This IP address has been reported a total of
11
times from
9 distinct
sources.
167.99.168.49 was first reported on
October 4th 2026 , and the most recent report was
3 days ago .
In the last 60 days, the top reporter locations were:
Germany
with 3
reports;
Switzerland
with 2
reports;
Australia
with 1
report.
The most common categories in these recent reports were:
Web App Attack
6
times;
Brute-Force
6
times;
Hacking
2
times;
SSH
2
times;
Web Spam
1
time;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ฒ๐ฝ
octageeks.com
2026-10-05 04:25:06
(3 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
๐จ๐ญ
SOC [GOLINE SA]
2026-10-04 14:04:03
(3 days ago)
FortiGate detected brute force login attempt from IPv4 address 167.99.168.49
Brute-Force
SSH
๐จ๐ญ
SOC [GOLINE SA]
2026-10-04 13:33:57
(3 days ago)
FortiGate IPS: WordPress.REST.API.batch-route.SQL.Injection (severity critical)
Hacking
๐ฉ๐ช
yitzhaq
2026-10-04 12:22:41
(4 days ago)
167.99.168.49 - - [04/Oct/2026:13:20:36 +0200] "POST /wp-login.php HTTP/1.1" 200 14698 "-" "Mozilla/ ...
show more
167.99.168.49 - - [04/Oct/2026:13:20:36 +0200] "POST /wp-login.php HTTP/1.1" 200 14698 "-" "Mozilla/5.0"
167.99.168.49 - - [04/Oct/2026:13:23:50 +0200] "POST /wp-login.php HTTP/1.1" 200 14699 "-" "Mozilla/5.0"
167.99.168.49 - - [04/Oct/2026:13:26:53 +0200] "POST /wp-login.php HTTP/1.1" 200 10981 "-" "Mozilla/5.0"
167.99.168.49 - - [04/Oct/2026:13:30:10 +0200] "POST /wp-login.php HTTP/1.1" 200 10981 "-" "Mozilla/5.0"
167.99.168.49 - - [04/Oct/2026:13:33:49 +0200] "POST /wp-login.php HTTP/1.1" 200 14699 "-" "Mozilla/5.0"
167.99.168.49 - - [04/Oct/2026:14:05:18 +0200] "POST /wp-login.php HTTP/1.1" 200 14699 "-" "Mozilla/5.0"
167.99.168.49 - - [04/Oct/2026:14:09:37 +0200] "POST /wp-login.php HTTP/1.1" 200 14699 "-" "Mozilla/5.0"
167.99.168.49 - - [04/Oct/2026:14:14:01 +0200] "POST /wp-login.php HTTP/1.1" 200 14698 "-" "Mozilla/5.0"
167.99.168.49 - - [04/Oct/2026:14:18:25 +0200] "POST /wp-login.php HTTP/1.1" 200 14699 "-" "Mozilla/5.0"
167.99.168.49 - - [04/Oct/2026:14:22:39 +0200] "POST /w
show less
Web App Attack
Brute-Force
๐ฉ๐ช
Click-Networks
2026-10-04 12:06:06
(4 days ago)
Web Spam
Brute-Force
Exploited Host
๐ฉ๐ช
yitzhaq
2026-10-04 11:33:52
(4 days ago)
167.99.168.49 - - [04/Oct/2026:13:20:36 +0200] "POST /wp-login.php HTTP/1.1" 200 14698 "-" "Mozilla/ ...
show more
167.99.168.49 - - [04/Oct/2026:13:20:36 +0200] "POST /wp-login.php HTTP/1.1" 200 14698 "-" "Mozilla/5.0"
167.99.168.49 - - [04/Oct/2026:13:23:50 +0200] "POST /wp-login.php HTTP/1.1" 200 14699 "-" "Mozilla/5.0"
167.99.168.49 - - [04/Oct/2026:13:26:53 +0200] "POST /wp-login.php HTTP/1.1" 200 10981 "-" "Mozilla/5.0"
167.99.168.49 - - [04/Oct/2026:13:30:10 +0200] "POST /wp-login.php HTTP/1.1" 200 10981 "-" "Mozilla/5.0"
167.99.168.49 - - [04/Oct/2026:13:33:49 +0200] "POST /wp-login.php HTTP/1.1" 200 14699 "-" "Mozilla/5.0"
167.99.168.49 - - [04/Oct/2026:13:01:17 +0200] "GET /wp-login.php HTTP/1.1" 301 593 "-" "Mozilla/5.0"
167.99.168.49 - - [04/Oct/2026:13:01:17 +0200] "GET /wp-login.php HTTP/1.1" 200 8258 "-" "Mozilla/5.0"
167.99.168.49 - - [04/Oct/2026:13:01:18 +0200] "GET /?author=1 HTTP/1.1" 301 617 "-" "Mozilla/5.0"
167.99.168.49 - - [04/Oct/2026:13:01:18 +0200] "GET /?feed=rss2 HTTP/1.1" 301 720 "-" "Mozilla/5.0"
167.99.168.49 - - [04/Oct/2026:13:01:18 +0200] "GET /feed/ HTTP/1.1" 20
show less
Web App Attack
Brute-Force
๐ฎ๐น
VHosting
2026-10-04 11:30:03
(4 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ซ๐ท
masterguru
2026-10-04 11:27:21
(4 days ago)
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-195)
Hacking
๐จ๐ฆ
zXero
2026-10-04 11:15:10
(4 days ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
๐บ๐ธ
deskpass.com
2026-10-04 11:08:20
(4 days ago)
GET /wp-login.php
Web App Attack
๐ฆ๐บ
paulshipley.com.au
2026-10-04 10:50:37
(4 days ago)
talentaymerch.com.au:443 167.99.168.49 - - [04/Oct/2026:21:50:34 +1100] "GET /?author=1 HTTP/1.1" 40 ...
show more
talentaymerch.com.au:443 167.99.168.49 - - [04/Oct/2026:21:50:34 +1100] "GET /?author=1 HTTP/1.1" 404 281612 "-" "Mozilla/5.0"
...
show less
Web App Attack
Showing 1 to
11
of 11 reports