JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.3.150.61

122.3.150.61 was found in our database!

This IP was reported 187 times. Confidence of Abuse is 93%: ?

93%

ISP	IPG
Usage Type	Fixed Line ISP
ASN	AS9299
Hostname(s)	122.3.150.61.pldt.net
Domain Name	pldthome.com
Country	🇵🇭 Philippines
City	Lilio, Calabarzon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 122.3.150.61

Whois 122.3.150.61

IP Abuse Reports for 122.3.150.61:

This IP address has been reported a total of 187 times from 100 distinct sources. 122.3.150.61 was first reported on February 20th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-23 09:50:38 (2 hours ago)	(mod_security) mod_security (id:225170) triggered by 122.3.150.61 (122.3.150.61.pldt.net): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 122.3.150.61 (122.3.150.61.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 05:50:27.816731 2026] [security2:error] [pid 2093644:tid 2093687] [client 122.3.150.61:54774] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|atlasrecordssearch.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "atlasrecordssearch.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amHj44WXk39PYY9khDb-JQAAAQw"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 ciccio diddo	2026-07-23 05:22:36 (6 hours ago)	CMS/WP Exploit xmlrpc port:Tcp/80,443	Brute-Force Web App Attack
🇩🇪 4server	2026-07-18 17:28:16 (4 days ago)	[SatJul1819:28:10.0717352026][security2:error][pid3340053:tid3340170][client122.3.150.61:0]ModSecuri ... show more [SatJul1819:28:10.0717352026][security2:error][pid3340053:tid3340170][client122.3.150.61:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"martinairsagl.ch\"][uri\"/xmlrpc.php\"][unique_id\"alu3quqss2gckr1X_bkEywAAAM4\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-07-17 21:55:51 (5 days ago)	(wordpress) Failed wordpress login from 122.3.150.61 (PH/Philippines/122.3.150.61.pldt.net)	Brute-Force
🇫🇷 dynamix	2026-07-17 17:12:24 (5 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇵🇱 wielorzeczownik	2026-07-17 01:26:28 (6 days ago)	122.3.150.61 - - [17/Jul/2026:03:22:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 452 "-" "Mozilla/5.0 ( ... show more 122.3.150.61 - - [17/Jul/2026:03:22:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 452 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/11.0.0.0 Safari/537.36" 122.3.150.61 - - [17/Jul/2026:03:24:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 452 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/100.0.0.0 Safari/537.36" 122.3.150.61 - - [17/Jul/2026:03:25:21 +0200] "POST /xmlrpc.php HTTP/1.1" 200 452 "-" "Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 122.3.150.61 - - [17/Jul/2026:03:25:52 +0200] "POST /xmlrpc.php HTTP/1.1" 200 452 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/82.0.0.0 Safari/537.36" 122.3.150.61 - - [17/Jul/2026:03:26:27 +0200] "POST /xmlrpc.php HTTP/1.1" 200 452 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/84.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
Anonymous	2026-07-15 06:36:12 (1 week ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-07-14 22:21:19 (1 week ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-07-13 13:20:11 (1 week ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-13 12:55:51 (1 week ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-12 11:04:36 (1 week ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-07-10 15:58:05 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 122.3.150.61 (122.3.150.61.pldt.net): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 122.3.150.61 (122.3.150.61.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 11:57:57.389172 2026] [security2:error] [pid 8870:tid 8870] [client 122.3.150.61:63726] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|splashstation.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "splashstation.org"] [uri "/wp-json/wp/v2/users"] [unique_id "alEWhWET_PJl-AzyoiCSLwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Hazzard	2026-07-10 10:29:06 (1 week ago)	(wordpress) Failed wordpress login from 122.3.150.61 (PH/Philippines/Metro Manila/Taguig/122.3.150.6 ... show more (wordpress) Failed wordpress login from 122.3.150.61 (PH/Philippines/Metro Manila/Taguig/122.3.150.61.pldt.net/[redacted]): (CF_ENABLE) show less	Brute-Force
Anonymous	2026-07-08 16:16:13 (2 weeks ago)	Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (E ... show more Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Aggressive search filter manipulation / web scraper probe on port 443 \| URI: Excessive filters used: /catalogsearch/result/?cat=39&mul_connector_video=201&q=lifesize+icon+600&rating=6 \| UA: Opera/9.65.(Windows 98; Win 9x 4.90; ha-NG) Presto/2.9.169 Version/10.00 \| (Magento Site) show less	Hacking Bad Web Bot
Anonymous	2026-07-07 14:42:58 (2 weeks ago)	[osotir.org] httpd-xmlrpc-post: sites=www.logosparakliseos.gr; logs=/var/log/httpd/domains/logospara ... show more [osotir.org] httpd-xmlrpc-post: sites=www.logosparakliseos.gr; logs=/var/log/httpd/domains/logosparakliseos.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack

Showing 1 to 15 of 187 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 172.104.129.235

🇳🇱 91.92.47.96

🇫🇷 85.217.140.26

🇺🇸 64.62.156.139

🇮🇳 223.181.16.119

🇺🇸 172.104.209.44

🇸🇬 172.104.164.41

🇯🇵 172.104.88.38

🇺🇸 104.234.53.34

🇫🇷 85.217.140.50

🇺🇸 52.242.193.144

🇳🇱 45.148.10.157

🇳🇱 45.148.10.151

🇺🇸 43.130.28.10

🇺🇸 23.92.27.206

🇺🇸 20.228.193.165

🇬🇧 5.252.83.238

🇬🇧 217.146.80.103

🇧🇪 198.235.24.237

🇮🇩 172.232.236.34