AbuseIPDB » 49.145.217.168
49.145.217.168
This IP was reported 11 times. Confidence of
Abuse
is 68% : ?
ISP
HOME_DSL
Usage Type
Fixed Line ISP
ASN
AS9299
Domain Name
pldthome.com
Country
🇵🇭
Philippines
City
Davao, Davao Region
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 49.145.217.168 :
This IP address has been reported a total of
11
times from
11 distinct
sources.
49.145.217.168 was first reported on
September 14th 2026 , and the most recent report was
12 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇳🇱
ConsulHosting
2026-09-17 08:00:13
(12 hours ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇧🇪
madeit
2026-09-17 07:34:02
(12 hours ago)
Web App Attack
🇲🇾
Rizzy
2026-09-17 05:19:00
(14 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
cwytech
2026-09-17 01:23:46
(18 hours ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wp-us-login-only-high.
Bad Web Bot
Web App Attack
2026-09-16 04:51:12
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇩🇪
ghostwarriors
2026-09-16 04:50:27
(1 day ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
2026-09-16 04:48:22
(1 day ago)
[redacted] 49.145.217.168 - - [16/Sep/2026:06:47:39 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ...
show more
[redacted] 49.145.217.168 - - [16/Sep/2026:06:47:39 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.4; http://site81420283.com"
[redacted] 49.145.217.168 - - [16/Sep/2026:06:47:49 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)"
[redacted] 49.145.217.168 - - [16/Sep/2026:06:48:00 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 49.145.217.168 - - [16/Sep/2026:06:48:10 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.1; http://site56845561.com"
[redacted] 49.145.217.168 - - [16/Sep/2026:06:48:21 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.3; http://site78908212.com"
...
show less
Hacking
Web App Attack
🇩🇪
FD-IX
2026-09-16 04:47:55
(1 day ago)
Fail2Ban: WordPress XML-RPC brute-force attack detected.
Bad Web Bot
Web App Attack
🇸🇪
ljo
2026-09-16 03:16:24
(1 day ago)
49.145.217.168 - - [16/Sep/2026:05:14:47 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5270 "-" "Jetpack by ...
show more
49.145.217.168 - - [16/Sep/2026:05:14:47 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5270 "-" "Jetpack by WordPress.com"
49.145.217.168 - - [16/Sep/2026:05:14:57 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5270 "-" "Jetpack by WordPress.com"
49.145.217.168 - - [16/Sep/2026:05:15:07 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5270 "-" "WordPress.com; https://wordpress.com"
49.145.217.168 - - [16/Sep/2026:05:15:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5270 "-" "WordPress.com; https://wordpress.com"
49.145.217.168 - - [16/Sep/2026:05:15:29 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5270 "-" "WordPress.com; https://wordpress.com"
49.145.217.168 - - [16/Sep/2026:05:15:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5270 "-" "Jetpack by WordPress.com"
49.145.217.168 - - [16/Sep/2026:05:15:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5270 "-" "WordPress.com; https://wordpress.com"
49.145.217.168 - - [16/Sep/2026:05:16:01 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5270 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress
...
show less
Web App Attack
🇦🇺
screwlooseit.com.au
2026-09-14 04:10:57
(3 days ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
PH/Philippines/dsl.49.145.217.168.pldt.net
Web App Attack
🇫🇷
dynamix
2026-09-14 02:20:39
(3 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
Showing 1 to
11
of 11 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: