This IP address has been reported a total of
17
times from
14 distinct
sources.
179.49.27.106 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 7
reports;
Germany
with 1
report;
Denmark
with 1
report.
The most common categories in these recent reports were:
Bad Web Bot
6
times;
Brute-Force
5
times;
Web App Attack
5
times;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(wordpress) Failed wordpress login from 179.49.27.106 (EC/Ecuador/Pichincha/Quito/corp-179-49-27-106 ...
show more(wordpress) Failed wordpress login from 179.49.27.106 (EC/Ecuador/Pichincha/Quito/corp-179-49-27-106.uio.puntonet.ec/[redacted]): (CF_ENABLE)
show less
(mod_security) mod_security (id:225170) triggered by 179.49.27.106 (corp-179-49-27-106.uio.puntonet. ...
show more(mod_security) mod_security (id:225170) triggered by 179.49.27.106 (corp-179-49-27-106.uio.puntonet.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 06:40:01.578961 2026] [security2:error] [pid 27122:tid 27122] [client 179.49.27.106:14512] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lightbender.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lightbender.net"] [uri "/wp-json/wp/v2/users"] [unique_id "atNQgf5RT9UkpLURShBaAwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Flagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=1,1, C ...
show moreFlagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=1,1, CanaryOverride=90.
show less
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ...
show moreMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
show less
Fail2Ban: 179.49.27.106 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ...
show moreFail2Ban: 179.49.27.106 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
show less
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ...
show moreMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
show less
L7 DDoS: distributed flood on a shop's faceted search โ automated requests to search/sort URLs, one ...
show moreL7 DDoS: distributed flood on a shop's faceted search โ automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded | path: /116-vtt | query: order=product.name.desc&q=Famille-LYKE-XR-Spark
show less
IPBlock protected site ID [1365-l].
Major crawler impostor.
Mozilla/5.0 (Macintosh; Intel Mac OS X ...
show moreIPBlock protected site ID [1365-l].
Major crawler impostor.
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/537.36 (KHTML, like Gecko, Mediapartners-Google) Chrome/89.0.4389.127 Safari/537.36
show less