JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

122.2.107.74

Neutral Activity

Abuse confidence score ?

0% Low Risk

30 reports

21 reporters · latest 5 months ago

ISP	HOME_DSL
Usage Type	Fixed Line ISP
ASN	AS9299
Hostname(s)	122.2.107.74.pldt.net
Domain Name	pldthome.com
Country	🇵🇭 Philippines
City	Manila, National Capital Region

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

122.2.107.74 has been reported 30 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 122.2.107.74

This IP address has been reported a total of 30 times from 21 distinct sources. 122.2.107.74 was first reported on February 24th 2026, and the most recent report was 5 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 betternews.app	2026-04-03 04:10:04 (5 months ago)	"a web request contained keyword "xmlrpc.php"; Suspicious URL: /xmlrpc.php"	Web Spam Blog Spam Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-04-01 08:42:44 (5 months ago)	Blocking for trying to access an exploit file: /xmlrpc.php	Hacking
🇺🇸 myagent.site	2026-03-31 06:14:05 (5 months ago)	Blocking for trying to access an exploit file: /xmlrpc.php	Hacking
🇺🇸 TPI-Abuse	2026-03-28 13:20:48 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 122.2.107.74 (122.2.107.74.pldt.net): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 122.2.107.74 (122.2.107.74.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 28 09:20:44.098325 2026] [security2:error] [pid 6006:tid 6006] [client 122.2.107.74:6678] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|rachelfia.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rachelfia.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acfVrMN7CBTvwkwc984bggAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 maxxsense	2026-03-25 11:32:43 (6 months ago)	(wordpress) Failed wordpress login from 122.2.107.74 (PH/Philippines/122.2.107.74.pldt.net)	Brute-Force
🇺🇸 TPI-Abuse	2026-03-25 08:13:39 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 122.2.107.74 (122.2.107.74.pldt.net): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 122.2.107.74 (122.2.107.74.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 04:13:35.391252 2026] [security2:error] [pid 22765:tid 22807] [client 122.2.107.74:5791] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|orthopedica.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "orthopedica.org"] [uri "/wp-json/wp/v2/users"] [unique_id "acOZLy_upjkQf_vfR_1LjQAAAI0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mawan	2026-03-23 13:12:38 (6 months ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇺🇸 TPI-Abuse	2026-03-23 11:34:50 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 122.2.107.74 (122.2.107.74.pldt.net): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 122.2.107.74 (122.2.107.74.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 23 07:34:21.161878 2026] [security2:error] [pid 26334:tid 26364] [client 122.2.107.74:6197] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|pilargarciamanzanares.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pilargarciamanzanares.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acElPdrveE20iXVXHy42MgAAAMs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-22 14:01:30 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 122.2.107.74 (122.2.107.74.pldt.net): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 122.2.107.74 (122.2.107.74.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 10:01:23.269946 2026] [security2:error] [pid 7209:tid 7209] [client 122.2.107.74:5730] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|greenmountainfeeds.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "greenmountainfeeds.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ab_2M5qq7ybU2pEIuoDMgAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 stinpriza	2026-03-22 12:45:19 (6 months ago)	Web App Attack	Web App Attack
🇳🇱 wlt-blocker	2026-03-22 08:41:36 (6 months ago)	Unauthorized access to webpage admin	Web App Attack
🇺🇸 Penny Packer	2026-03-22 05:32:40 (6 months ago)	Fail2Ban apache-tripwires	Web App Attack
🇳🇱 maxxsense	2026-03-20 19:01:26 (6 months ago)	(wordpress) Failed wordpress login from 122.2.107.74 (PH/Philippines/122.2.107.74.pldt.net)	Brute-Force
Anonymous	2026-03-20 14:44:01 (6 months ago)	[redacted] 122.2.107.74 - - [20/Mar/2026:15:42:40 +0100] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Mo ... show more [redacted] 122.2.107.74 - - [20/Mar/2026:15:42:40 +0100] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/80.0.0.0 Safari/537.36" [redacted] 122.2.107.74 - - [20/Mar/2026:15:42:45 +0100] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/96.0.0.0 Safari/537.36" [redacted] 122.2.107.74 - - [20/Mar/2026:15:43:54 +0100] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Mozilla/5.0 (Linux; Android 10; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/97.0.0.0 Safari/537.36" [redacted] 122.2.107.74 - - [20/Mar/2026:15:43:57 +0100] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/100.0.0.0 Safari/537.36" [redacted] 122.2.107.74 - - [20/Mar/2026:15:43:59 +0100] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Mozilla/5.0 (Windows NT 6.3; x64) AppleWe ... show less	Hacking Web App Attack
🇺🇸 ambor	2026-03-20 04:52:15 (6 months ago)	Honeypot access: WordPress XML-RPC attack attempt. Path: /xmlrpc.php	Brute-Force Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.88.98.107

🇮🇳 182.95.181.50

🇬🇧 165.154.129.43

🇺🇸 161.35.179.218

🇺🇸 136.85.148.172

🇨🇳 60.22.175.167

🇺🇸 57.141.6.71

🇮🇩 34.101.85.7

🇳🇱 178.128.243.135

🇸🇬 136.85.14.183

🇺🇸 40.124.186.168

🇬🇧 37.10.113.213

🇩🇪 34.89.155.81

🇻🇳 27.77.182.44

🇧🇷 153.67.33.180

🇨🇳 111.32.153.180

🇵🇱 104.165.20.192

🇳🇱 93.123.109.101

🇺🇸 84.233.212.79

🇺🇸 66.132.172.148