JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 99.74.53.136

99.74.53.136 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 85%: ?

85%

ISP	AT&T Enterprises, LLC
Usage Type	Fixed Line ISP
ASN	AS7018
Domain Name	att.com
Country	🇺🇸 United States of America
City	Philadelphia, Pennsylvania

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 99.74.53.136

Whois 99.74.53.136

IP Abuse Reports for 99.74.53.136:

This IP address has been reported a total of 24 times from 14 distinct sources. 99.74.53.136 was first reported on June 27th 2026, and the most recent report was 42 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-29 00:34:04 (42 minutes ago)	(mod_security) mod_security (id:240335) triggered by 99.74.53.136 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 99.74.53.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 20:33:59.345844 2026] [security2:error] [pid 7815:tid 7815] [client 99.74.53.136:35777] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 99.74.53.136 (+1 hits since last alert)\|thesmithcouple.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thesmithcouple.com"] [uri "/xmlrpc.php"] [unique_id "akG9dyfFHrUVyfvHhGTG_wAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-06-29 00:32:16 (43 minutes ago)	6.031 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇫🇮 YF	2026-06-28 23:00:45 (2 hours ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇺🇸 TPI-Abuse	2026-06-28 21:56:30 (3 hours ago)	(mod_security) mod_security (id:240335) triggered by 99.74.53.136 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 99.74.53.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 17:56:23.789415 2026] [security2:error] [pid 26975:tid 26975] [client 99.74.53.136:56779] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 99.74.53.136 (+1 hits since last alert)\|soundtrax.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "soundtrax.net"] [uri "/xmlrpc.php"] [unique_id "akGYhylLEVDqVUNma79CAQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 sasbau	2026-06-28 19:05:18 (6 hours ago)	99.74.53.136 - - [28/Jun/2026:21:04:57 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Jetpack by Wo ... show more 99.74.53.136 - - [28/Jun/2026:21:04:57 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Jetpack by WordPress.com" 99.74.53.136 - - [28/Jun/2026:21:05:08 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Jetpack by WordPress.com" 99.74.53.136 - - [28/Jun/2026:21:05:18 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)" show less	Brute-Force Web App Attack
🇺🇸 integrantservices.com	2026-06-28 16:30:17 (8 hours ago)	(wordpress) Failed wordpress login from 99.74.53.136 (US/United States/-)	Brute-Force
Anonymous	2026-06-28 14:26:03 (10 hours ago)	99.74.53.136 - - [28/Jun/2026:16:25:41 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack/13.0; ... show more 99.74.53.136 - - [28/Jun/2026:16:25:41 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack/13.0; WordPress/6.2; http://site48272870.com" 99.74.53.136 - - [28/Jun/2026:16:25:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack/13.0; WordPress/6.2; http://site48272870.com" 99.74.53.136 - - [28/Jun/2026:16:25:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com" 99.74.53.136 - - [28/Jun/2026:16:25:52 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com" 99.74.53.136 - - [28/Jun/2026:16:26:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com" ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 12:23:29 (12 hours ago)	(mod_security) mod_security (id:240335) triggered by 99.74.53.136 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 99.74.53.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 08:23:25.859924 2026] [security2:error] [pid 25816:tid 25816] [client 99.74.53.136:52933] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 99.74.53.136 (+1 hits since last alert)\|feiz.church\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "feiz.church"] [uri "/xmlrpc.php"] [unique_id "akESPVw3a3FrXltzGcx63wAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-28 11:41:25 (13 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇫🇮 bittiguru.fi	2026-06-28 10:55:56 (14 hours ago)	99.74.53.136 - [28/Jun/2026:13:55:46 +0300] "POST /xmlrpc.php HTTP/1.1" 403 428 "-" "WordPress.com; ... show more 99.74.53.136 - [28/Jun/2026:13:55:46 +0300] "POST /xmlrpc.php HTTP/1.1" 403 428 "-" "WordPress.com; https://wordpress.com" "-" 99.74.53.136 - [28/Jun/2026:13:55:56 +0300] "POST /xmlrpc.php HTTP/1.1" 403 428 "-" "Jetpack by WordPress.com" "-" ... show less	Hacking Brute-Force Web App Attack
🇫🇮 bittiguru.fi	2026-06-28 10:39:40 (14 hours ago)	99.74.53.136 - [28/Jun/2026:13:39:31 +0300] "POST /xmlrpc.php HTTP/1.1" 403 428 "-" "Jetpack by Word ... show more 99.74.53.136 - [28/Jun/2026:13:39:31 +0300] "POST /xmlrpc.php HTTP/1.1" 403 428 "-" "Jetpack by WordPress.com" "-" 99.74.53.136 - [28/Jun/2026:13:39:40 +0300] "POST /xmlrpc.php HTTP/1.1" 403 428 "-" "Jetpack/12.1; WordPress/6.1; http://site57247126.com" "-" ... show less	Hacking Brute-Force Web App Attack
🇺🇸 lostswordfish.com	2026-06-28 05:24:03 (19 hours ago)	Wordfence waf block on pameganslaw	Web App Attack
🇲🇾 Rizzy	2026-06-28 04:11:41 (21 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 02:49:57 (22 hours ago)	(mod_security) mod_security (id:240335) triggered by 99.74.53.136 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 99.74.53.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 22:49:53.573072 2026] [security2:error] [pid 12676:tid 12676] [client 99.74.53.136:43203] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 99.74.53.136 (+1 hits since last alert)\|arellasoc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "arellasoc.com"] [uri "/xmlrpc.php"] [unique_id "akCL0S2U9b0Oe4ZNDBVzwwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-28 01:00:08 (1 day ago)	Bot / scanning and/or hacking attempts: GET /xmlrpc.php HTTP/1.1, POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 207.154.206.226

🇳🇱 178.16.54.172

🇺🇸 173.255.223.73

🇺🇸 170.187.165.139

🇭🇰 152.32.214.226

🇺🇦 109.254.191.0

🇳🇱 91.92.40.7

🇫🇷 85.217.140.5

🇩🇪 69.5.169.217

🇰🇷 59.26.132.170

🇳🇱 45.148.10.147

🇺🇸 20.106.17.55

🇹🇭 8.213.229.126

🇸🇦 2.91.253.220

🇰🇷 222.116.59.194

🇺🇸 216.180.246.105

🇹🇼 198.235.24.67

🇳🇱 176.65.139.246

🇧🇷 168.195.2.100

🇵🇰 139.135.45.146