AbuseIPDB » 150.129.168.91
150.129.168.91
This IP was reported 9 times. Confidence of
Abuse
is 48% : ?
ISP
Gtpl Broadband Pvt. Ltd.
Usage Type
Fixed Line ISP
ASN
AS45916
Domain Name
gtpl.net
Country
🇮🇳
India
City
Pune, Maharashtra
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 150.129.168.91 :
This IP address has been reported a total of
9
times from
8 distinct
sources.
150.129.168.91 was first reported on
November 7th 2024 , and the most recent report was
4 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇳🇿
Tripwire
2026-07-09 08:44:24
(4 hours ago)
Probing for Wordpress - /xmlrpc.php
Brute-Force
Web App Attack
🇳🇱
wlt-blocker
2026-07-09 07:05:56
(6 hours ago)
Unauthorized access to webpage admin
Web App Attack
🇩🇪
joharikop
2026-07-09 03:36:40
(9 hours ago)
Nginx: WordPress/CMS probe (wp-admin, wp-login, xmlrpc). Automated ban via fail2ban nginx-cms-probes ...
show more
Nginx: WordPress/CMS probe (wp-admin, wp-login, xmlrpc). Automated ban via fail2ban nginx-cms-probes jail.
show less
Web App Attack
🇫🇷
dynamix
2026-07-08 08:46:00
(1 day ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
WeekendWeb
2026-07-08 08:13:06
(1 day ago)
Wordpress Vunerability attack
Web App Attack
🇫🇷
masterguru
2026-07-08 06:40:09
(1 day ago)
xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)
Hacking
🇺🇸
TPI-Abuse
2026-07-08 04:39:28
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 150.129.168.91 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 150.129.168.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 00:39:24.312094 2026] [security2:error] [pid 16436:tid 16436] [client 150.129.168.91:47009] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 150.129.168.91 (+1 hits since last alert)|riser-astrology.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "riser-astrology.com"] [uri "/xmlrpc.php"] [unique_id "ak3UfMrb4ev0keWvgWhzuAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-07 09:15:19
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 150.129.168.91 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 150.129.168.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 05:15:11.349078 2026] [security2:error] [pid 30800:tid 30800] [client 150.129.168.91:48343] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 150.129.168.91 (+1 hits since last alert)|fadcometal.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fadcometal.com"] [uri "/xmlrpc.php"] [unique_id "akzDn2PXUMiYy8GsOssZLAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-11-07 12:54:01
(1 year ago)
Ports: 25,465,587; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: