JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.120.94.148

64.120.94.148 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 48%: ?

48%

ISP	Leaseweb Asia Pacific pte. ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59253
Domain Name	leaseweb.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.120.94.148

Whois 64.120.94.148

IP Abuse Reports for 64.120.94.148:

This IP address has been reported a total of 28 times from 8 distinct sources. 64.120.94.148 was first reported on July 17th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TAY	2026-07-29 09:08:28 (2 days ago)	64.120.94.148 - - [29/Jul/2026:17:08:26 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6180 "-" "Python-xmlr ... show more 64.120.94.148 - - [29/Jul/2026:17:08:26 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6180 "-" "Python-xmlrpc/3.9" 64.120.94.148 - - [29/Jul/2026:17:08:27 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6180 "-" "Python-xmlrpc/3.9" 64.120.94.148 - - [29/Jul/2026:17:08:27 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6180 "-" "Python-xmlrpc/3.9" ... show less	Brute-Force
🇺🇸 TAY	2026-07-29 08:08:24 (2 days ago)	64.120.94.148 - - [29/Jul/2026:16:08:21 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6180 "-" "Python-xmlr ... show more 64.120.94.148 - - [29/Jul/2026:16:08:21 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6180 "-" "Python-xmlrpc/3.9" 64.120.94.148 - - [29/Jul/2026:16:08:22 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6180 "-" "Python-xmlrpc/3.9" 64.120.94.148 - - [29/Jul/2026:16:08:23 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6180 "-" "Python-xmlrpc/3.9" ... show less	Brute-Force
🇺🇸 TAY	2026-07-29 07:08:14 (2 days ago)	64.120.94.148 - - [29/Jul/2026:15:08:11 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6180 "-" "Python-xmlr ... show more 64.120.94.148 - - [29/Jul/2026:15:08:11 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6180 "-" "Python-xmlrpc/3.9" 64.120.94.148 - - [29/Jul/2026:15:08:13 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6180 "-" "Python-xmlrpc/3.9" 64.120.94.148 - - [29/Jul/2026:15:08:14 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6180 "-" "Python-xmlrpc/3.9" ... show less	Brute-Force
🇺🇸 TAY	2026-07-29 06:08:09 (2 days ago)	64.120.94.148 - - [29/Jul/2026:14:08:07 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6180 "-" "Python-xmlr ... show more 64.120.94.148 - - [29/Jul/2026:14:08:07 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6180 "-" "Python-xmlrpc/3.9" 64.120.94.148 - - [29/Jul/2026:14:08:08 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6180 "-" "Python-xmlrpc/3.9" 64.120.94.148 - - [29/Jul/2026:14:08:09 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6180 "-" "Python-xmlrpc/3.9" ... show less	Brute-Force
🇺🇸 TAY	2026-07-29 05:08:04 (2 days ago)	64.120.94.148 - - [29/Jul/2026:13:07:44 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6180 "-" "Python-xmlr ... show more 64.120.94.148 - - [29/Jul/2026:13:07:44 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6180 "-" "Python-xmlrpc/3.9" 64.120.94.148 - - [29/Jul/2026:13:07:53 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6180 "-" "Python-xmlrpc/3.9" 64.120.94.148 - - [29/Jul/2026:13:08:04 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6180 "-" "Python-xmlrpc/3.9" ... show less	Brute-Force
🇮🇩 soc-yk	2026-07-28 16:54:15 (3 days ago)	Type: suspicious_network_activity Risk: 59 Events: 5506 Evidence: - Persistent suspicious network a ... show more Type: suspicious_network_activity Risk: 59 Events: 5506 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified show less	Port Scan Hacking
🇺🇸 TAY	2026-07-27 23:08:54 (4 days ago)	64.120.94.148 - - [28/Jul/2026:07:08:50 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6192 "-" "Python-xmlr ... show more 64.120.94.148 - - [28/Jul/2026:07:08:50 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6192 "-" "Python-xmlrpc/3.9" 64.120.94.148 - - [28/Jul/2026:07:08:52 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6192 "-" "Python-xmlrpc/3.9" 64.120.94.148 - - [28/Jul/2026:07:08:53 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6192 "-" "Python-xmlrpc/3.9" ... show less	Brute-Force
🇺🇸 TAY	2026-07-27 19:08:16 (4 days ago)	64.120.94.148 - - [28/Jul/2026:03:08:09 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6192 "-" "Python-xmlr ... show more 64.120.94.148 - - [28/Jul/2026:03:08:09 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6192 "-" "Python-xmlrpc/3.9" 64.120.94.148 - - [28/Jul/2026:03:08:12 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6192 "-" "Python-xmlrpc/3.9" 64.120.94.148 - - [28/Jul/2026:03:08:15 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6192 "-" "Python-xmlrpc/3.9" ... show less	Brute-Force
🇮🇩 soc-yk	2026-07-27 12:06:12 (4 days ago)	Type: suspicious_network_activity Risk: 59 Events: 3423 Evidence: - Persistent suspicious network a ... show more Type: suspicious_network_activity Risk: 59 Events: 3423 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified show less	Port Scan Hacking
🇲🇾 Rizzy	2026-07-27 09:05:30 (4 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TAY	2026-07-26 19:58:59 (5 days ago)	64.120.94.148 - - [27/Jul/2026:03:55:49 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6227 "-" "Python-xmlr ... show more 64.120.94.148 - - [27/Jul/2026:03:55:49 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6227 "-" "Python-xmlrpc/3.10" 64.120.94.148 - - [27/Jul/2026:03:58:21 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6227 "-" "Python-xmlrpc/3.10" 64.120.94.148 - - [27/Jul/2026:03:58:59 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6227 "-" "Python-xmlrpc/3.10" ... show less	Brute-Force
🇺🇸 TAY	2026-07-26 18:55:08 (5 days ago)	64.120.94.148 - - [27/Jul/2026:02:53:43 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6227 "-" "Python-xmlr ... show more 64.120.94.148 - - [27/Jul/2026:02:53:43 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6227 "-" "Python-xmlrpc/3.10" 64.120.94.148 - - [27/Jul/2026:02:54:26 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6227 "-" "Python-xmlrpc/3.10" 64.120.94.148 - - [27/Jul/2026:02:55:07 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6227 "-" "Python-xmlrpc/3.10" ... show less	Brute-Force
🇮🇩 soc-yk	2026-07-26 14:42:10 (5 days ago)	Type: credential_attack Risk: 61 Events: 3197 Evidence: - Repeated authentication attack activity d ... show more Type: credential_attack Risk: 61 Events: 3197 Evidence: - Repeated authentication attack activity detected - Credential abuse behavior observed - Multi-event operational persistence identified show less	Brute-Force SSH
🇲🇾 Rizzy	2026-07-26 07:59:51 (5 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇮🇩 soc-yk	2026-07-26 03:30:13 (6 days ago)	Type: suspicious_network_activity Risk: 92 Events: 1340 Evidence: - Persistent suspicious network a ... show more Type: suspicious_network_activity Risk: 92 Events: 1340 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified show less	Port Scan Hacking

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 119.73.23.22

🇧🇷 201.76.20.104

🇭🇰 199.45.154.112

🇳🇱 195.178.110.217

🇨🇴 190.143.29.54

🇧🇷 179.48.151.156

🇺🇸 172.202.118.16

🇺🇸 162.216.150.35

🇹🇷 159.146.18.236

🇫🇮 147.185.133.221

🇺🇸 135.237.126.210

🇧🇷 131.100.242.102

🇨🇳 114.96.86.176

🇷🇴 92.118.39.14

🇺🇸 65.49.1.214

🇸🇪 31.192.201.106

🇫🇷 2001:41d0:33d:9200::40f

🇳🇱 217.60.195.65

🇹🇳 196.179.6.175

🇧🇴 181.188.148.74