JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 27.49.16.3

27.49.16.3 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 32%: ?

32%

ISP	CONVERGE INFORMATION AND COMMUNICATIONS TECHNOLOGY SOLUTIONS, INC
Usage Type	Fixed Line ISP
ASN	AS17639
Domain Name	convergeict.com
Country	🇵🇭 Philippines
City	Quezon City, National Capital Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 27.49.16.3

Whois 27.49.16.3

IP Abuse Reports for 27.49.16.3:

This IP address has been reported a total of 26 times from 21 distinct sources. 27.49.16.3 was first reported on April 24th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-16 16:33:04 (1 hour ago)	(mod_security) mod_security (id:225170) triggered by 27.49.16.3 (27.49.16.3.convergeict.com): 1 in t ... show more (mod_security) mod_security (id:225170) triggered by 27.49.16.3 (27.49.16.3.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 12:32:57.696277 2026] [security2:error] [pid 29292:tid 29292] [client 27.49.16.3:17159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.blog.post-therapyreconditioning.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.blog.post-therapyreconditioning.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atJRuW52lVepzkqZy7U6iAAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-10-16 12:51:00 (4 hours ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 cwytech	2026-10-11 13:02:31 (5 days ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wp-us-login-only-high.	Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-16 10:30:11 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-11 18:41:02 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-08-28 17:33:28 (1 month ago)	suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan	Port Scan
🇺🇸 鬼影233	2026-08-27 01:40:25 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-26 20:55:48 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-08-16 20:27:58 (1 month ago)	Unauthorized connection to SSH port 22	Port Scan SSH
🇺🇸 kosada.com	2026-07-25 05:06:49 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇸🇬 mypatricks	2026-06-19 05:17:37 (3 months ago)	27.49.16.3 \| Port: 12470 \| DNS: 27.49.16.3.convergeict.com 2026-06-19T13:17:36+08:00 Asia/Manila \| F ... show more 27.49.16.3 \| Port: 12470 \| DNS: 27.49.16.3.convergeict.com 2026-06-19T13:17:36+08:00 Asia/Manila \| Fake HTTP Protocol detected! \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /?route=information/ecard&1781828783&image=36b97e140065fe6bb6b7a5f878f638c8&product_id=586 \| Ref: - \| Country: PH/Philippines/+08:00 IP City: Quezon City Windows a0e0117f8ef108b8-HKG/Hong Kong 1 hits/0 secs Robots 4 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇬🇧 essinghigh	2026-05-06 06:35:21 (5 months ago)	IPS Detection: 27.49.16.3 -> DPT: 23	Port Scan
🇺🇸 MPL	2026-04-21 19:21:01 (5 months ago)	tcp/443 (6 or more attempts)	Port Scan
🇺🇸 xmission.com	2026-04-21 13:04:43 (5 months ago)	Blocked by UFW (TCP on 9100) Source port: 61985 TTL: 54 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 9100) Source port: 61985 TTL: 54 Packet length: 60 TOS: 0x00 This report (for 27.49.16.3) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 FeG Deutschland	2026-03-26 12:06:35 (6 months ago)	Mail: - login with unknown user - bruteforce	Brute-Force

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.101

🇻🇳 113.178.46.187

🇺🇸 95.134.98.71

🇪🇪 85.29.246.199

🇧🇬 79.124.49.14

🇳🇱 45.148.10.32

🇩🇪 201.79.9.72

🇺🇸 172.174.72.225

🇰🇷 125.131.2.30

🇧🇬 78.128.114.118

🇺🇸 68.183.57.142

🇲🇽 38.58.157.171

🇺🇸 35.144.6.32

🇻🇳 14.234.75.87

🇧🇷 201.16.238.49

🇷🇺 188.32.104.175

🇬🇧 159.65.83.41

🇧🇩 120.89.65.234

🇸🇬 116.193.85.70

🇭🇰 114.111.53.214