AbuseIPDB » 49.146.153.161
49.146.153.161 was found in our database!
This IP was reported 6 times. Confidence of
Abuse
is 2%: ?
| ISP |
HOME_DSL
|
| Usage Type |
Fixed Line ISP
|
| ASN |
AS9299
|
| Hostname(s) |
dsl.49.146.153.161.pldt.net
|
| Domain Name |
pldthome.com
|
| Country |
🇵🇭
Philippines
|
| City |
Roxas City, Western Visayas
|
IP info including ISP, Usage Type, and Location provided
by IPInfo. Updated weekly.
IP Abuse Reports for 49.146.153.161:
This IP address has been reported a total of
6
times from
4 distinct
sources.
49.146.153.161 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
| Reporter |
IoA Timestamp (UTC)
|
Comment |
Categories |
|
|
🇷🇴
Fn4ticHz
|
|
DDoS blocked via ZeroGuard.ID
|
DDoS Attack
Exploited Host
|
|
|
🇷🇴
Fn4ticHz
|
|
Repeated DDoS targeted -- ZeroGuard X ManagedSRV
|
DDoS Attack
Exploited Host
|
|
|
🇩🇪
NoaQT
|
|
49.146.153.161 - - [05/Apr/2026:16:31:02 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.twitter ...
show more
49.146.153.161 - - [05/Apr/2026:16:31:02 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.twitter.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
49.146.153.161 - - [05/Apr/2026:16:34:43 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
49.146.153.161 - - [05/Apr/2026:16:43:35 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.whatsapp.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
49.146.153.161 - - [05/Apr/2026:16:34:43 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
...
show less
|
DDoS Attack
|
|
|
🇩🇪
NoaQT
|
|
49.146.153.161 - - [05/Apr/2026:16:31:02 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.twitter ...
show more
49.146.153.161 - - [05/Apr/2026:16:31:02 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.twitter.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
49.146.153.161 - - [05/Apr/2026:16:34:43 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
49.146.153.161 - - [05/Apr/2026:16:34:43 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
49.146.153.161 - - [05/Apr/2026:16:43:35 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.whatsapp.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
49.146.153.161 - - [05/Apr/2026:16:43:35 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.whatsapp.com/" "Mo
...
show less
|
DDoS Attack
|
|
|
🇺🇸
SiliSoftware
|
|
/phpBB3/viewtopic.php?f=4&p=6527&sid=5707d4c2d605ce3657878462125cf5bf
|
Web App Attack
|
|
|
🇮🇳
Bharat Datacenter
|
|
6: date=2026-03-05 time=21:12:11 eventtime=1772725331912385560 tz="+0530" logid="0720018432" type="u ...
show more
6: date=2026-03-05 time=21:12:11 eventtime=1772725331912385560 tz="+0530" logid="0720018432" type="utm" subtype="anomaly" eventtype="anomaly" level="alert" vd="root" severity="critical" srcip=49.146.153.161 srccountry="Philippines" dstip=157.10.99.34 dstcountry="India" srcintf="x2" srcintfrole="wan" sessionid=0 action="clear_session" proto=6 service="HTTPS" count=138990 attack="tcp_syn_flood" srcport=59254 dstport=443 attackid=100663396 policyid=1 policytype="DoS-policy" ref="http://www.fortinet.com/ids/VID100663396" msg="anomaly: tcp_syn_flood, 5146 > threshold 2000, repeats 138990 times since last log, pps 5197 of prior second" crscore=50 craction=4096 crlevel="critical"
show less
|
Brute-Force
|
|
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: