JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 118.172.50.137

118.172.50.137 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 74%: ?

74%

ISP	TOT Public Company Limited Bangkok
Usage Type	Fixed Line ISP
ASN	AS23969
Domain Name	totisp.net
Country	🇹🇭 Thailand
City	Chiang Rai, Chiang Rai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 118.172.50.137

Whois 118.172.50.137

IP Abuse Reports for 118.172.50.137:

This IP address has been reported a total of 13 times from 13 distinct sources. 118.172.50.137 was first reported on October 18th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-10-20 16:50:59 (2 days ago)	ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-20 UTC.	Brute-Force
🇫🇷 SpaceHost-Server	2026-10-19 22:14:53 (3 days ago)		Brute-Force Web App Attack
Anonymous	2026-10-19 20:08:44 (3 days ago)	Fail2Ban triggered	Web App Attack
🇺🇸 integrantservices.com	2026-10-19 15:30:40 (3 days ago)	(wordpress) Failed wordpress login from 118.172.50.137 (TH/Thailand/node-9zd.pool-118-172.dynamic.nt ... show more (wordpress) Failed wordpress login from 118.172.50.137 (TH/Thailand/node-9zd.pool-118-172.dynamic.nt-isp.net) show less	Brute-Force
🇺🇸 IndigoRidge	2026-10-19 14:30:30 (3 days ago)	118.172.50.137 - - [19/Oct/2026:10:28:22 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5147 "-" "WordPress. ... show more 118.172.50.137 - - [19/Oct/2026:10:28:22 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5147 "-" "WordPress.com; https://wordpress.com" 118.172.50.137 - - [19/Oct/2026:10:28:31 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5147 "-" "WordPress.com; https://wordpress.com" 118.172.50.137 - - [19/Oct/2026:10:29:24 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5147 "-" "WordPress.com; https://wordpress.com" 118.172.50.137 - - [19/Oct/2026:10:30:17 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5147 "-" "WordPress.com; https://wordpress.com" 118.172.50.137 - - [19/Oct/2026:10:30:27 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5147 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇬🇧 Aetherweb Ark	2026-10-19 13:58:18 (3 days ago)	(mod_security) mod_security (id:35002) triggered by 118.172.50.137 (TH/Thailand/node-9zd.pool-118-17 ... show more (mod_security) mod_security (id:35002) triggered by 118.172.50.137 (TH/Thailand/node-9zd.pool-118-172.dynamic.nt-isp.net): N in the last X secs show less	Web App Attack
Anonymous	2026-10-19 11:37:37 (3 days ago)	(wordpress) Failed wordpress login from 118.172.50.137 (TH/Thailand/node-9zd.pool-118-172.dynamic.nt ... show more (wordpress) Failed wordpress login from 118.172.50.137 (TH/Thailand/node-9zd.pool-118-172.dynamic.nt-isp.net) show less	Brute-Force
🇮🇹 CoreTech srl	2026-10-19 10:33:58 (3 days ago)	cloudlinux2 fail2ban: 2026-10-19 12:28:53,547 fail2ban.filter [1957]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-10-19 12:28:53,547 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 103.251.51.215 - 2026-10-19 12:28:53cloudlinux2 fail2ban: 2026-10-19 12:28:54,152 fail2ban.actions [1957]: NOTICE [plesk-modsecurity] Ban 103.251.51.215cloudlinux2 fail2ban: 2026-10-19 12:28:54,265 fail2ban.filter [1957]: INFO [recidive] Found 103.251.51.215 - 2026-10-19 12:28:54cloudlinux2 fail2ban: 2026-10-19 12:29:32,414 fail2ban.filter [1957]: INFO [plesk-wordpress] Found 61.170.153.204 - 2026-10-19 12:29:31cloudlinux2 fail2ban: 2026-10-19 12:30:16,239 fail2ban.filter [1957]: INFO [plesk-wordpress] Found 103.236.176.144 - 2026-10-19 12:30:15cloudlinux2 fail2ban: 2026-10-19 12:31:30,399 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 118.172.50.137 - 2026-10-19 12:31:30cloudlinux2 fail2ban: 2026-10-19 12:31:40,890 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 118.172.50.137 - 2026-10-19 12:31:40cloudlinux2 fail2ban: 20 show less	Web App Attack
🇩🇪 Marc	2026-10-19 06:45:50 (3 days ago)	118.172.50.137 - - [19/Oct/2026:08:45:27 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4847 "-" "Jetpack by ... show more 118.172.50.137 - - [19/Oct/2026:08:45:27 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4847 "-" "Jetpack by WordPress.com" 118.172.50.137 - - [19/Oct/2026:08:45:37 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4847 "-" "Jetpack/12.1; WordPress/6.3; http://site44995117.com" 118.172.50.137 - - [19/Oct/2026:08:45:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4846 "-" "Jetpack/12.5; WordPress/6.4; http://site19572000.com" show less	Brute-Force Web App Attack
🇩🇪 rh24	2026-10-19 05:13:30 (3 days ago)	(xmlrpc_405) XMLRPC-Bot 405 118.172.50.137 (TH/Thailand/node-9zd.pool-118-172.dynamic.nt-isp.net)	Hacking
🇧🇪 cmbplf	2026-10-19 02:31:52 (3 days ago)	4.304 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇫🇷 dynamix	2026-10-19 00:36:43 (3 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-10-18 23:56:46 (3 days ago)	Reported by internal abuse tracking	DDoS Attack Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇿 118.148.185.105

🇺🇸 216.245.127.221

🇰🇷 211.248.236.58

🇨🇳 192.140.178.164

🇺🇸 147.185.132.84

🇷🇴 92.118.39.77

🇳🇱 91.92.241.25

🇺🇸 70.37.89.177

🇺🇸 40.124.117.28

🇳🇱 23.97.182.38

🇺🇸 216.180.246.178

🇳🇱 193.47.62.69

🇮🇳 157.20.215.123

🇧🇪 146.148.30.141

🇸🇬 129.212.233.218

🇿🇦 102.202.168.112

🇦🇷 74.244.135.194

🇺🇸 45.156.129.128

🇧🇪 35.233.124.119

🇦🇷 181.15.109.189