JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.47.48.161

202.47.48.161 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 48%: ?

48%

ISP	Cyber Internet Services Pakistan
Usage Type	Fixed Line ISP
ASN	AS9541
Domain Name	cyber.net.pk
Country	🇵🇰 Pakistan
City	Karachi, Sindh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.47.48.161

Whois 202.47.48.161

IP Abuse Reports for 202.47.48.161:

This IP address has been reported a total of 40 times from 27 distinct sources. 202.47.48.161 was first reported on January 24th 2025, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 bittiguru.fi	2026-08-21 11:07:09 (23 hours ago)	202.47.48.161 - [21/Aug/2026:14:06:59 +0300] "POST /xmlrpc.php HTTP/1.1" 403 428 "-" "Jetpack by Wor ... show more 202.47.48.161 - [21/Aug/2026:14:06:59 +0300] "POST /xmlrpc.php HTTP/1.1" 403 428 "-" "Jetpack by WordPress.com" "-" 202.47.48.161 - [21/Aug/2026:14:07:09 +0300] "POST /xmlrpc.php HTTP/1.1" 404 37770 "-" "WordPress.com; https://wordpress.com" "-" ... show less	Hacking Brute-Force Web App Attack
🇺🇸 gui-ying233	2026-08-20 16:40:21 (1 day ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Zkillu	2026-08-19 20:04:49 (2 days ago)	UDP flood (DDoS) vs AS215599: 1 pkts / 0 MB to UDP 80 across 1 dst IP(s), 2026-08-19 21:46 to 2026-0 ... show more UDP flood (DDoS) vs AS215599: 1 pkts / 0 MB to UDP 80 across 1 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 20:04:49 (2 days ago)	UDP flood (DDoS) vs AS215599: 1 pkts / 0 MB to UDP 80 across 1 dst IP(s), 2026-08-19 21:46 to 2026-0 ... show more UDP flood (DDoS) vs AS215599: 1 pkts / 0 MB to UDP 80 across 1 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇺🇸 kosada.com	2026-08-17 17:27:18 (4 days ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
Anonymous	2026-08-12 19:08:42 (1 week ago)	(wordpress) Failed wordpress login from 202.47.48.161 (PK/Pakistan/-)	Brute-Force
🇺🇸 integrantservices.com	2026-08-08 10:24:27 (2 weeks ago)	(wordpress) Failed wordpress login from 202.47.48.161 (PK/Pakistan/-)	Brute-Force
🇫🇷 dynamix	2026-07-14 19:37:16 (1 month ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇫🇮 KnightIndustries	2026-07-13 18:31:02 (1 month ago)	2026-07-13T20:28:43.697707+02:00 milkyway wordpress(learncryptography.pw)[3293538]: XML-RPC authenti ... show more 2026-07-13T20:28:43.697707+02:00 milkyway wordpress(learncryptography.pw)[3293538]: XML-RPC authentication failure for mystic from 202.47.48.161 2026-07-13T20:29:47.439188+02:00 milkyway wordpress(learncryptography.pw)[3293498]: XML-RPC authentication failure for mystic from 202.47.48.161 2026-07-13T20:31:01.715470+02:00 milkyway wordpress(learncryptography.pw)[3293658]: XML-RPC authentication failure for mystic from 202.47.48.161 ... show less	Brute-Force Web App Attack
🇸🇪 KIDOS	2026-07-12 23:30:20 (1 month ago)	IIS malicious activity: sql_injection_attempt	Web App Attack
🇫🇷 dynamix	2026-07-08 16:36:00 (1 month ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇩🇪 bsoft.de	2026-07-04 10:35:39 (1 month ago)	202.47.48.161 - - [04/Jul/2026:12:35:17 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1 ... show more 202.47.48.161 - - [04/Jul/2026:12:35:17 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.2; http://site40823706.com" 202.47.48.161 - - [04/Jul/2026:12:35:26 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" 202.47.48.161 - - [04/Jul/2026:12:35:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" show less	Web App Attack
🇫🇷 masterguru	2026-06-18 11:26:09 (2 months ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇺🇸 TAY	2026-06-17 09:10:26 (2 months ago)	202.47.48.161 - - [17/Jun/2026:17:02:42 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4458 "-" "WordPress.c ... show more 202.47.48.161 - - [17/Jun/2026:17:02:42 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4458 "-" "WordPress.com; https://wordpress.com" 202.47.48.161 - - [17/Jun/2026:17:09:43 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4458 "-" "WordPress.com; https://wordpress.com" 202.47.48.161 - - [17/Jun/2026:17:10:26 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4458 "-" "Jetpack/12.1; WordPress/6.2; http://site32148144.com" ... show less	Brute-Force
🇫🇷 Kenshin869	2026-06-16 19:11:43 (2 months ago)	Wordpress unauthorized access attempt	Brute-Force

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇴 181.115.171.100

🇸🇮 130.12.182.122

🇺🇸 192.161.49.2

🇵🇾 186.12.184.219

🇳🇱 185.242.226.73

🇧🇴 181.115.147.5

🇧🇴 181.114.105.84

🇦🇷 181.104.58.196

🇦🇷 181.104.2.65

🇳🇱 91.92.42.76

🇨🇦 85.217.149.37

🇱🇹 62.60.130.201

🇳🇱 45.58.147.154

🇵🇾 181.103.2.67

🇦🇷 181.0.214.136

🇦🇷 181.0.209.22

🇷🇺 37.48.254.107

🇦🇷 200.59.127.164

🇸🇬 194.61.40.150

🇸🇬 194.61.40.72