JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.36.48.74

149.36.48.74 was found in our database!

This IP was reported 469 times. Confidence of Abuse is 49%: ?

49%

ISP	CDN77
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-149-36-48-74.datapacket.com
Domain Name	cdn77.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.36.48.74

Whois 149.36.48.74

IP Abuse Reports for 149.36.48.74:

This IP address has been reported a total of 469 times from 140 distinct sources. 149.36.48.74 was first reported on November 28th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 rh24	2026-07-28 00:54:42 (1 day ago)	(wordpress) Failed wordpress login from 149.36.48.74 (US/United States/unn-149-36-48-74.datapacket.c ... show more (wordpress) Failed wordpress login from 149.36.48.74 (US/United States/unn-149-36-48-74.datapacket.com): (CF_ENABLE) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-07-24 13:31:06 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 149.36.48.74 (unn-149-36-48-74.datapacket.com): ... show more (mod_security) mod_security (id:240335) triggered by 149.36.48.74 (unn-149-36-48-74.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 09:30:59.775094 2026] [security2:error] [pid 26961:tid 26986] [client 149.36.48.74:60892] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 149.36.48.74 (+1 hits since last alert)\|whatismetamodern.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "whatismetamodern.com"] [uri "/xmlrpc.php"] [unique_id "amNpE7hKB0yKhz7bh3B5IwAAAJI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-24 09:33:26 (4 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-07-22 20:02:49 (6 days ago)	[redacted] 149.36.48.74 - - [22/Jul/2026:22:02:05 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Je ... show more [redacted] 149.36.48.74 - - [22/Jul/2026:22:02:05 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 149.36.48.74 - - [22/Jul/2026:22:02:15 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.3; http://site27565802.com" [redacted] 149.36.48.74 - - [22/Jul/2026:22:02:26 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 149.36.48.74 - - [22/Jul/2026:22:02:36 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 149.36.48.74 - - [22/Jul/2026:22:02:47 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 23:33:07 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 149.36.48.74 (unn-149-36-48-74.datapacket.com): ... show more (mod_security) mod_security (id:240335) triggered by 149.36.48.74 (unn-149-36-48-74.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 19:33:00.996914 2026] [security2:error] [pid 22211:tid 22211] [client 149.36.48.74:57068] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 149.36.48.74 (+1 hits since last alert)\|dalessalesandservice.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dalessalesandservice.com"] [uri "/xmlrpc.php"] [unique_id "amABrH5FSiWjbmWsnKsZ9wAAAC0"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-21 13:38:50 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 02:57:43 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 149.36.48.74 (unn-149-36-48-74.datapacket.com): ... show more (mod_security) mod_security (id:240335) triggered by 149.36.48.74 (unn-149-36-48-74.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 22:57:36.246879 2026] [security2:error] [pid 3783931:tid 3783931] [client 149.36.48.74:40568] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 149.36.48.74 (+1 hits since last alert)\|nypatriotcards.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "nypatriotcards.com"] [uri "/xmlrpc.php"] [unique_id "al7gIEytYCdNCU6RUii5swAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-07-20 20:19:00 (1 week ago)	(xmlrpc) Failed xmlrpc access from 149.36.48.74 (US/United States/unn-149-36-48-74.datapacket.com): ... show more (xmlrpc) Failed xmlrpc access from 149.36.48.74 (US/United States/unn-149-36-48-74.datapacket.com): 5 in the last 3600 secs (0-122) show less	Hacking
🇺🇸 TPI-Abuse	2026-07-19 17:10:49 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 149.36.48.74 (unn-149-36-48-74.datapacket.com): ... show more (mod_security) mod_security (id:240335) triggered by 149.36.48.74 (unn-149-36-48-74.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 13:10:45.354888 2026] [security2:error] [pid 14906:tid 14988] [client 149.36.48.74:57066] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 149.36.48.74 (+1 hits since last alert)\|abusaimeh.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "abusaimeh.com"] [uri "/xmlrpc.php"] [unique_id "al0FFcON7POHqFtge239zQAAAQs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-19 01:09:20 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 22:30:38 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 149.36.48.74 (unn-149-36-48-74.datapacket.com): ... show more (mod_security) mod_security (id:240335) triggered by 149.36.48.74 (unn-149-36-48-74.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 18:30:35.290416 2026] [security2:error] [pid 1093871:tid 1093871] [client 149.36.48.74:42630] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 149.36.48.74 (+1 hits since last alert)\|lightbender.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lightbender.net"] [uri "/xmlrpc.php"] [unique_id "alv-i7SdYYQW1nVPPOruOwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-18 21:09:34 (1 week ago)	[redacted] 149.36.48.74 - - [18/Jul/2026:23:08:50 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Wo ... show more [redacted] 149.36.48.74 - - [18/Jul/2026:23:08:50 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 149.36.48.74 - - [18/Jul/2026:23:09:00 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3)" [redacted] 149.36.48.74 - - [18/Jul/2026:23:09:11 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.4; http://site48682269.com" [redacted] 149.36.48.74 - - [18/Jul/2026:23:09:21 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3)" [redacted] 149.36.48.74 - - [18/Jul/2026:23:09:32 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 21:12:33 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 149.36.48.74 (unn-149-36-48-74.datapacket.com): ... show more (mod_security) mod_security (id:240335) triggered by 149.36.48.74 (unn-149-36-48-74.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 17:12:27.609890 2026] [security2:error] [pid 1342147:tid 1342147] [client 149.36.48.74:55012] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 149.36.48.74 (+1 hits since last alert)\|persnicketyinc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "persnicketyinc.com"] [uri "/xmlrpc.php"] [unique_id "alqauythuQFb_ZzIWlRIfgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-07-17 16:37:00 (1 week ago)	(xmlrpc) Failed xmlrpc access from 149.36.48.74 (US/United States/unn-149-36-48-74.datapacket.com): ... show more (xmlrpc) Failed xmlrpc access from 149.36.48.74 (US/United States/unn-149-36-48-74.datapacket.com): 5 in the last 3600 secs (0-122) show less	Hacking
Anonymous	2026-07-16 20:36:11 (1 week ago)	[redacted] 149.36.48.74 - - [16/Jul/2026:22:35:24 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Je ... show more [redacted] 149.36.48.74 - - [16/Jul/2026:22:35:24 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.4; http://site14517416.com" [redacted] 149.36.48.74 - - [16/Jul/2026:22:35:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 149.36.48.74 - - [16/Jul/2026:22:35:45 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 149.36.48.74 - - [16/Jul/2026:22:35:56 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 149.36.48.74 - - [16/Jul/2026:22:36:07 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.1; http://site71099148.com" ... show less	Hacking Web App Attack

Showing 1 to 15 of 469 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 147.90.227.202

🇺🇸 65.49.1.175

🇺🇸 65.49.1.67

🇺🇸 2604:a880:400:d1:0:4:c254:7001

🇷🇺 212.164.65.214

🇪🇨 200.24.131.229

🇺🇸 195.184.76.22

🇩🇪 159.69.188.242

🇨🇦 158.69.60.229

🇺🇸 135.119.89.57

🇰🇷 116.123.150.231

🇮🇳 103.216.145.2

🇫🇷 80.87.206.19

🇸🇬 13.250.26.211

🇮🇷 5.126.247.170

🇰🇷 220.118.173.234

🇭🇰 119.246.15.94

🇵🇰 119.157.76.161

🇨🇭 104.244.72.115

🇧🇾 93.84.97.4