JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.154.174.66

122.154.174.66 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 96%: ?

96%

ISP	525/9 Tumbon nakhonsawantok Muang Nakhonsawan 60000
Usage Type	Fixed Line ISP
ASN	AS9931
Domain Name	ntplc.co.th
Country	🇹🇭 Thailand
City	Lop Buri, Lopburi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 122.154.174.66

Whois 122.154.174.66

IP Abuse Reports for 122.154.174.66:

This IP address has been reported a total of 39 times from 26 distinct sources. 122.154.174.66 was first reported on January 16th 2022, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 Valhalla	2026-08-31 07:21:59 (10 hours ago)	/xmlrpc.php	Hacking Web App Attack
🇩🇪 big-cloud.nl	2026-08-31 01:25:24 (15 hours ago)	Try to access /xmlrpc.php	Web App Attack
🇨🇭 4server	2026-08-28 07:16:04 (3 days ago)	[FriAug2809:15:59.6457672026][security2:error][pid370104:tid370307][client122.154.174.66:0]ModSecuri ... show more [FriAug2809:15:59.6457672026][security2:error][pid370104:tid370307][client122.154.174.66:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"fondazionemontgrand.ch\"][uri\"/xmlrpc.php\"][unique_id\"apE1r6VOu81Z4Nkq9WoclgAAABU\"] show less	Hacking Web App Attack
🇩🇪 big-cloud.nl	2026-08-26 00:42:29 (5 days ago)	Try to access /xmlrpc.php	Web App Attack
Anonymous	2026-08-26 00:40:03 (5 days ago)	Bot / scanning and/or hacking attempts: GET /wp-json/wp/v2/users HTTP/1.1, POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 FreeMyIP	2026-08-24 09:18:52 (1 week ago)	Automated fail2ban report: web application attack / scanning for exploitable paths.	Bad Web Bot Web App Attack
🇩🇪 lightaffaire	2026-08-24 05:03:37 (1 week ago)	Aug 24 07:03:36 www.lightaffaire.com 122.154.174.66 - - [24/Aug/2026:07:03:36 +0200] "POST /xmlrpc.p ... show more Aug 24 07:03:36 www.lightaffaire.com 122.154.174.66 - - [24/Aug/2026:07:03:36 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-08-24 03:33:56 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 WeekendWeb	2026-08-21 08:57:14 (1 week ago)	Wordpress Vunerability attack	Web App Attack
🇩🇪 wlt-blocker	2026-08-21 02:02:25 (1 week ago)	Unauthorized access to webpage admin	Web App Attack
🇮🇩 Burayot	2026-08-20 07:50:43 (1 week ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 122.154.174.66 (TH/Thailand/-): 1 i ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 122.154.174.66 (TH/Thailand/-): 1 in the last 3600 secs show less	Web App Attack
🇬🇷 setupgr	2026-08-20 04:39:42 (1 week ago)	(XMLRPC) WP XMLRPC Attack 122.154.174.66 (TH/Thailand/Bangkok/Vadhana (Wattana)/-/[AS9931 CAT-AP The ... show more (XMLRPC) WP XMLRPC Attack 122.154.174.66 (TH/Thailand/Bangkok/Vadhana (Wattana)/-/[AS9931 CAT-AP The Communication Authoity of Thailand, CAT]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 122.154.174.66 - - [20/Aug/2026:07:38:39 +0300] "GET /xmlrpc.php HTTP/1.1" 503 18932 "-" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/76.0.0.0 Safari/537.36" show less	Port Scan
🇺🇸 TPI-Abuse	2026-08-20 02:08:06 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 122.154.174.66 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 122.154.174.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 22:07:57.512322 2026] [security2:error] [pid 29870:tid 29909] [client 122.154.174.66:37683] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|rockabyecotons.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rockabyecotons.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aoZhfYGpDE6PT2ZkVGaunAAAAFU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-19 07:24:02 (1 week ago)	Unauthorized SSH login attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-08-18 08:38:23 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 122.154.174.66 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 122.154.174.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 04:38:14.775673 2026] [security2:error] [pid 4741:tid 4823] [client 122.154.174.66:63594] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|visionforandfromchildren.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "visionforandfromchildren.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aoQZ9iqhFLTTOIw-eoUupAAAAwk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 158.23.184.117

🇫🇮 45.154.244.193

🇬🇧 35.203.211.30

🇮🇳 34.131.189.83

🇭🇰 223.197.178.95

🇭🇰 218.190.8.165

🇺🇸 34.63.201.32

🇧🇷 2400:cb00:488:1000:c8c5:61d0:e934:5414

🇺🇸 172.172.206.37

🇺🇸 170.106.65.93

🇰🇷 121.183.138.77

🇨🇳 27.192.54.76

🇻🇳 27.78.71.44

🇫🇷 5.44.160.10

🇬🇧 2a06:4880::1a

🇨🇳 223.100.224.75

🇧🇷 189.41.117.68

🇦🇷 186.56.11.2

🇳🇴 185.12.59.118

🇺🇸 91.230.168.30