JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.52.66.168

122.52.66.168 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 88%: ?

88%

ISP	HOME_DSL
Usage Type	Fixed Line ISP
ASN	AS9299
Hostname(s)	122.52.66.168.static.pldt.net
Domain Name	pldthome.com
Country	🇵🇭 Philippines
City	Cabanatuan City, Central Luzon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 122.52.66.168

Whois 122.52.66.168

IP Abuse Reports for 122.52.66.168:

This IP address has been reported a total of 21 times from 15 distinct sources. 122.52.66.168 was first reported on August 19th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 WeekendWeb	2026-08-21 08:59:43 (4 hours ago)	Wordpress Vunerability attack	Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 08:53:46 (4 hours ago)	(mod_security) mod_security (id:240335) triggered by 122.52.66.168 (122.52.66.168.static.pldt.net): ... show more (mod_security) mod_security (id:240335) triggered by 122.52.66.168 (122.52.66.168.static.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 04:53:41.475488 2026] [security2:error] [pid 4540:tid 4694] [client 122.52.66.168:50929] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.52.66.168 (+1 hits since last alert)\|fastestcopyright.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fastestcopyright.com"] [uri "/xmlrpc.php"] [unique_id "aogSFXiJoIGNPCOJ6UHhEwAAAVY"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-08-21 08:51:27 (4 hours ago)	Blocked by CSF 13 firewall - Rule: XMLRPC PH/Philippines/122.52.66.168.static.pldt.net	Web App Attack
🇺🇸 IndigoRidge	2026-08-21 07:55:46 (5 hours ago)	122.52.66.168 - - [21/Aug/2026:03:54:26 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5765 "-" "WordPress.c ... show more 122.52.66.168 - - [21/Aug/2026:03:54:26 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5765 "-" "WordPress.com; https://wordpress.com" 122.52.66.168 - - [21/Aug/2026:03:54:49 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5765 "-" "WordPress.com; https://wordpress.com" 122.52.66.168 - - [21/Aug/2026:03:55:01 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5765 "-" "WordPress.com; https://wordpress.com" 122.52.66.168 - - [21/Aug/2026:03:55:34 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5765 "-" "WordPress.com; https://wordpress.com" 122.52.66.168 - - [21/Aug/2026:03:55:45 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5765 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇫🇷 Kenshin869	2026-08-21 07:09:58 (6 hours ago)	Wordpress unauthorized access attempt	Brute-Force
🇺🇸 TPI-Abuse	2026-08-21 06:41:58 (6 hours ago)	(mod_security) mod_security (id:240335) triggered by 122.52.66.168 (122.52.66.168.static.pldt.net): ... show more (mod_security) mod_security (id:240335) triggered by 122.52.66.168 (122.52.66.168.static.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 02:41:53.302259 2026] [security2:error] [pid 8577:tid 8577] [client 122.52.66.168:63532] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.52.66.168 (+1 hits since last alert)\|67ronin.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "67ronin.com"] [uri "/xmlrpc.php"] [unique_id "aofzMWskRFwxqmC_v_eTVQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-21 05:40:45 (7 hours ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-08-21 05:10:36 (8 hours ago)	(mod_security) mod_security (id:240335) triggered by 122.52.66.168 (122.52.66.168.static.pldt.net): ... show more (mod_security) mod_security (id:240335) triggered by 122.52.66.168 (122.52.66.168.static.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 01:10:28.472907 2026] [security2:error] [pid 19256:tid 19256] [client 122.52.66.168:56637] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.52.66.168 (+1 hits since last alert)\|stop902.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "stop902.org"] [uri "/xmlrpc.php"] [unique_id "aofdxKDuFaXIiQ_rQ9J_GQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-21 04:27:43 (8 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇫🇷 applemooz	2026-08-21 01:25:52 (11 hours ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇧🇾 lns.bz	2026-08-20 04:22:56 (1 day ago)	Banned for trying to access xmlrpc [BY]	Web App Attack
🇺🇸 TPI-Abuse	2026-08-20 03:04:34 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 122.52.66.168 (122.52.66.168.static.pldt.net): ... show more (mod_security) mod_security (id:240335) triggered by 122.52.66.168 (122.52.66.168.static.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 23:04:28.587942 2026] [security2:error] [pid 32074:tid 32074] [client 122.52.66.168:53528] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.52.66.168 (+1 hits since last alert)\|sutherlandyogastudio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "sutherlandyogastudio.com"] [uri "/xmlrpc.php"] [unique_id "aoZuvIc5Gdx-dpWlAxFOtAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-20 01:04:07 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 122.52.66.168 (122.52.66.168.static.pldt.net): ... show more (mod_security) mod_security (id:240335) triggered by 122.52.66.168 (122.52.66.168.static.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 21:04:00.880236 2026] [security2:error] [pid 15515:tid 15515] [client 122.52.66.168:50868] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.52.66.168 (+1 hits since last alert)\|winnindustries.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "winnindustries.com"] [uri "/xmlrpc.php"] [unique_id "aoZSgJW5P1DIr-VPFbXSWwAAADg"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇭 thaizone.com	2026-08-19 05:14:03 (2 days ago)	Brute-forcing login against websites (D1-1) #1	Web App Attack Hacking
Anonymous	2026-08-19 03:57:04 (2 days ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.137

🇺🇸 47.251.185.192

🇺🇸 35.196.173.193

🇺🇸 216.73.217.146

🇬🇧 195.96.139.226

🇩🇪 162.158.94.157

🇸🇬 157.230.252.145

🇺🇸 146.190.72.246

🇨🇳 120.48.76.190

🇨🇳 118.196.26.61

🇨🇳 115.191.33.55

🇫🇷 85.217.140.35

🇫🇷 82.67.175.124

🇳🇱 45.153.34.186

🇰🇷 211.251.245.88

🇮🇳 103.84.202.138

🇱🇹 62.60.130.242

🇳🇱 45.153.34.144

🇺🇸 20.51.153.15

🇩🇪 141.95.19.37