JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.125.201.91

49.125.201.91 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 26%: ?

26%

ISP	DiGi Telecommunications Sdn Bhd
Usage Type	Fixed Line ISP
ASN	AS4818
Domain Name	digi.com.my
Country	🇲🇾 Malaysia
City	Ranau, Sabah

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.125.201.91

Whois 49.125.201.91

IP Abuse Reports for 49.125.201.91:

This IP address has been reported a total of 33 times from 13 distinct sources. 49.125.201.91 was first reported on September 25th 2025, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 big-cloud.nl	2026-07-16 05:30:37 (14 hours ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 Hary74656	2026-07-11 09:36:37 (5 days ago)	[Sat Jul 11 11:36:35.251307 2026] [authz_core:error] [pid 50266:tid 50427] [client 49.125.201.91:466 ... show more [Sat Jul 11 11:36:35.251307 2026] [authz_core:error] [pid 50266:tid 50427] [client 49.125.201.91:46692] AH01630: client denied by server configuration: /home/harald/www/aschi.at/xmlrpc.php, referer: https://aschi.at/xmlrpc.php ... show less	Bad Web Bot
🇺🇸 Jason Howell	2026-07-05 19:08:19 (1 week ago)	49.125.201.91 - - [05/Jul/2026:14:06:02 -0500] "GET /wp-login.php HTTP/1.1" 200 5357 "-" "Mozilla/5. ... show more 49.125.201.91 - - [05/Jul/2026:14:06:02 -0500] "GET /wp-login.php HTTP/1.1" 200 5357 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36" 49.125.201.91 - - [05/Jul/2026:14:06:04 -0500] "POST /wp-login.php HTTP/1.1" 200 5748 "https://starbuckmachinery.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36" 49.125.201.91 - - [05/Jul/2026:14:07:07 -0500] "GET /wp-login.php HTTP/1.1" 200 5359 "https://starbuckmachinery.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36" 49.125.201.91 - - [05/Jul/2026:14:07:12 -0500] "POST /wp-login.php HTTP/1.1" 200 2153 "https://starbuckmachinery.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36" 49.125.201.91 - - [05/Jul/2026:14:08:19 -0500] "GET /wp-login.php HTTP/ ... show less	Web App Attack
🇪🇸 pipeline.es	2026-07-03 08:45:36 (1 week ago)	SMTP AUTH credential-stuffing/brute-force against a compromised mailbox account on our Postfix mail ... show more SMTP AUTH credential-stuffing/brute-force against a compromised mailbox account on our Postfix mail infrastructure (pipeline.es), used to relay spam via authenticated SMTP submission. show less	Brute-Force Email Spam Hacking
🇦🇹 AustrianSimon	2026-05-05 13:25:09 (2 months ago)	05 May 2026 13:25:09UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ... show more 05 May 2026 13:25:09UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 49.125.201.91 show less	Brute-Force
🇳🇱 maxxsense	2026-04-10 19:44:58 (3 months ago)	49.125.201.91 (MY/Malaysia/-), 12 distributed imapd attacks on account [redacted]	Brute-Force
Anonymous	2026-03-25 05:00:29 (3 months ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
Anonymous	2026-03-09 20:28:16 (4 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇮🇩 sockominfo	2026-03-09 15:01:08 (4 months ago)	Zimbra: Login failures from malicious IP: 49.125.201.91. Threat Score: 5/10 (MEDIUM). Reported by Ta ... show more Zimbra: Login failures from malicious IP: 49.125.201.91. Threat Score: 5/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-03-09 14:01:04 (4 months ago)	Zimbra: Login failures from malicious IP: 49.125.201.91. Threat Score: 5.1/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 49.125.201.91. Threat Score: 5.1/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-03-09 13:00:42 (4 months ago)	Zimbra: Login failures from malicious IP: 49.125.201.91. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 49.125.201.91. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-03-09 12:00:56 (4 months ago)	Zimbra: Login failures from malicious IP: 49.125.201.91. Threat Score: 5.3/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 49.125.201.91. Threat Score: 5.3/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-03-09 11:43:33 (4 months ago)	[WAZUH] Zimbra: Login failures from malicious IP: 49.125.201.91	Hacking Web App Attack
Anonymous	2026-01-31 19:15:22 (5 months ago)		Hacking
Anonymous	2026-01-30 21:50:11 (5 months ago)	VPN Abuse brute force	Hacking

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 171.231.180.10

🇨🇳 117.13.174.213

🇮🇹 91.80.179.205

🇺🇸 2a01:4ff:f0:974f::1

🇨🇳 221.228.203.3

🇧🇷 200.11.123.241

🇳🇱 194.135.105.208

🇲🇽 189.146.48.113

🇺🇸 172.190.89.127

🇭🇰 119.246.15.94

🇳🇱 91.148.245.81

🇧🇬 91.92.47.117

🇳🇱 45.148.10.151

🇹🇼 198.235.24.115

🇳🇱 158.94.211.254

🇹🇼 111.70.9.87

🇳🇱 81.171.72.93

🇱🇹 62.60.130.219

🇺🇸 34.226.65.53

🇰🇷 220.116.26.179