AbuseIPDB » 112.208.79.118
112.208.79.118
This IP was reported 5 times. Confidence of
Abuse
is 24% : ?
ISP
HOME_DSL
Usage Type
Fixed Line ISP
ASN
AS9299
Hostname(s)
112.208.79.118.pldt.net
Domain Name
pldthome.com
Country
🇵🇭
Philippines
City
Calinog, Western Visayas
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 112.208.79.118 :
This IP address has been reported a total of
5
times from
4 distinct
sources.
112.208.79.118 was first reported on
June 13th 2026 , and the most recent report was
5 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-06-13 05:38:40
(5 days ago)
(mod_security) mod_security (id:240335) triggered by 112.208.79.118 (112.208.79.118.pldt.net): 1 in ...
show more
(mod_security) mod_security (id:240335) triggered by 112.208.79.118 (112.208.79.118.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 01:38:31.318983 2026] [security2:error] [pid 31773:tid 31773] [client 112.208.79.118:45090] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 112.208.79.118 (+1 hits since last alert)|emsystemsltd.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "emsystemsltd.com"] [uri "/xmlrpc.php"] [unique_id "aizs14uO66va-AWj6s9Q5wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-13 05:03:01
(5 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇬🇷
setupgr
2026-06-13 03:00:17
(5 days ago)
(XMLRPC) WP XMLPRC Attack 112.208.79.118: 1 in the last 86400 secs; Ports: *; Direction: inout; Trig ...
show more
(XMLRPC) WP XMLPRC Attack 112.208.79.118: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 112.208.79.118 - - [13/Jun/2026:05:54:27 +0300] "POST /xmlrpc.php HTTP/1.1" 503 - "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)"
show less
Port Scan
🇧🇪
cmbplf
2026-06-13 01:35:40
(5 days ago)
4.121 requests with url.path */xmlrpc.php
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-13 01:35:15
(5 days ago)
(mod_security) mod_security (id:240335) triggered by 112.208.79.118 (112.208.79.118.pldt.net): 1 in ...
show more
(mod_security) mod_security (id:240335) triggered by 112.208.79.118 (112.208.79.118.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 21:35:10.918259 2026] [security2:error] [pid 6121:tid 6121] [client 112.208.79.118:43939] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 112.208.79.118 (+1 hits since last alert)|rentkase.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "rentkase.com"] [uri "/xmlrpc.php"] [unique_id "aiyzzupDhu_wmzayYHYL4AAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: