JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 164.100.149.249

164.100.149.249 was found in our database!

This IP was reported 129 times. Confidence of Abuse is 70%: ?

70%

ISP	National Informatics Centre
Usage Type	Government
ASN	AS4758
Domain Name	Unknown
Country	🇮🇳 India
City	Kohima, Nagaland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 164.100.149.249

Whois 164.100.149.249

IP Abuse Reports for 164.100.149.249:

This IP address has been reported a total of 129 times from 63 distinct sources. 164.100.149.249 was first reported on September 27th 2021, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-17 10:35:18 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 164.100.149.249 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 164.100.149.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 06:35:12.587694 2026] [security2:error] [pid 17215:tid 17215] [client 164.100.149.249:14785] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 164.100.149.249 (+1 hits since last alert)\|greatchristianadventure.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "greatchristianadventure.com"] [uri "/xmlrpc.php"] [unique_id "aoLj4AATwIjqDEbxGYt7rgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 10:05:10 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 164.100.149.249 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 164.100.149.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 06:05:01.320375 2026] [security2:error] [pid 29567:tid 29567] [client 164.100.149.249:1628] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 164.100.149.249 (+1 hits since last alert)\|firstunitedreserve.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "firstunitedreserve.com"] [uri "/xmlrpc.php"] [unique_id "aoLczQD7G6DmQtnXzExLcgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-14 05:56:31 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 164.100.149.249 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 164.100.149.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 01:56:22.974640 2026] [security2:error] [pid 2986:tid 2986] [client 164.100.149.249:6758] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 164.100.149.249 (+1 hits since last alert)\|newhopepetgrooming.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "newhopepetgrooming.com"] [uri "/xmlrpc.php"] [unique_id "an6uBgD4YZVYUjkT6mOmpwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 abdubhai	2026-08-11 08:34:18 (1 week ago)	164.100.149.249 - - [11/Aug/2026 ...	Brute-Force
🇧🇪 madeit	2026-08-07 06:36:11 (1 week ago)		Web App Attack
🇩🇪 YF	2026-08-05 13:00:15 (2 weeks ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇳🇱 Site.eu	2026-08-04 11:22:09 (2 weeks ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇫🇷 dynamix	2026-08-04 10:48:57 (2 weeks ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇪🇸 alferez	2026-08-04 10:23:01 (2 weeks ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
🇲🇾 Rizzy	2026-07-31 07:05:48 (2 weeks ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇩🇪 LRob	2026-07-29 05:51:45 (3 weeks ago)	CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: /xmlrpc.php \| UA: Jetpack/12.5; WordPress ... show more CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: /xmlrpc.php \| UA: Jetpack/12.5; WordPress/6.4; http://site18801289.com show less	Brute-Force Web App Attack
🇩🇪 Marc	2026-07-29 05:23:03 (3 weeks ago)	164.100.149.249 - - [29/Jul/2026:07:22:41 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4841 "-" "WordPress ... show more 164.100.149.249 - - [29/Jul/2026:07:22:41 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4841 "-" "WordPress.com; https://wordpress.com" 164.100.149.249 - - [29/Jul/2026:07:22:50 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4841 "-" "WordPress.com; https://wordpress.com" 164.100.149.249 - - [29/Jul/2026:07:23:02 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4842 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)" show less	Brute-Force Web App Attack
🇪🇸 masterguru	2026-07-28 10:32:02 (3 weeks ago)	(xmlrpc) Failed xmlrpc access from 164.100.149.249 (IN/India/-): 5 in the last 3600 secs (0-122)	Hacking
Anonymous	2026-07-28 06:09:30 (3 weeks ago)	164.100.149.249 - - [28/Jul/2026:14:09:29 +0800] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "WordPress. ... show more 164.100.149.249 - - [28/Jul/2026:14:09:29 +0800] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "WordPress.com; https://wordpress.com" ... show less	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-20 23:23:57 (4 weeks ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH

Showing 1 to 15 of 129 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 191.53.19.44

🇲🇽 189.203.163.10

🇷🇺 185.37.57.155

🇺🇸 66.132.172.126

🇸🇬 47.79.119.223

🇳🇱 45.142.193.24

🇺🇸 40.121.179.100

🇺🇸 18.97.26.104

🇬🇧 2001:41d0:801:2000::1498

🇰🇷 211.246.160.21

🇧🇷 200.149.73.2

🇷🇺 89.253.14.246

🇳🇱 195.178.110.30

🇮🇹 188.215.94.151

🇳🇱 185.242.226.58

🇺🇸 163.41.112.89

🇳🇵 103.190.40.140

🇻🇳 103.180.134.39

🇺🇸 72.221.88.20

🇦🇺 40.82.214.8