JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

112.200.192.21

Neutral Activity

Abuse Confidence Score

0% Low Risk

140 reports

68 reporters · latest 6 months ago

ISP: IPG
Usage Type: Fixed Line ISP
ASN: AS9299
Domain Name: pldthome.com
Country: 🇵🇭 Philippines
City: Quezon City, National Capital Region

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

112.200.192.21 has been reported 140 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

140 from 68 distinct reporters

First reported

April 11th 2021

Most recent report

6 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 pltcldvlpr	2026-05-10 03:17:00 UTC · (6 months ago)	Unidentified crawler ignoring robots.txt: 112.200.192.21 - - [10/May/2026:04:27:19 +0200] "GET /protocol?id=nw_17_159&offset=250&seq=341 HTTP/1.1" 200 340492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome ... show more Unidentified crawler ignoring robots.txt: 112.200.192.21 - - [10/May/2026:04:27:19 +0200] "GET /protocol?id=nw_17_159&offset=250&seq=341 HTTP/1.1" 200 340492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" asn=9299 org="Philippine Long Distance Telephone Co." 112.200.192.21 - - [10/May/2026:05:16:59 +0200] "GET /protocol?id=hb_19_59&offset=400&seq=436 HTTP/1.1" 200 344351 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" asn=9299 org="Philippine Long Distance Telephone Co." ... show less	Bad Web Bot
🇩🇪 LRob	2026-01-06 06:35:22 UTC · (10 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇬🇧 yvoictra	2026-01-05 21:52:16 UTC · (10 months ago)	112.200.192.21 - - [05/Jan/2026:22:42:10 +0100] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/92.0.0.0 Safari/537.36" 112.200.192.21 - - [05/Jan/2026:22:47:11 ... show more 112.200.192.21 - - [05/Jan/2026:22:42:10 +0100] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/92.0.0.0 Safari/537.36" 112.200.192.21 - - [05/Jan/2026:22:47:11 +0100] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/63.0.0.0 Safari/537.36" 112.200.192.21 - - [05/Jan/2026:22:48:22 +0100] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (Linux; Android 10; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/64.0.0.0 Safari/537.36" 112.200.192.21 - - [05/Jan/2026:22:49:45 +0100] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (Windows NT 10.0; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.0.0 Safari/537.36" 112.200.192.21 - - [05/Jan/2026:22:51:03 +0100] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (Windows NT 6.2; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/76.0.0.0 Safari/537.36" 112. ... show less	Brute-Force Web App Attack
🇳🇱 applemooz	2026-01-05 06:41:40 UTC · (10 months ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇩🇪 big-cloud.nl	2026-01-04 22:23:10 UTC · (10 months ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 myagent.site	2026-01-03 12:24:39 UTC · (10 months ago)	Blocking for trying to access an exploit file: /xmlrpc.php	Hacking
🇩🇪 abdubhai	2025-12-31 18:02:12 UTC · (10 months ago)	112.200.192.21 - - [31/Dec/2025: ...	Brute-Force
🇬🇧 Steve	2025-12-31 01:45:37 UTC · (10 months ago)	Abuse of XMLRPC	Brute-Force Web App Attack
🇺🇸 Jason Howell	2025-12-30 23:37:11 UTC · (10 months ago)	112.200.192.21 - - [30/Dec/2025:16:09:32 -0600] "POST /xmlrpc.php HTTP/1.1" 200 2995 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/94.0.0.0 Safari/537.36" 112.200.192.21 - - [30/Dec/2025:17:33:40 -0600] "POST / ... show more 112.200.192.21 - - [30/Dec/2025:16:09:32 -0600] "POST /xmlrpc.php HTTP/1.1" 200 2995 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/94.0.0.0 Safari/537.36" 112.200.192.21 - - [30/Dec/2025:17:33:40 -0600] "POST /xmlrpc.php HTTP/1.1" 200 2995 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/70.0.0.0 Safari/537.36" 112.200.192.21 - - [30/Dec/2025:17:35:01 -0600] "POST /xmlrpc.php HTTP/1.1" 200 2995 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/81.0.0.0 Safari/537.36" 112.200.192.21 - - [30/Dec/2025:17:36:06 -0600] "POST /xmlrpc.php HTTP/1.1" 200 2995 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/13.0.0.0 Safari/537.36" 112.200.192.21 - - [30/Dec/2025:17:37:10 -0600] "POST /xmlrpc.php HTTP/1.1" 200 2996 "-" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/95.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 bsoft.de	2025-12-30 22:09:09 UTC · (10 months ago)	112.200.192.21 - - [30/Dec/2025:21:56:36 +0100] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/11.0.0.0 Safari/537.36" 112.200.192.21 - - [30/Dec/2025:23:07:57 +0100 ... show more 112.200.192.21 - - [30/Dec/2025:21:56:36 +0100] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/11.0.0.0 Safari/537.36" 112.200.192.21 - - [30/Dec/2025:23:07:57 +0100] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/80.0.0.0 Safari/537.36" 112.200.192.21 - - [30/Dec/2025:23:09:07 +0100] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 10.0; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/99.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 myagent.site	2025-12-30 12:46:48 UTC · (10 months ago)	Blocking for trying to access an exploit file: /xmlrpc.php	Hacking
🇺🇸 etu brutus	2025-12-30 00:05:42 UTC · (10 months ago)	112.200.192.21 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇫🇷 thilo	2025-12-29 11:27:47 UTC · (10 months ago)	Probe for vulnerabilities. Path attempted: /xmlrpc.php	Web App Attack
🇧🇾 lns.bz	2025-12-28 21:04:24 UTC · (10 months ago)	Banned for trying to access xmlrpc [BY]	Web App Attack
🇹🇷 rtbh.com.tr	2025-12-28 20:10:42 UTC · (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force

Showing 1 to 15 of 140 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇦 94.231.182.121

🇫🇷 92.222.108.112

🇨🇳 60.214.127.246

🇨🇳 49.116.25.62

🇺🇸 34.228.104.231

🇺🇸 34.10.209.96

🇩🇪 151.244.232.80

🇺🇸 129.121.120.170

🇺🇸 66.132.195.114

🇳🇱 45.148.10.157

🇹🇹 38.190.138.253

🇨🇳 27.46.75.4

🇫🇷 5.39.109.183

🇺🇸 198.44.135.82

🇦🇿 131.117.136.164

🇬🇧 128.116.31.3

🇧🇩 103.231.231.118

🇺🇸 54.174.58.237

🇳🇱 45.115.26.45

🇺🇸 43.162.107.88