JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.125.201.91

49.125.201.91 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 19%: ?

19%

ISP	DiGi Telecommunications Sdn Bhd
Usage Type	Fixed Line ISP
ASN	AS4818
Domain Name	digi.com.my
Country	🇲🇾 Malaysia
City	Ranau, Sabah

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.125.201.91

Whois 49.125.201.91

IP Abuse Reports for 49.125.201.91:

This IP address has been reported a total of 32 times from 12 distinct sources. 49.125.201.91 was first reported on September 25th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Hary74656	2026-07-11 09:36:37 (3 days ago)	[Sat Jul 11 11:36:35.251307 2026] [authz_core:error] [pid 50266:tid 50427] [client 49.125.201.91:466 ... show more [Sat Jul 11 11:36:35.251307 2026] [authz_core:error] [pid 50266:tid 50427] [client 49.125.201.91:46692] AH01630: client denied by server configuration: /home/harald/www/aschi.at/xmlrpc.php, referer: https://aschi.at/xmlrpc.php ... show less	Bad Web Bot
🇺🇸 Jason Howell	2026-07-05 19:08:19 (1 week ago)	49.125.201.91 - - [05/Jul/2026:14:06:02 -0500] "GET /wp-login.php HTTP/1.1" 200 5357 "-" "Mozilla/5. ... show more 49.125.201.91 - - [05/Jul/2026:14:06:02 -0500] "GET /wp-login.php HTTP/1.1" 200 5357 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36" 49.125.201.91 - - [05/Jul/2026:14:06:04 -0500] "POST /wp-login.php HTTP/1.1" 200 5748 "https://starbuckmachinery.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36" 49.125.201.91 - - [05/Jul/2026:14:07:07 -0500] "GET /wp-login.php HTTP/1.1" 200 5359 "https://starbuckmachinery.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36" 49.125.201.91 - - [05/Jul/2026:14:07:12 -0500] "POST /wp-login.php HTTP/1.1" 200 2153 "https://starbuckmachinery.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36" 49.125.201.91 - - [05/Jul/2026:14:08:19 -0500] "GET /wp-login.php HTTP/ ... show less	Web App Attack
🇪🇸 pipeline.es	2026-07-03 08:45:36 (1 week ago)	SMTP AUTH credential-stuffing/brute-force against a compromised mailbox account on our Postfix mail ... show more SMTP AUTH credential-stuffing/brute-force against a compromised mailbox account on our Postfix mail infrastructure (pipeline.es), used to relay spam via authenticated SMTP submission. show less	Brute-Force Email Spam Hacking
🇦🇹 AustrianSimon	2026-05-05 13:25:09 (2 months ago)	05 May 2026 13:25:09UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ... show more 05 May 2026 13:25:09UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 49.125.201.91 show less	Brute-Force
🇳🇱 maxxsense	2026-04-10 19:44:58 (3 months ago)	49.125.201.91 (MY/Malaysia/-), 12 distributed imapd attacks on account [redacted]	Brute-Force
Anonymous	2026-03-25 05:00:29 (3 months ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
Anonymous	2026-03-09 20:28:16 (4 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇮🇩 sockominfo	2026-03-09 15:01:08 (4 months ago)	Zimbra: Login failures from malicious IP: 49.125.201.91. Threat Score: 5/10 (MEDIUM). Reported by Ta ... show more Zimbra: Login failures from malicious IP: 49.125.201.91. Threat Score: 5/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-03-09 14:01:04 (4 months ago)	Zimbra: Login failures from malicious IP: 49.125.201.91. Threat Score: 5.1/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 49.125.201.91. Threat Score: 5.1/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-03-09 13:00:42 (4 months ago)	Zimbra: Login failures from malicious IP: 49.125.201.91. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 49.125.201.91. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-03-09 12:00:56 (4 months ago)	Zimbra: Login failures from malicious IP: 49.125.201.91. Threat Score: 5.3/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 49.125.201.91. Threat Score: 5.3/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-03-09 11:43:33 (4 months ago)	[WAZUH] Zimbra: Login failures from malicious IP: 49.125.201.91	Hacking Web App Attack
Anonymous	2026-01-31 19:15:22 (5 months ago)		Hacking
Anonymous	2026-01-30 21:50:11 (5 months ago)	VPN Abuse brute force	Hacking
Anonymous	2026-01-30 18:45:31 (5 months ago)		Hacking

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a09:bac5:9444:3af::5e:85

🇮🇳 172.253.230.156

🇮🇳 138.252.215.240

🇫🇷 130.49.218.166

🇳🇱 45.148.10.147

🇸🇬 45.32.103.140

🇨🇳 14.103.54.150

🇺🇸 5.78.194.86

🇰🇷 211.37.174.180

🇺🇸 147.185.132.218

🇻🇳 103.60.242.169

🇩🇪 64.89.163.68

🇮🇩 2406:da19:776:6e02:b3c7:15f3:a45:f58a

🇨🇳 218.75.165.74

🇨🇳 183.230.155.13

🇨🇳 117.189.37.122

🇮🇳 103.46.200.243

🇹🇷 94.154.43.254

🇳🇱 85.11.167.7

🇸🇪 82.209.148.60