JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 164.138.220.142

164.138.220.142 was found in our database!

This IP was reported 644 times. Confidence of Abuse is 100%: ?

100%

ISP	SuperHosting.BG - CL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS201200
Hostname(s)	parkbtku.superdnsserver.net
Domain Name	superhosting.bg
Country	🇧🇬 Bulgaria
City	Sofia, Sofia-Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 164.138.220.142

Whois 164.138.220.142

IP Abuse Reports for 164.138.220.142:

This IP address has been reported a total of 644 times from 206 distinct sources. 164.138.220.142 was first reported on July 4th 2025, and the most recent report was 59 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-07-24 04:10:55 (59 minutes ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 DocNetzwerk	2026-07-24 02:57:25 (2 hours ago)	(wordpress) Failed wordpress login from 164.138.220.142 (BG/Bulgaria/parkbtku.superdnsserver.net)	Brute-Force
🇩🇪 ger-stg-sifi1	2026-07-24 02:54:38 (2 hours ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇫🇷 Tilellit.PRO	2026-07-24 02:47:53 (2 hours ago)	Malicious web traffic detected by CrowdSec	Hacking
🇩🇪 Marc	2026-07-24 02:26:49 (2 hours ago)	164.138.220.142 - - [24/Jul/2026:03:37:04 +0200] "GET /wp-login.php HTTP/2.0" 200 3928 "https://weis ... show more 164.138.220.142 - - [24/Jul/2026:03:37:04 +0200] "GET /wp-login.php HTTP/2.0" 200 3928 "https://weiss-blau-hemer.de/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 164.138.220.142 - - [24/Jul/2026:03:58:51 +0200] "GET /wp-login.php HTTP/2.0" 200 3458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 164.138.220.142 - - [24/Jul/2026:03:58:52 +0200] "POST /wp-login.php HTTP/2.0" 200 3655 "https://als-arnsberg.eu/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 164.138.220.142 - - [24/Jul/2026:04:26:46 +0200] "GET /wp-login.php HTTP/2.0" 200 3458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 164.138.220.142 - - [24/Jul/2026:04:26:47 +0200] "POST /wp-login.php HTTP/2.0" 200 3655 "https://alsarnsberg.de/wp-login.php" "Mozilla/5.0 (W show less	Brute-Force Web App Attack
🇫🇷 masterguru	2026-07-24 01:37:31 (3 hours ago)	(wordpress) Apache: Failed WordPress login from 164.138.220.142 (BG/Bulgaria/parkbtku.superdnsserver ... show more (wordpress) Apache: Failed WordPress login from 164.138.220.142 (BG/Bulgaria/parkbtku.superdnsserver.net): 10 in the last 3600 secs (0-197) show less	Hacking
🇩🇪 netclix.gr	2026-07-24 01:20:57 (3 hours ago)	(wordpress) Failed wordpress login from 164.138.220.142 (BG/Bulgaria/parkbtku.superdnsserver.net): ... show more (wordpress) Failed wordpress login from 164.138.220.142 (BG/Bulgaria/parkbtku.superdnsserver.net): (CF_ENABLE) show less	Brute-Force
🇬🇧 andypiper	2026-07-24 01:02:05 (4 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇪🇸 masterguru	2026-07-24 00:42:55 (4 hours ago)	(wplogin) Failed WordPress login from 164.138.220.142 (BG/Bulgaria/parkbtku.superdnsserver.net): 5 i ... show more (wplogin) Failed WordPress login from 164.138.220.142 (BG/Bulgaria/parkbtku.superdnsserver.net): 5 in the last 3600 secs (0-122) show less	Hacking
🇬🇧 spamverify.com	2026-07-24 00:28:07 (4 hours ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack
🇩🇪 LRob	2026-07-24 00:13:23 (4 hours ago)	CrowdSec: lrob/wp-login-slow-bf \| req: /wp-login.php \| 2 distinct paths \| UA: Mozilla/5.0 (Windows N ... show more CrowdSec: lrob/wp-login-slow-bf \| req: /wp-login.php \| 2 distinct paths \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 show less	Brute-Force Web App Attack
🇺🇸 Mundo Bueno	2026-07-24 00:06:30 (5 hours ago)	[ISILIA Protection v2.1] Tentative d'accès: /xmlrpc.php \| Pays: BG \| UA: Mozilla/5.0 (Windows NT 10. ... show more [ISILIA Protection v2.1] Tentative d'accès: /xmlrpc.php \| Pays: BG \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Sa show less	Hacking Web App Attack
🇫🇷 tecnicorioja	2026-07-23 22:01:16 (7 hours ago)	wp-login attack [23/Jul/2026:18:01:58	Brute-Force Web App Attack
🇩🇪 london2038.com	2026-07-23 21:45:18 (7 hours ago)	Attacking WordPress 164.138.220.142 - - [23/Jul/2026:23:45:16 +0200] "POST /wp-login.php HTTP/2.0" 5 ... show more Attacking WordPress 164.138.220.142 - - [23/Jul/2026:23:45:16 +0200] "POST /wp-login.php HTTP/2.0" 503 19291 "https://v97746.<REDACTED>/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" show less	Brute-Force Web App Attack
🇩🇪 4server	2026-07-23 19:39:11 (9 hours ago)	[ThuJul2321:39:08.2608582026][security2:error][pid2065138:tid2065253][client164.138.220.142:0]ModSec ... show more [ThuJul2321:39:08.2608582026][security2:error][pid2065138:tid2065253][client164.138.220.142:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"feldenkraisticino.ch\"][uri\"/wp-login.php\"][unique_id\"amJt3CFUmhW2sk_MWg9puAAAAVQ\"]\,referer:https://feldenkraisticino.ch/wp-login.php show less	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 644 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 179.96.254.197

🇷🇺 178.157.190.47

🇺🇸 156.229.163.164

🇷🇺 92.101.186.237

🇸🇬 84.75.155.60

🇸🇬 52.221.192.234

🇩🇪 2a09:bac5:2808:18fa::27d:4a

🇮🇩 202.51.214.99

🇺🇸 165.227.84.141

🇨🇦 85.217.149.66

🇸🇬 84.75.155.154

🇺🇸 76.79.213.69

🇺🇸 66.132.172.212

🇳🇱 45.156.87.34

🇧🇪 34.38.73.60

🇩🇪 2a09:bac5:27bc:2c8::47:59e

🇩🇪 2a09:bac1:1e00:60::47:5bc

🇺🇸 165.154.172.72

🇺🇸 162.216.150.15

🇯🇵 160.251.215.51