3 years ago)	Backdrop CMS module - Request: /wordpress	Bad Web Bot Web App Attack
🇳🇱 CryptoYakari	2023-07-31 01:59:43 (3 years ago)	23.101.149.146 - - [31/Jul/2023:04:59:34 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.0" 404 ... show more 23.101.149.146 - - [31/Jul/2023:04:59:34 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.0" 404 3252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 23.101.149.146 - - [31/Jul/2023:04:59:35 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.0" 404 3252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 23.101.149.146 - - [31/Jul/2023:04:59:35 +0300] "POST /wp-plain.php HTTP/1.0" 404 200 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 23.101.149.146 - - [31/Jul/2023:04:59:36 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.0" 404 3252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; w ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
🇦🇺 MAGIC	2023-07-31 01:04:56 (3 years ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 Donovan_DMC	2023-07-31 01:04:02 (3 years ago)	GET /wp-content/themes/seotheme/db.php?u - 23.101.149.146 (Mozlila/5.0 (Linux; Android 7.0; SM-G892A ... show more GET /wp-content/themes/seotheme/db.php?u - 23.101.149.146 (Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36) [wp-content]: WordPress Content Scanner [php-scanner]: PHP Scanner show less	Bad Web Bot Web App Attack
🇧🇪 DAILYKANBAN.COM	2023-07-31 00:46:34 (3 years ago)	(mod_security) mod_security (id:1000001) triggered by 23.101.149.146 (US/United States/-): 2 in the ... show more (mod_security) mod_security (id:1000001) triggered by 23.101.149.146 (US/United States/-): 2 in the last 600 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Jul 31 00:46:32.587639 2023] [security2:error] [pid 400970:tid 22708158977792] [client 23.101.149.146:0] [client 23.101.149.146] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/blog" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "9"] [id "1000001"] [msg "Restricted File Probe"] [data "Matched Data: /blog found within REQUEST_URI"] [severity "CRITICAL"] [tag "paranoia-level/2"] [hostname "magicalmysteryplanttour.group"] [uri "/blog"] [unique_id "ZMcEaGh7U0PNvp6c6qWlMAAAARI"] [Mon Jul 31 00:46:32.836965 2023] [security2:error] [pid 400835:tid 22709311166208] [client 23.101.149.146:0] [client 23.101.149.146] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/blog" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "9"] [id "1000001"] show less	Web App Attack
🇳🇱 CryptoYakari	2023-07-31 00:34:37 (3 years ago)	23.101.149.146 - - [31/Jul/2023:03:34:32 +0300] "GET /wordpress HTTP/1.0" 404 3252 "-" "-" 23.101.14 ... show more 23.101.149.146 - - [31/Jul/2023:03:34:32 +0300] "GET /wordpress HTTP/1.0" 404 3252 "-" "-" 23.101.149.146 - - [31/Jul/2023:03:34:32 +0300] "GET /wp HTTP/1.0" 404 3252 "-" "-" 23.101.149.146 - - [31/Jul/2023:03:34:33 +0300] "GET /blog HTTP/1.0" 404 3252 "-" "-" 23.101.149.146 - - [31/Jul/2023:03:34:33 +0300] "GET /new HTTP/1.0" 404 3252 "-" "-" 23.101.149.146 - - [31/Jul/2023:03:34:34 +0300] "GET /old HTTP/1.0" 404 3252 "-" "-" ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
🇩🇪 bryth	2023-07-30 23:17:46 (3 years ago)	23.101.149.146 - - [31/Jul/2023:01:17:44 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" ... show more 23.101.149.146 - - [31/Jul/2023:01:17:44 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 200 756 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" ... show less	Hacking Web App Attack
🇸🇬 mypatricks	2023-07-30 23:01:52 (3 years ago)	23.101.149.146 \| Port: 47148 \| DNS: 23.101.149.146 2023-07-30T23:01:51+00:00 UTC \| Unauthorized conn ... show more 23.101.149.146 \| Port: 47148 \| DNS: 23.101.149.146 2023-07-30T23:01:51+00:00 UTC \| Unauthorized connect attempts \| UA: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 HTTP/1.1 443 GET \| URL: / \| Ref: - \| Country: US/United States/-08:00 IP City: Boydton 7ef139ce09549c70-IAD/Ashburn, VA, United States 1 hits/0 secs Robots 0 show less	Web Spam Blog Spam Brute-Force Exploited Host Web App Attack
🇸🇬 mypatricks	2023-07-30 22:20:23 (3 years ago)	23.101.149.146 \| Port: 36390 \| DNS: 23.101.149.146 2023-07-31T06:20:22+08:00 Asia/Singapore \| Suspic ... show more 23.101.149.146 \| Port: 36390 \| DNS: 23.101.149.146 2023-07-31T06:20:22+08:00 Asia/Singapore \| Suspicious User Abuse Activity \| UA: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 HTTP/1.1 443 POST \| URL: /ALFA_DATA/alfacgiapi/perl.alfa \| Ref: www.google.com \| Country: US/United States/-08:00 IP City: Boydton 7ef0fd0c3d9f81db-IAD/Ashburn, VA, United States 1 hits/0 secs Robots 3 show less	Web Spam Blog Spam Brute-Force Exploited Host Web App Attack
🇬🇧 MrRobert	2023-07-30 21:15:24 (3 years ago)	403 limit exceeded -- 23.101.149.146 -	Web App Attack
🇺🇸 Database.red	2023-07-30 19:04:02 (3 years ago)	[2023-07-30 15:04:02] Exploit probing - /wp-content/themes/seotheme/db.php?u	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 78 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.155.61

🇹🇷 195.142.175.196

🇧🇷 187.87.176.150

🇺🇸 136.144.35.252

🇳🇱 45.153.34.217

🇺🇸 20.55.91.214

🇧🇷 187.87.144.234

🇧🇷 177.47.251.9

🇩🇪 172.252.25.223

🇺🇸 52.165.83.239

🇳🇱 45.148.10.59

🇧🇷 187.63.181.27

🇳🇱 185.93.89.111

🇨🇳 183.201.208.25

🇯🇴 176.241.66.87

🇩🇪 167.94.146.39

🇺🇸 158.51.96.38

🇫🇷 91.231.89.72

🇷🇴 84.232.177.16

🇺🇸 206.204.9.174