149.54.51.222
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Government Communications Network
- Usage Type
- Fixed Line ISP
- ASN
- AS55330
- Domain Name
- afghantelecom.af
- Country
- 🇦🇫 Afghanistan
- City
- Kandahar, Kandahar
Abuse Reports
Total reports
13 from
11 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 etu brutus |
149.54.51.222 Blocked by [Attack Vector List]
...
|
Hacking Brute-Force Exploited Host | |
| 🇬🇧 consul.to |
Web attack/malicious scanning detected
|
Web App Attack | |
| Anonymous |
WordPress login / xmlrpc probing across multiple sites
|
Web App Attack | |
| 🇭🇺 bcsaba |
Repeated request on blocked xmlrpc.php.
149.54.51.222 - - [17/Oct/2026:08:59:10 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/96.0.0.0 Safari/537.36"
|
Web App Attack | |
| Anonymous |
2026-10-15T10:17:12.817587+00:00 instance-20260804-1025 wordpress(expensas.co)[789734]: XML-RPC authentication attempt for unknown user admin from 149.54.51.222
...
|
Web App Attack | |
| Anonymous |
2026-10-15T08:52:08.264347+00:00 instance-20260804-1025 wordpress(expensas.co)[777214]: XML-RPC authentication attempt for unknown user 75177 from 149.54.51.222
...
|
Web App Attack | |
| 🇫🇷 masterguru |
(xmlrpc) Apache: Failed xmlrpc access from 149.54.51.222 (AF/Afghanistan/-): 10 in the last 3600 secs (0-201)
|
Hacking | |
| 🇩🇪 wlt-blocker |
Unauthorized access to webpage admin
|
Web App Attack | |
| 🇺🇸 OceanTreasure |
tcp/443; WordPress XML-RPC brute force attempt: "POST /xmlrpc.php" @ 2026-10-02T08:56:50Z [proxy]
|
Web App Attack Brute-Force | |
| 🇬🇧 consul.to |
Web attack/malicious scanning detected
|
Web App Attack | |
| 🇳🇴 jad-abuse |
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. Observed by 1 sensor(s); 1 hits.
|
Brute-Force Web App Attack | |
| 🇫🇷 tecnicorioja |
POST /xmlrpc.php [30/Sep/2026:08:30:28
|
Brute-Force Web App Attack | |
| Anonymous |
|
Hacking Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown