JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.54.113.46

122.54.113.46 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 41%: ?

41%

ISP	IPG
Usage Type	Fixed Line ISP
ASN	AS9299
Hostname(s)	122.54.113.46.pldt.net
Domain Name	pldthome.com
Country	🇵🇭 Philippines
City	Hagonoy, Central Luzon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 122.54.113.46

Whois 122.54.113.46

IP Abuse Reports for 122.54.113.46:

This IP address has been reported a total of 8 times from 6 distinct sources. 122.54.113.46 was first reported on July 2nd 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-07-09 06:50:53 (2 days ago)	[ThuJul0908:50:46.5909012026][security2:error][pid3729762:tid3730073][client122.54.113.46:0]ModSecur ... show more [ThuJul0908:50:46.5909012026][security2:error][pid3729762:tid3730073][client122.54.113.46:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"studiokellybenessere.ch\"][uri\"/xmlrpc.php\"][unique_id\"ak9ExrV7G9HxJPZfY8ZWVAAAAMs\"] show less	Hacking Web App Attack
🇮🇩 zam	2026-07-09 06:23:34 (2 days ago)	122.54.113.46 - - [09/Jul/2026:06:23:29 +0000] "POST /xmlrpc.php HTTP/1.1" 302 271	Web App Attack
🇩🇪 4server	2026-07-09 06:15:26 (2 days ago)	[ThuJul0908:15:24.8594522026][security2:error][pid3736324:tid3736336][client122.54.113.46:0]ModSecur ... show more [ThuJul0908:15:24.8594522026][security2:error][pid3736324:tid3736336][client122.54.113.46:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"simireinigung.ch\"][uri\"/xmlrpc.php\"][unique_id\"ak88fFFwI8w2AafXgedv0gAAAAA\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-07-09 03:05:06 (2 days ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (15/60 min)'; Requests=15	Port Scan
🇺🇸 TPI-Abuse	2026-07-09 02:13:38 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 122.54.113.46 (122.54.113.46.pldt.net): 1 in th ... show more (mod_security) mod_security (id:225170) triggered by 122.54.113.46 (122.54.113.46.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 22:13:29.983426 2026] [security2:error] [pid 6020:tid 6087] [client 122.54.113.46:7399] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|metropaint.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "metropaint.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ak8DybAXMgvMvExtzGXoxgAAAcU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-07-04 07:23:48 (1 week ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 07:06:13 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 122.54.113.46 (122.54.113.46.pldt.net): 1 in th ... show more (mod_security) mod_security (id:225170) triggered by 122.54.113.46 (122.54.113.46.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 03:06:05.039329 2026] [security2:error] [pid 330:tid 341] [client 122.54.113.46:60396] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|emehache.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "emehache.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akiw3b5b6eCYY5Qhsgk9LgAAAUk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-07-02 02:45:05 (1 week ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.191

🇸🇬 162.158.170.236

🇩🇪 43.228.157.121

🇲🇿 197.158.42.96

🇨🇿 185.167.184.44

🇳🇱 176.65.132.162

🇧🇷 102.211.152.138

🇸🇪 89.37.63.46

🇮🇳 61.3.112.235

🇨🇳 14.103.118.194

🇨🇴 185.56.111.28

🇳🇱 162.159.113.166

🇸🇬 161.118.253.55

🇺🇸 81.30.98.193

🇨🇳 49.64.85.138

🇩🇪 192.250.229.40

🇨🇳 175.25.56.173

🇷🇴 92.118.39.71

🇺🇸 66.132.186.233

🇧🇷 45.178.227.0