This IP address has been reported a total of
28
times from
22 distinct
sources.
5.49.61.140 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 6
reports;
Germany
with 4
reports;
Brazil
with 3
reports.
The most common categories in these recent reports were:
Web App Attack
28
times;
Hacking
8
times;
Brute-Force
5
times;
Bad Web Bot
4
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[MonOct1220:25:39.6655482026][security2:error][pid2994143:tid2994279][client5.49.61.140:0]ModSecurit ...
show more[MonOct1220:25:39.6655482026][security2:error][pid2994143:tid2994279][client5.49.61.140:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"gipfelbild.com\"][uri\"/xmlrpc.php\"][unique_id\"as0mI63qPiJFZbl8GDSL7QAAARI\"]
show less
[12/Oct/2026:06:39:27 +0300] -- 5.49.61.140 Ban reason: Scanner [CMS_GENERIC] | Request: POST /xmlrp ...
show more[12/Oct/2026:06:39:27 +0300] -- 5.49.61.140 Ban reason: Scanner [CMS_GENERIC] | Request: POST /xmlrpc.php HTTP/1.1
show less
[TueOct0600:44:26.5154432026][security2:error][pid1376839:tid1376844][client5.49.61.140:0]ModSecurit ...
show more[TueOct0600:44:26.5154432026][security2:error][pid1376839:tid1376844][client5.49.61.140:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"gipfelbild.com\"][uri\"/xmlrpc.php\"][unique_id\"asQoSlkAPJnXU92km421BAAAAQM\"]
show less
Hacking
Web App Attack
Anonymous
Attempt to POST to xmlrpc.php at 2026-10-05T21:17:59+00:00
Web vulnerability scanning: WordPress xmlrpc.php abuse. Blocked by firewall on 5 different hosting s ...
show moreWeb vulnerability scanning: WordPress xmlrpc.php abuse. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 80, 443 (HTTP/HTTPS). Automated report.
show less
Brute-Force
Web App Attack
Anonymous
[redacted] 5.49.61.140 - - [04/Oct/2026:16:55:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Moz ...
show more[redacted] 5.49.61.140 - - [04/Oct/2026:16:55:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/10.0.0.0 Safari/537.36"
[redacted] 5.49.61.140 - - [04/Oct/2026:16:55:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/99.0.0.0 Safari/537.36"
[redacted] 5.49.61.140 - - [04/Oct/2026:16:55:19 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 6.2; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/70.0.0.0 Safari/537.36"
[redacted] 5.49.61.140 - - [04/Oct/2026:16:55:33 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
[redacted] 5.49.61.140 - - [04/Oct/2026:16:55:34 +0200] "POST /xmlrpc.php HTTP/1.1" 2
...
show less
