JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 168.205.149.161

168.205.149.161 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 74%: ?

74%

ISP	VIBE PROVEDOR DE INTERNET LTDA
Usage Type	Fixed Line ISP
ASN	AS264381
Hostname(s)	161.149.205.168.dynamic.vibefibra.com.br
Domain Name	redevibe.com.br
Country	🇧🇷 Brazil
City	Cianorte, Parana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 168.205.149.161

Whois 168.205.149.161

IP Abuse Reports for 168.205.149.161:

This IP address has been reported a total of 21 times from 14 distinct sources. 168.205.149.161 was first reported on June 17th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Kenshin869	2026-06-23 22:50:54 (4 days ago)	Wordpress unauthorized access attempt	Brute-Force
🇨🇦 Dunham Support	2026-06-23 18:05:04 (4 days ago)	(wordpress) Failed wordpress login from 168.205.149.161 (BR/Brazil/161.149.205.168.dynamic.vibefibra ... show more (wordpress) Failed wordpress login from 168.205.149.161 (BR/Brazil/161.149.205.168.dynamic.vibefibra.com.br) show less	Brute-Force
🇫🇷 masterguru	2026-06-23 14:28:01 (4 days ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇳🇱 Site.eu	2026-06-23 13:59:15 (4 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 cwytech	2026-06-23 11:54:42 (4 days ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-geofence-sus.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 05:25:21 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 168.205.149.161 (161.149.205.168.dynamic.vibefi ... show more (mod_security) mod_security (id:240335) triggered by 168.205.149.161 (161.149.205.168.dynamic.vibefibra.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 01:25:17.520603 2026] [security2:error] [pid 19797:tid 19797] [client 168.205.149.161:62903] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 168.205.149.161 (+1 hits since last alert)\|caymancline.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "caymancline.com"] [uri "/xmlrpc.php"] [unique_id "ajoYvSeox6r2gEkbpEalWwAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-23 03:46:51 (5 days ago)	Blocked by CSF 13 firewall - Rule: XMLRPC BR/Brazil/161.149.205.168.dynamic.vibefibra.com.br	Web App Attack
🇪🇸 masterguru	2026-06-23 00:54:15 (5 days ago)	(xmlrpc) Failed xmlrpc access from 168.205.149.161 (BR/Brazil/161.149.205.168.dynamic.vibefibra.com. ... show more (xmlrpc) Failed xmlrpc access from 168.205.149.161 (BR/Brazil/161.149.205.168.dynamic.vibefibra.com.br): 5 in the last 3600 secs (0-122) show less	Hacking
Anonymous	2026-06-23 00:27:13 (5 days ago)	(wordpress) Failed wordpress login from 168.205.149.161 (BR/Brazil/161.149.205.168.dynamic.vibefibra ... show more (wordpress) Failed wordpress login from 168.205.149.161 (BR/Brazil/161.149.205.168.dynamic.vibefibra.com.br) show less	Brute-Force
Anonymous	2026-06-22 23:17:21 (5 days ago)	[redacted] 168.205.149.161 - - [23/Jun/2026:01:16:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" ... show more [redacted] 168.205.149.161 - - [23/Jun/2026:01:16:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack/12.0; WordPress/6.2; http://site26035607.com" [redacted] 168.205.149.161 - - [23/Jun/2026:01:16:37 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)" [redacted] 168.205.149.161 - - [23/Jun/2026:01:16:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack/12.1; WordPress/6.3; http://site55035215.com" [redacted] 168.205.149.161 - - [23/Jun/2026:01:16:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 466 "-" "Jetpack by WordPress.com" [redacted] 168.205.149.161 - - [23/Jun/2026:01:16:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 466 "-" "Jetpack/12.0; WordPress/6.2; http://site71486619.com" [redacted] 168.205.149.161 - - [23/Jun/2026:01:16:58 +0200] "POST /xmlrpc.php HTTP/1.1" 200 466 "-" "WordPress.com; https://wordpress.com" [redacted] 168.205.149.161 - - [23/Jun/2026:01:17:00 +0200] "POS ... show less	Hacking Web App Attack
🇫🇷 dynamix	2026-06-22 18:29:51 (5 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 WeekendWeb	2026-06-22 15:10:44 (5 days ago)	Wordpress Vunerability attack	Web App Attack
🇪🇸 alferez	2026-06-22 00:51:20 (6 days ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-06-22 00:06:15 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 168.205.149.161 (161.149.205.168.dynamic.vibefi ... show more (mod_security) mod_security (id:240335) triggered by 168.205.149.161 (161.149.205.168.dynamic.vibefibra.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 20:06:11.071396 2026] [security2:error] [pid 28636:tid 28636] [client 168.205.149.161:63609] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 168.205.149.161 (+1 hits since last alert)\|pleaseaddbacon.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "pleaseaddbacon.com"] [uri "/xmlrpc.php"] [unique_id "ajh8c-1iPVErs5bFm9RZpwAAAGA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-21 23:32:49 (6 days ago)	[redacted] 168.205.149.161 - - [22/Jun/2026:01:32:05 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" ... show more [redacted] 168.205.149.161 - - [22/Jun/2026:01:32:05 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.1; http://site31771337.com" [redacted] 168.205.149.161 - - [22/Jun/2026:01:32:16 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 168.205.149.161 - - [22/Jun/2026:01:32:26 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 168.205.149.161 - - [22/Jun/2026:01:32:37 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 168.205.149.161 - - [22/Jun/2026:01:32:47 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" ... show less	Hacking Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 202.21.40.194

🇺🇸 216.25.89.78

🇬🇧 195.206.182.215

🇨🇦 159.203.44.180

🇫🇮 147.185.133.188

🇺🇸 143.42.1.185

🇺🇸 129.213.77.23

🇮🇳 49.207.244.28

🇺🇸 45.148.234.96

🇺🇸 44.199.78.198

🇺🇸 44.116.132.34

🇺🇸 40.121.179.100

🇧🇪 35.240.53.155

🇬🇧 193.163.125.222

🇨🇳 182.138.158.69

🇺🇸 162.144.61.95

🇺🇸 158.51.96.38

🇺🇸 44.112.186.120

🇺🇸 2001:470:1:332::179

🇧🇷 177.23.50.38