JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.64.16.104

139.64.16.104 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 67%: ?

67%

ISP	STC, Dammam Residential Fixed-Broadband
Usage Type	Fixed Line ISP
ASN	AS25019
Domain Name	stc.com.sa
Country	🇸🇦 Saudi Arabia
City	Dammam, Eastern Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.64.16.104

Whois 139.64.16.104

IP Abuse Reports for 139.64.16.104:

This IP address has been reported a total of 15 times from 11 distinct sources. 139.64.16.104 was first reported on October 12th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 electronico	2026-10-16 13:34:46 (5 hours ago)	139.64.16.104 - - [17/Oct/2026:00:34:45 +1100] "POST /xmlrpc.php HTTP/1.1" 301 5773 "-" "Mozilla/5.0 ... show more 139.64.16.104 - - [17/Oct/2026:00:34:45 +1100] "POST /xmlrpc.php HTTP/1.1" 301 5773 "-" "Mozilla/5.0 (Windows NT 10.0; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/83.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇫🇮 abdubhai	2026-10-16 11:21:12 (7 hours ago)	139.64.16.104 - - [16/Oct/2026:1 ...	Brute-Force
🇩🇪 MusicLibrary	2026-10-16 05:55:05 (13 hours ago)	Attempted access to non existent wordpress urls	Bad Web Bot
Anonymous	2026-10-16 00:18:02 (18 hours ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇩🇪 rh24	2026-10-15 22:29:11 (20 hours ago)	(wordpress) Failed wordpress login from 139.64.16.104 (SA/Saudi Arabia/-): (CF_ENABLE)	Brute-Force
Anonymous	2026-10-15 19:23:59 (23 hours ago)	[redacted] 139.64.16.104 - - [15/Oct/2026:21:23:14 +0200] "POST /xmlrpc.php HTTP/1.1" 403 1660 "-" " ... show more [redacted] 139.64.16.104 - - [15/Oct/2026:21:23:14 +0200] "POST /xmlrpc.php HTTP/1.1" 403 1660 "-" "WordPress.com; https://wordpress.com" [redacted] 139.64.16.104 - - [15/Oct/2026:21:23:25 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "WordPress.com; https://wordpress.com" [redacted] 139.64.16.104 - - [15/Oct/2026:21:23:35 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "Jetpack/13.0; WordPress/6.1; http://site30715089.com" [redacted] 139.64.16.104 - - [15/Oct/2026:21:23:46 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "Jetpack/12.1; WordPress/6.1; http://site35739744.com" [redacted] 139.64.16.104 - - [15/Oct/2026:21:23:57 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
🇦🇺 screwlooseit.com.au	2026-10-15 07:59:29 (1 day ago)	Blocked by CSF 13 firewall - Rule: XMLRPC SA/Saudi Arabia/-	Web App Attack
🇺🇸 WellSpring	2026-10-15 06:53:05 (1 day ago)	xmlrpc exploit on wellspr.ing/xmlrpc.php — WellSpr.ing/NetSentinel civic-AI security layer	Brute-Force Web App Attack
Anonymous	2026-10-14 22:15:46 (1 day ago)	[redacted] 139.64.16.104 - - [15/Oct/2026:00:15:03 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ... show more [redacted] 139.64.16.104 - - [15/Oct/2026:00:15:03 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.4; http://site74509474.com" [redacted] 139.64.16.104 - - [15/Oct/2026:00:15:13 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)" [redacted] 139.64.16.104 - - [15/Oct/2026:00:15:24 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.4; http://site89273196.com" [redacted] 139.64.16.104 - - [15/Oct/2026:00:15:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 139.64.16.104 - - [15/Oct/2026:00:15:46 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" ... show less	Hacking Web App Attack
Anonymous	2026-10-14 08:44:48 (2 days ago)	[redacted] 139.64.16.104 - - [14/Oct/2026:10:44:04 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "J ... show more [redacted] 139.64.16.104 - - [14/Oct/2026:10:44:04 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack/12.1; WordPress/6.3; http://site35029610.com" [redacted] 139.64.16.104 - - [14/Oct/2026:10:44:15 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com" [redacted] 139.64.16.104 - - [14/Oct/2026:10:44:25 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com" [redacted] 139.64.16.104 - - [14/Oct/2026:10:44:36 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com" [redacted] 139.64.16.104 - - [14/Oct/2026:10:44:47 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)" ... show less	Hacking Web App Attack
🇩🇪 grassau.com	2026-10-13 23:10:08 (2 days ago)	(wordpress) Failed wordpress login from 139.64.16.104 (SA/Saudi Arabia/Eastern Province/Dammam/-)	Brute-Force
🇩🇪 rh24	2026-10-13 16:07:18 (3 days ago)	(wordpress) Failed wordpress login from 139.64.16.104 (SA/Saudi Arabia/-): (CF_ENABLE)	Brute-Force
🇫🇮 YF	2026-10-13 11:00:44 (3 days ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇦🇺 screwlooseit.com.au	2026-10-12 17:53:25 (4 days ago)	Blocked by CSF 13 firewall - Rule: XMLRPC SA/Saudi Arabia/-	Web App Attack
🇳🇱 Alt255	2026-10-12 05:08:56 (4 days ago)	[ti-05al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpr ... show more [ti-05al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 139.64.16.104 - - [12/Oct/2026:07:05:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4632 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 139.64.16.104 - - [12/Oct/2026:07:08:03 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4631 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/72.0.0.0 Safari/537.36" 139.64.16.104 - - [12/Oct/2026:07:08:27 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4630 "-" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/96.0.0.0 Safari/537.36" 139.64.16.104 - - [12/Oct/2026:07:08:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4631 "-" "Mozilla/5.0 (Windows ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 163.172.66.206

🇺🇸 99.92.204.98

🇫🇷 82.233.109.153

🇩🇪 69.5.169.49

🇺🇸 32.191.134.117

🇺🇸 23.234.118.219

🇭🇰 154.196.110.92

🇰🇷 121.184.128.107

🇨🇳 117.50.195.206

🇱🇹 89.249.85.117

🇬🇧 84.69.125.51

🇳🇱 77.239.124.35

🇩🇪 51.195.40.26

🇳🇱 45.148.10.157

🇹🇷 31.145.131.202

🇺🇸 23.178.112.105

🇺🇸 162.216.149.58

🇳🇱 138.226.239.11

🇨🇳 122.114.255.230

🇹🇼 118.233.2.41