JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.149.100.82

49.149.100.82 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 49%: ?

49%

ISP	HOME_DSL
Usage Type	Fixed Line ISP
ASN	AS9299
Hostname(s)	dsl.49.149.100.82.pldt.net
Domain Name	pldthome.com
Country	🇵🇭 Philippines
City	Zamboanga, Zamboanga Peninsula

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.149.100.82

Whois 49.149.100.82

IP Abuse Reports for 49.149.100.82:

This IP address has been reported a total of 10 times from 8 distinct sources. 49.149.100.82 was first reported on December 14th 2020, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Steve	2026-07-21 07:56:55 (2 days ago)	Abuse of XMLRPC	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 07:28:40 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 49.149.100.82 (dsl.49.149.100.82.pldt.net): 1 i ... show more (mod_security) mod_security (id:240335) triggered by 49.149.100.82 (dsl.49.149.100.82.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 03:28:35.784101 2026] [security2:error] [pid 8977:tid 8977] [client 49.149.100.82:9301] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 49.149.100.82 (+1 hits since last alert)\|frelsburg.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "frelsburg.com"] [uri "/xmlrpc.php"] [unique_id "al8foy2AfgBt3U_SRLyzfAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 applemooz	2026-07-21 01:22:43 (2 days ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇩🇪 ghostwarriors	2026-07-20 10:50:41 (2 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇹🇭 thaizone.com	2026-07-20 10:36:31 (3 days ago)	Brute-forcing login against websites (D1-1) #1	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-07-20 10:35:41 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 49.149.100.82 (dsl.49.149.100.82.pldt.net): 1 i ... show more (mod_security) mod_security (id:240335) triggered by 49.149.100.82 (dsl.49.149.100.82.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 06:35:35.079926 2026] [security2:error] [pid 6322:tid 6322] [client 49.149.100.82:13140] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 49.149.100.82 (+1 hits since last alert)\|mkdesignndetailing.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mkdesignndetailing.com"] [uri "/xmlrpc.php"] [unique_id "al35928Beq5-YOZloF7w0wAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-20 10:34:02 (3 days ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-20 08:35:54 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 49.149.100.82 (dsl.49.149.100.82.pldt.net): 1 i ... show more (mod_security) mod_security (id:240335) triggered by 49.149.100.82 (dsl.49.149.100.82.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 04:35:46.730775 2026] [security2:error] [pid 13381:tid 13381] [client 49.149.100.82:9616] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 49.149.100.82 (+1 hits since last alert)\|certifiedfarmersmarkets.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "certifiedfarmersmarkets.org"] [uri "/xmlrpc.php"] [unique_id "al3d4nVVKnlaeLMIYYjmoQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 pscriptos	2026-07-20 08:33:50 (3 days ago)	{"ClientAddr":"49.149.100.82:12752","ClientHost":"49.149.100.82","ClientPort":"12752","ClientUsernam ... show more {"ClientAddr":"49.149.100.82:12752","ClientHost":"49.149.100.82","ClientPort":"12752","ClientUsername":"-","DownstreamContentSize":418,"DownstreamStatus":403,"Duration":433110309,"OriginContentSize":418,"OriginDuration":429542378,"OriginStatus":403,"Overhead":3567931,"RequestAddr":"www.cleveradmin.de","RequestContentSize":706,"RequestCount":1578254,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-07-20T10:33:29.442007244+02:00","StartUTC":"2026-07-20T08:33:29.442007244Z","TLSCipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLSVersion":"1.2","entryPointName":"websecure","level":"info","msg":"","time":"2026-07-20T10:33:29+02:00"} {"ClientAddr":"49.149.100.82:12752","ClientHost":"49.149.100.82"," ... show less	Brute-Force Web App Attack
🇩🇪 IP Analyzer	2020-12-14 00:33:51 (5 years ago)	Unauthorized connection attempt from IP address 49.149.100.82 on Port 445(SMB)	Port Scan

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇾 186.16.59.246

🇷🇺 46.8.246.27

🇮🇳 2404:6800:4000:101d::122

🇺🇸 195.184.76.192

🇧🇷 189.127.247.166

🇺🇸 66.132.195.29

🇧🇷 45.165.14.197

🇳🇱 45.148.10.240

🇩🇪 45.135.141.18

🇺🇸 37.123.192.41

🇺🇦 31.128.178.3

🇫🇷 91.231.89.110

🇺🇸 66.132.172.250

🇮🇳 61.2.228.177

🇧🇷 186.250.47.75

🇧🇷 177.20.248.243

🇦🇷 170.0.84.167

🇺🇸 162.216.150.4

🇺🇸 162.216.149.32

🇿🇦 105.225.101.247