2026-06-05 15:43:58
(15 hours ago)
(wordpress) Failed wordpress login from 49.149.107.94 (PH/Philippines/Province of Zamboanga del Sur/ ...
show more
(wordpress) Failed wordpress login from 49.149.107.94 (PH/Philippines/Province of Zamboanga del Sur/Zamboanga City/dsl.49.149.107.94.pldt.net/[redacted])
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-06-05 14:45:08
(16 hours ago)
(mod_security) mod_security (id:240335) triggered by 49.149.107.94 (dsl.49.149.107.94.pldt.net): 1 i ...
show more
(mod_security) mod_security (id:240335) triggered by 49.149.107.94 (dsl.49.149.107.94.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 10:45:02.638539 2026] [security2:error] [pid 1867:tid 1867] [client 49.149.107.94:6090] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 49.149.107.94 (+1 hits since last alert)|matt-bechtel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "matt-bechtel.com"] [uri "/xmlrpc.php"] [unique_id "aiLg7rOHLgyPygI1POj6MgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 14:13:43
(17 hours ago)
(mod_security) mod_security (id:240335) triggered by 49.149.107.94 (dsl.49.149.107.94.pldt.net): 1 i ...
show more
(mod_security) mod_security (id:240335) triggered by 49.149.107.94 (dsl.49.149.107.94.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 10:13:35.939500 2026] [security2:error] [pid 19480:tid 19480] [client 49.149.107.94:9081] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 49.149.107.94 (+1 hits since last alert)|susanoneill.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "susanoneill.us"] [uri "/xmlrpc.php"] [unique_id "aiLZj47HYl9utg5gCqjWtgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 13:11:54
(18 hours ago)
(mod_security) mod_security (id:240335) triggered by 49.149.107.94 (dsl.49.149.107.94.pldt.net): 1 i ...
show more
(mod_security) mod_security (id:240335) triggered by 49.149.107.94 (dsl.49.149.107.94.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 09:11:48.725362 2026] [security2:error] [pid 5468:tid 5468] [client 49.149.107.94:7447] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 49.149.107.94 (+1 hits since last alert)|briannalls.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "briannalls.com"] [uri "/xmlrpc.php"] [unique_id "aiLLFOakRcCwn5zfb5MsOgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ⓔⓜⓙⓔⓔ
2024-03-05 15:52:30
(2 years ago)
SMB 🖴 Honeypot: connected to port 445 by 49.149.107.94: port 59962
Port Scan
🇬🇧
oppidans.net
2021-05-26 22:49:10
(5 years ago)
May 27 02:49:06 ns3092206 kernel: [7392908.778099] [IPTABLES REFUSED] IN=eno1 OUT= MAC=a4:bf:01:23:8 ...
show more
May 27 02:49:06 ns3092206 kernel: [7392908.778099] [IPTABLES REFUSED] IN=eno1 OUT= MAC=a4:bf:01:23:86:16:40:ce:24:b2:7f:7c:08:00 SRC=49.149.107.94 DST=145.239.253.26 LEN=52 TOS=0x00 PREC=0x00 TTL=110 ID=3017 DF PROTO=TCP SPT=4347 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
show less
Port Scan
Hacking
🇺🇸
etu brutus
2021-04-04 02:40:12
(5 years ago)
21/4/4@02:40:10: FAIL: Alarm-Network address from=49.149.107.94
21/4/4@02:40:10: FAIL: Alarm-Network ...
show more
21/4/4@02:40:10: FAIL: Alarm-Network address from=49.149.107.94
21/4/4@02:40:10: FAIL: Alarm-Network address from=49.149.107.94
...
show less
Hacking
Brute-Force
SSH
🇵🇱
ChillScanner
2021-04-03 06:39:06
(5 years ago)
1 probe(s) @ TCP(445)
Port Scan
🇬🇧
oppidans.net
2021-04-01 17:44:21
(5 years ago)
Apr 1 21:44:18 ns3092206 kernel: [2622597.554347] [IPTABLES REFUSED] IN=eno1 OUT= MAC=a4:bf:01:23:8 ...
show more
Apr 1 21:44:18 ns3092206 kernel: [2622597.554347] [IPTABLES REFUSED] IN=eno1 OUT= MAC=a4:bf:01:23:86:16:40:ce:24:b2:7f:7c:08:00 SRC=49.149.107.94 DST=145.239.253.26 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=9659 DF PROTO=TCP SPT=20489 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
show less
Port Scan
Hacking
🇯🇵
IrisFlower
2021-04-01 08:06:24
(5 years ago)
Unauthorized connection attempt detected from IP address 49.149.107.94 to port 445 [T]
Port Scan
🇩🇪
Invisiblemen
2021-03-30 17:45:37
(5 years ago)
Unauthorized connection attempt from IP address 49.149.107.94 on Port 445(SMB)
Port Scan
🇫🇷
Skymote.net
2021-03-29 10:20:53
(5 years ago)
Connection to port tcp/445
Port Scan
🇩🇪
Hiffo
2021-03-28 19:54:13
(5 years ago)
1616975652 - 03/29/2021 01:54:12 Host: 49.149.107.94/49.149.107.94 Port: 445 TCP Blocked
Port Scan