JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.147.111.165

49.147.111.165 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 23%: ?

23%

ISP	HOME_DSL
Usage Type	Fixed Line ISP
ASN	AS9299
Hostname(s)	dsl.49.148.111.165.pldt.net
Domain Name	pldthome.com
Country	🇵🇭 Philippines
City	Candijay, Central Visayas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.147.111.165

Whois 49.147.111.165

IP Abuse Reports for 49.147.111.165:

This IP address has been reported a total of 8 times from 6 distinct sources. 49.147.111.165 was first reported on May 7th 2026, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-13 10:26:14 (4 weeks ago)	[redacted] 49.147.111.165 - - [13/May/2026:12:25:18 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 49.147.111.165 - - [13/May/2026:12:25:18 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" [redacted] 49.147.111.165 - - [13/May/2026:12:25:32 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)" [redacted] 49.147.111.165 - - [13/May/2026:12:25:45 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.3; http://site85517486.com" [redacted] 49.147.111.165 - - [13/May/2026:12:25:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 49.147.111.165 - - [13/May/2026:12:26:13 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" ... show less	Hacking Web App Attack
Anonymous	2026-05-13 01:05:39 (4 weeks ago)	[redacted] 49.147.111.165 - - [13/May/2026:03:04:57 +0200] "POST /xmlrpc.php HTTP/1.1" 403 1511 "-" ... show more [redacted] 49.147.111.165 - - [13/May/2026:03:04:57 +0200] "POST /xmlrpc.php HTTP/1.1" 403 1511 "-" "WordPress.com; https://wordpress.com" [redacted] 49.147.111.165 - - [13/May/2026:03:05:07 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "Jetpack by WordPress.com" [redacted] 49.147.111.165 - - [13/May/2026:03:05:17 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "Jetpack by WordPress.com" [redacted] 49.147.111.165 - - [13/May/2026:03:05:28 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "Jetpack/12.5; WordPress/6.1; http://site21080415.com" [redacted] 49.147.111.165 - - [13/May/2026:03:05:38 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
🇩🇪 abdubhai	2026-05-11 08:42:18 (4 weeks ago)	49.147.111.165 - - [11/May/2026: ...	Brute-Force
🇩🇪 grassau.com	2026-05-11 07:32:29 (4 weeks ago)	(wordpress) Failed wordpress login from 49.147.111.165 (PH/Philippines/Province of Iloilo/Iloilo Cit ... show more (wordpress) Failed wordpress login from 49.147.111.165 (PH/Philippines/Province of Iloilo/Iloilo City/dsl.49.148.111.165.pldt.net) show less	Brute-Force
Anonymous	2026-05-11 07:30:18 (4 weeks ago)	[redacted] 49.147.111.165 - - [11/May/2026:09:29:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 49.147.111.165 - - [11/May/2026:09:29:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 49.147.111.165 - - [11/May/2026:09:29:45 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 49.147.111.165 - - [11/May/2026:09:29:56 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.4; http://site90133527.com" [redacted] 49.147.111.165 - - [11/May/2026:09:30:07 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.2; http://site30425322.com" [redacted] 49.147.111.165 - - [11/May/2026:09:30:17 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" ... show less	Hacking Web App Attack
Anonymous	2026-05-10 10:59:11 (1 month ago)	Web App Attack, Hacking	Hacking Web App Attack
🇨🇦 Paulo Henrique dos Santos Nichio	2026-05-10 07:28:07 (1 month ago)	(ls_brute) LiteSpeed Brute Force Attack 49.147.111.165 (PH/Philippines/dsl.49.148.111.165.pldt.net): ... show more (ls_brute) LiteSpeed Brute Force Attack 49.147.111.165 (PH/Philippines/dsl.49.148.111.165.pldt.net): 3 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026-05-10 04:27:40.202304 [WARN] [3405552] [T0] [49.147.111.165:56013-1#APVH_www.oliveiros.com.br:443] Brute force detected for IP [49.147.111.165], throttle. 2026-05-10 04:27:50.228844 [WARN] [3405552] [T0] [49.147.111.165:56013-2#APVH_www.oliveiros.com.br:443] Brute force detected for IP [49.147.111.165], throttle. 2026-05-10 04:28:01.202629 [WARN] [3405552] [T0] [49.147.111.165:56013-3#APVH_www.oliveiros.com.br:443] Brute force detected for IP [49.147.111.165], throttle. show less	Port Scan
🇬🇧 Apache	2026-05-07 01:51:20 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 49.147.111.165 (PH/Philippines/dsl.49.148.111.1 ... show more (mod_security) mod_security (id:240335) triggered by 49.147.111.165 (PH/Philippines/dsl.49.148.111.165.pldt.net): 5 in the last 300 secs show less	Brute-Force Web App Attack

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 72.63.20.56

🇬🇧 20.254.242.28

🇺🇸 206.0.69.141

🇧🇪 198.235.24.252

🇧🇪 198.235.24.224

🇸🇬 178.128.51.84

🇧🇷 177.87.247.93

🇲🇦 160.179.154.3

🇹🇭 103.114.201.160

🇺🇸 65.49.1.149

🇰🇷 183.108.233.190

🇺🇸 96.44.129.212

🇳🇱 89.21.67.177

🇺🇸 66.228.40.98

🇺🇸 66.132.224.79

🇺🇸 64.92.6.70

🇺🇸 52.21.227.35

🇩🇪 43.165.6.182

🇧🇬 5.188.206.46

🇹🇷 213.43.4.219