JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.149.108.147

49.149.108.147 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 24%: ?

24%

ISP	HOME_DSL
Usage Type	Fixed Line ISP
ASN	AS9299
Hostname(s)	dsl.49.149.108.147.pldt.net
Domain Name	pldthome.com
Country	🇵🇭 Philippines
City	Zamboanga, Zamboanga Peninsula

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.149.108.147

Whois 49.149.108.147

IP Abuse Reports for 49.149.108.147:

This IP address has been reported a total of 11 times from 7 distinct sources. 49.149.108.147 was first reported on December 19th 2020, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-06 12:17:09 (5 hours ago)	(mod_security) mod_security (id:240335) triggered by 49.149.108.147 (dsl.49.149.108.147.pldt.net): 1 ... show more (mod_security) mod_security (id:240335) triggered by 49.149.108.147 (dsl.49.149.108.147.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 08:17:04.592877 2026] [security2:error] [pid 29708:tid 29708] [client 49.149.108.147:24123] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 49.149.108.147 (+1 hits since last alert)\|crcponcha.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "crcponcha.com"] [uri "/xmlrpc.php"] [unique_id "akucwNkmmcTsqSy6_TbuxQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-06 09:41:14 (8 hours ago)	Attac	Brute-Force
🇺🇸 TPI-Abuse	2026-07-04 11:03:29 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 49.149.108.147 (dsl.49.149.108.147.pldt.net): 1 ... show more (mod_security) mod_security (id:240335) triggered by 49.149.108.147 (dsl.49.149.108.147.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 07:03:24.530178 2026] [security2:error] [pid 29637:tid 29637] [client 49.149.108.147:21514] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 49.149.108.147 (+1 hits since last alert)\|grandpont-house.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "grandpont-house.org"] [uri "/xmlrpc.php"] [unique_id "akjofONY1iEkWWfHfJ_IKQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2026-07-03 14:46:59 (3 days ago)	(wordpress) Failed wordpress login from 49.149.108.147 (PH/Philippines/dsl.49.149.108.147.pldt.net): ... show more (wordpress) Failed wordpress login from 49.149.108.147 (PH/Philippines/dsl.49.149.108.147.pldt.net): (CF_ENABLE) show less	Brute-Force
🇺🇦 URAN Publishing Service	2024-01-31 00:18:30 (2 years ago)	49.149.108.147 - - [31/Jan/2024:02:18:28 +0200] "GET /wp-login.php HTTP/1.1" 404 4784 "-" "Mozilla/5 ... show more 49.149.108.147 - - [31/Jan/2024:02:18:28 +0200] "GET /wp-login.php HTTP/1.1" 404 4784 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 49.149.108.147 - - [31/Jan/2024:02:18:29 +0200] "GET /xmlrpc.php HTTP/1.1" 404 366 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Web App Attack
🇲🇾 Sean64	2021-03-24 19:32:26 (5 years ago)	Mar 25 07:32:23 sean sshd[577853]: Invalid user admin from 49.149.108.147 port 13139 Mar 25 07:32:23 ... show more Mar 25 07:32:23 sean sshd[577853]: Invalid user admin from 49.149.108.147 port 13139 Mar 25 07:32:23 sean sshd[577853]: Failed none for invalid user admin from 49.149.108.147 port 13139 ssh2 Mar 25 07:32:23 sean sshd[577853]: Invalid user admin from 49.149.108.147 port 13139 Mar 25 07:32:23 sean sshd[577853]: Failed none for invalid user admin from 49.149.108.147 port 13139 ssh2 Mar 25 07:32:25 sean sshd[577855]: Invalid user admin from 49.149.108.147 port 9486 ... show less	Brute-Force SSH
🇩🇪 IP Analyzer	2021-01-06 02:04:28 (5 years ago)	Unauthorized connection attempt from IP address 49.149.108.147 on Port 445(SMB)	Port Scan
🇩🇪 IP Analyzer	2020-12-29 05:33:42 (5 years ago)	Unauthorized connection attempt from IP address 49.149.108.147 on Port 445(SMB)	Port Scan
🇩🇪 IP Analyzer	2020-12-22 00:02:50 (5 years ago)	Unauthorized connection attempt from IP address 49.149.108.147 on Port 445(SMB)	Port Scan
🇩🇪 IP Analyzer	2020-12-20 03:00:17 (5 years ago)	Unauthorized connection attempt from IP address 49.149.108.147 on Port 445(SMB)	Port Scan
🇩🇪 Hiffo	2020-12-19 09:10:07 (5 years ago)	1608387006 - 12/19/2020 15:10:06 Host: 49.149.108.147/49.149.108.147 Port: 445 TCP Blocked	Port Scan

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.242.226.71

🇵🇱 176.115.251.18

🇳🇱 172.253.82.212

🇺🇸 151.240.50.224

🇫🇷 141.94.94.103

🇩🇪 130.185.121.29

🇬🇵 5.187.97.40

🇺🇸 2607:f8b0:400c:c00::129

🇰🇷 222.98.44.218

🇵🇰 175.107.1.235

🇧🇩 103.163.117.83

🇧🇩 103.86.198.253

🇷🇴 92.118.39.71

🇭🇰 47.242.37.198

🇧🇪 34.156.240.216

🇨🇳 8.134.157.132

🇫🇷 2a05:d012:5f:db00:5c75:91e6:ab1b:8268

🇺🇸 216.180.246.221

🇺🇸 162.216.150.39

🇵🇱 157.22.46.187