JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.49.214.220

161.49.214.220 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 45%: ?

45%

ISP	CONVERGE INFORMATION AND COMMUNICATIONS TECHNOLOGY SOLUTIONS, INC
Usage Type	Fixed Line ISP
ASN	AS17639
Hostname(s)	161.49.214.220.convergeict.com
Domain Name	convergeict.com
Country	🇵🇭 Philippines
City	San Jose del Monte, Central Luzon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.49.214.220

Whois 161.49.214.220

IP Abuse Reports for 161.49.214.220:

This IP address has been reported a total of 15 times from 12 distinct sources. 161.49.214.220 was first reported on September 7th 2025, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 dbmwebdesign	2026-08-24 20:25:19 (22 hours ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 17:29:36 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 161.49.214.220 (161.49.214.220.convergeict.com) ... show more (mod_security) mod_security (id:240335) triggered by 161.49.214.220 (161.49.214.220.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 13:29:31.213315 2026] [security2:error] [pid 20982:tid 20982] [client 161.49.214.220:53158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 161.49.214.220 (+1 hits since last alert)\|crittergetterpestcontrol.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "crittergetterpestcontrol.com"] [uri "/xmlrpc.php"] [unique_id "aox_e3_hmQR2ftT7Z7wqhQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 BlueWire Hosting	2026-08-24 17:27:51 (1 day ago)	Wordpress brute force attempt	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 14:36:34 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 161.49.214.220 (161.49.214.220.convergeict.com) ... show more (mod_security) mod_security (id:240335) triggered by 161.49.214.220 (161.49.214.220.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 10:36:30.209003 2026] [security2:error] [pid 8978:tid 8978] [client 161.49.214.220:51496] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 161.49.214.220 (+1 hits since last alert)\|auraffinity.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "auraffinity.com"] [uri "/xmlrpc.php"] [unique_id "aoxW7hZzteP8xCxeMwkJgAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 10:21:46 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 161.49.214.220 (161.49.214.220.convergeict.com) ... show more (mod_security) mod_security (id:240335) triggered by 161.49.214.220 (161.49.214.220.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 06:21:41.355524 2026] [security2:error] [pid 2877:tid 2877] [client 161.49.214.220:21371] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 161.49.214.220 (+1 hits since last alert)\|cynosurephotography.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "cynosurephotography.com"] [uri "/xmlrpc.php"] [unique_id "aowbNVAg7DdJNnCAzm4AtAAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 oralunal	2026-08-23 08:37:48 (2 days ago)	IP banned by Fail2Ban in jail oral-suss access.log mvfnds ...	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-23 04:17:36 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 161.49.214.220 (161.49.214.220.convergeict.com) ... show more (mod_security) mod_security (id:240335) triggered by 161.49.214.220 (161.49.214.220.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 00:17:31.990113 2026] [security2:error] [pid 15644:tid 15644] [client 161.49.214.220:52636] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 161.49.214.220 (+1 hits since last alert)\|btsalesrep.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "btsalesrep.com"] [uri "/xmlrpc.php"] [unique_id "aop0W-5XmE_tp4HztyTjawAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-08-20 15:20:22 (5 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-20 15:07:26 (5 days ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-08-01 03:24:13 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 SMARTNET	2026-05-27 06:03:53 (2 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇺🇸 MPL	2026-01-17 10:57:08 (7 months ago)	tcp/23	Port Scan
🇮🇹 VHosting	2025-12-23 14:25:06 (8 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2025-11-28 10:40:02 (8 months ago)	wordpress-trap	Web App Attack
🇳🇱 exxos	2025-09-07 16:03:01 (11 months ago)	Attacks with Bad user agents	Hacking

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.228

🇹🇳 165.50.45.218

🇮🇳 117.254.119.147

🇭🇰 69.165.75.145

🇳🇱 45.148.10.141

🇺🇸 23.131.184.104

🇲🇦 2a09:bac5:48b9:254b::3b7:14

🇲🇦 196.77.236.207

🇫🇮 147.185.133.176

🇹🇭 125.25.183.157

🇮🇹 95.247.20.180

🇧🇬 79.124.56.222

🇺🇸 66.228.54.111

🇺🇸 66.132.195.100

🇳🇱 192.253.248.226

🇲🇽 192.178.95.89

🇨🇳 183.197.225.188

🇩🇪 172.105.76.148

🇻🇪 38.41.40.110

🇬🇧 195.96.139.213