JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.100.49.128

94.100.49.128 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 49%: ?

49%

ISP	TEL COMMUNICATIONS L.L.C.
Usage Type	Fixed Line ISP
ASN	AS47588
Domain Name	telcommunications.net
Country	🇽🇰 Kosovo
City	Prizren, Prizren

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.100.49.128

Whois 94.100.49.128

IP Abuse Reports for 94.100.49.128:

This IP address has been reported a total of 15 times from 13 distinct sources. 94.100.49.128 was first reported on September 24th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 AWW-Admin	2026-07-06 07:58:26 (2 days ago)	(wordpress) Failed wordpress login from 94.100.49.128 (RS/Serbia/-)	Brute-Force
🇬🇷 Staging	2026-07-06 07:40:00 (2 days ago)	haha !	Bad Web Bot Hacking
🇨🇦 electronico	2026-07-06 02:36:39 (2 days ago)	94.100.49.128 - - [06/Jul/2026:13:36:00 +1100] "GET /wp-login.php HTTP/1.1" 403 5922 "-" "Mozilla/5. ... show more 94.100.49.128 - - [06/Jul/2026:13:36:00 +1100] "GET /wp-login.php HTTP/1.1" 403 5922 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 94.100.49.128 - - [06/Jul/2026:13:36:09 +1100] "GET /wp-login.php HTTP/1.1" 301 487 "https://www.google.com/search?q=wordpress" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 94.100.49.128 - - [06/Jul/2026:13:36:38 +1100] "GET /wp-admin/ HTTP/1.1" 302 4258 "https://www.google.com/search?q=wordpress" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" ... show less	Brute-Force Web App Attack
🇹🇷 baku.hosting	2026-07-05 21:18:45 (2 days ago)	CSF Auto Report: (cpanel) Failed cPanel login from 94.100.49.128 (XK/Kosovo/-): 4 in the last 3600 s ... show more CSF Auto Report: (cpanel) Failed cPanel login from 94.100.49.128 (XK/Kosovo/-): 4 in the last 3600 secs show less	Brute-Force Web App Attack
🇺🇸 kosada.com	2026-06-29 09:42:08 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇿🇦 hostsec_za	2026-06-28 12:05:00 (1 week ago)	WHM Auth Attack. 20 failed logins in 1 hour.	Brute-Force
🇺🇸 TPI-Abuse	2026-06-16 11:28:01 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 94.100.49.128 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 94.100.49.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 07:27:56.249299 2026] [security2:error] [pid 13204:tid 13204] [client 94.100.49.128:48904] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|pswebsite.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pswebsite.com"] [uri "/youtube.com"] [unique_id "ajEzPGX5XMB4qcCEteDmewAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Dorian GRANDHAY	2026-06-07 22:30:00 (1 month ago)	(cpanel) Failed cPanel login from 94.100.49.128 (AL/Albania/-): 5 in the last 3600 secs; Ports: ; D ... show more (cpanel) Failed cPanel login from 94.100.49.128 (AL/Albania/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-06-08 00:26:02 +0200] info [whostmgrd] 94.100.49.128 - root "POST /login HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-06-08 00:26:39 +0200] info [whostmgrd] 94.100.49.128 - root "POST /login HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-06-08 00:26:42 +0200] info [whostmgrd] 94.100.49.128 - root "POST /login HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-06-08 00:29:36 +0200] info [whostmgrd] 94.100.49.128 - root "POST /login HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-06-08 00:29:54 +0200] info [whostmgrd] 94.100.49.128 - root "POST /login HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect show less	Port Scan
🇬🇧 PeravixGroup	2026-06-06 23:05:01 (1 month ago)	CSF brute force detection on cpanel	Brute-Force
🇺🇸 vertali	2026-06-06 22:19:01 (1 month ago)	CSF/LFD blocked 94.100.49.128 after LF_CPANEL on * (inout, perm=1, ttl=1s). Reason: (cpanel) Failed ... show more CSF/LFD blocked 94.100.49.128 after LF_CPANEL on * (inout, perm=1, ttl=1s). Reason: (cpanel) Failed cPanel login from 94.100.49.128 (XK/Kosovo/-): 5 in the last 3600 secs. Evidence: [2026-06-06 17:18:54 -0500] info [whostmgrd] 94.100.49.128 - - "GET /openid_connect/cpanelid HTTP/1.1" FAILED LOGIN whostmgrd: openid connect: 'whostmgrd' provider 'cpanelid' encountered an error: (XID znyugc) The [asis, show less	Brute-Force Web App Attack SSH
🇺🇸 vertali	2026-06-05 21:29:54 (1 month ago)	CSF/LFD blocked 94.100.49.128 after LF_CPANEL on * (inout, perm=1, ttl=1s). Reason: (cpanel) Failed ... show more CSF/LFD blocked 94.100.49.128 after LF_CPANEL on * (inout, perm=1, ttl=1s). Reason: (cpanel) Failed cPanel login from 94.100.49.128 (XK/Kosovo/-): 5 in the last 3600 secs. Evidence: [2026-06-05 16:29:47 -0500] info [whostmgrd] 94.100.49.128 - - "GET /openid_connect/cpanelid HTTP/1.1" FAILED LOGIN whostmgrd: openid connect: 'whostmgrd' provider 'cpanelid' encountered an error: (XID qmwccr) The [asis, show less	Brute-Force Web App Attack SSH
🇹🇷 baku.hosting	2026-05-31 01:32:16 (1 month ago)	CSF Auto Report: (cpanel) Failed cPanel login from 94.100.49.128 (XK/Kosovo/-): 4 in the last 3600 s ... show more CSF Auto Report: (cpanel) Failed cPanel login from 94.100.49.128 (XK/Kosovo/-): 4 in the last 3600 secs show less	Brute-Force Web App Attack
🇷🇴 gtheo99	2026-05-23 22:42:22 (1 month ago)	(cpanel) Failed cPanel login from 94.100.49.128 (XK/Kosovo/-): 2 in the last 900 secs	Brute-Force Web App Attack
Anonymous	2026-04-12 11:23:34 (2 months ago)	(wordpress) Failed wordpress login from 94.100.49.128 (RS/Serbia/-)	Brute-Force
🇳🇱 exxos	2025-09-24 19:03:01 (9 months ago)	Attacks with Bad user agents	Hacking

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 118.194.228.101

🇫🇷 51.68.236.71

🇳🇱 45.148.10.240

🇮🇹 2a05:d01a:5b1:e202:69ca:c781:d513:a383

🇺🇸 2607:f8b0:4023:1006::12c

🇺🇸 173.252.82.146

🇺🇸 173.252.82.145

🇺🇸 165.22.34.189

🇮🇳 122.168.194.41

🇻🇳 103.167.89.222

🇮🇳 103.38.219.22

🇳🇱 45.148.10.152

🇸🇳 41.82.50.218

🇺🇸 184.154.76.56

🇧🇷 177.85.247.230

🇹🇼 114.32.185.30

🇳🇱 91.92.40.237

🇨🇴 45.81.105.33

🇮🇪 3.249.209.198

🇺🇸 184.105.247.236