JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

143.244.57.118

Recent Activity

Abuse Confidence Score

100% Critical

5,353 reports

906 reporters · latest 5 minutes ago

ISP: Datacamp Limited
Usage Type: Content Delivery Network
ASN: AS60068
Hostname(s): unn-143-244-57-118.datapacket.com
Domain Name: datacamp.co.uk
Country: 🇫🇷 France
City: Paris, Ile-de-France

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

5,353 from 906 distinct reporters

First reported

February 6th 2021

Most recent report

5 minutes ago

Last 60 days

Top reporter locations 🇩🇪 Germany 258 🇺🇸 United States of America 190 🇫🇷 France 153

Most common categories Web App Attack 874 Brute-Force 445 Bad Web Bot 339 Hacking 288 Port Scan 77

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-11-05 03:12:06 (5 minutes ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 143.244.57.118 172.71.134.240 - - [23/Sep/2026:00:24:01 -0300] "GET //xmlrpc.php?rsd HTTP/1.1" 404 18149	Bad Web Bot
🇵🇱 Budyn	2026-11-05 02:13:02 (1 hour ago)	[Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: prometheus.astropot.website \| Path: /.well-knownold/ \| User-Agent: Unknown User-Agent \| Reque ... show more [Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: prometheus.astropot.website \| Path: /.well-knownold/ \| User-Agent: Unknown User-Agent \| Request: [Empty / GET Request] show less	Hacking Web App Attack
🇦🇺 Klaverstyn	2026-11-04 23:47:00 (3 hours ago)	Persistent attacker, repeat offender	Hacking
🇫🇷 HerrWolf	2026-11-04 19:45:04 (7 hours ago)	CrowdSec Detection: crowdsecurity/http-probing	Web App Attack
🇬🇧 venus.launch.bz	2026-11-04 19:19:30 (7 hours ago)	(wpscan) WordPress probe detected from 143.244.57.118 (FR/France/unn-143-244-57-118.datapacket.com)	Hacking
🇫🇷 security.rdmc.fr	2026-11-04 19:03:21 (8 hours ago)	Activity from blacklisted IP	Hacking
🇳🇱 Alt255	2026-11-04 18:49:22 (8 hours ago)	[ti-02ra] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 143.244.57.118 - - [04/Nov/2026:19:49:04 +0100] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 404 53271 "-" "-" 143.244.57.118 - - [04/N ... show more [ti-02ra] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 143.244.57.118 - - [04/Nov/2026:19:49:04 +0100] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 404 53271 "-" "-" 143.244.57.118 - - [04/Nov/2026:19:49:05 +0100] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 404 53271 "-" "-" 143.244.57.118 - - [04/Nov/2026:19:49:05 +0100] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 404 53271 "-" "-" 143.244.57.118 - - [04/Nov/2026:19:49:06 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 404 53271 "-" "-" 143.244.57.118 - - [04/Nov/2026:19:49:08 +0100] "GET /.well-known/ HTTP/1.1" 404 53271 "-" "-" 143.244.57.118 - - [04/Nov/2026:19:49:09 +0100] "GET /ALFA_DATA/ HTTP/1.1" 404 53271 "-" "-" 143 ... show less	Bad Web Bot Web App Attack
🇩🇪 Admin-Gito	2026-11-04 18:27:26 (8 hours ago)	143.244.57.118 - - [04/Nov/2026:19:23:25 +0100] "GET /wp-includes/IXR/class-IXR-clientmulticall.php HTTP/1.1" 500 442 "-" "-" 143.244.57.118 - - [04/Nov/2026:19:23:28 +0100] "GET /wp-includes/IXR/class-IXR-introspectionserver.php HTTP/1.1" 500 442 "- ... show more 143.244.57.118 - - [04/Nov/2026:19:23:25 +0100] "GET /wp-includes/IXR/class-IXR-clientmulticall.php HTTP/1.1" 500 442 "-" "-" 143.244.57.118 - - [04/Nov/2026:19:23:28 +0100] "GET /wp-includes/IXR/class-IXR-introspectionserver.php HTTP/1.1" 500 442 "-" "-" 143.244.57.118 - - [04/Nov/2026:19:23:33 +0100] "GET /wp-includes/PHPMailer/OAuth.php HTTP/1.1" 500 442 "-" "-" 143.244.57.118 - - [04/Nov/2026:19:24:04 +0100] "GET /wp-includes/Requests/library/Requests.php HTTP/1.1" 500 442 "-" "-" 143.244.57.118 - - [04/Nov/2026:19:24:10 +0100] "GET /wp-includes/Requests/src/Auth/Basic.php HTTP/1.1" 500 442 "-" "-" 143.244.57.118 - - [04/Nov/2026:19:24:16 +0100] "GET /wp-includes/Requests/src/Exception/ArgumentCount.php HTTP/1.1" 500 442 "-" "-" 143.244.57.118 - - [04/Nov/2026:19:24:18 +0100] "GET /wp-includes/Requests/src/Exception/Http.php HTTP/1.1" 500 792 "-" "-" 143.244.57.118 - - [04/Nov/2026:19:24:22 +0100] "GET /wp-includes/Requests/src/Exception/Http/Status304.php HTTP/1.1" 500 442 "-" "-" ... show less	Web App Attack
🇩🇪 FeG Deutschland	2026-11-04 18:17:04 (9 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇵🇱 Budyn	2026-11-04 17:44:28 (9 hours ago)	[Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: docker.sweetpuddingtrap.xyz \| Path: /.well-knownold/ \| User-Agent: Unknown User-Agent \| Reque ... show more [Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: docker.sweetpuddingtrap.xyz \| Path: /.well-knownold/ \| User-Agent: Unknown User-Agent \| Request: [Empty / GET Request] show less	Hacking Web App Attack
🇬🇧 Apache	2026-11-04 17:29:49 (9 hours ago)	(mod_security) mod_security (id:210410) triggered by 143.244.57.118 (FR/France/unn-143-244-57-118.datapacket.com): 5 in the last 300 secs (CF_ENABLE)	Brute-Force Web App Attack
🇺🇸 dot.mg	2026-11-04 16:52:20 (10 hours ago)	Abuse on login/xmlrpc	Brute-Force
🇩🇪 Holger	2026-11-04 16:45:49 (10 hours ago)	URL probing: GET //xmlrpc.php?rsd	Web App Attack
🇳🇱 Albram	2026-11-04 15:49:16 (11 hours ago)	HTTP automated scanner flood ...	Bad Web Bot
🇩🇪 rh24	2026-11-04 15:34:33 (11 hours ago)	(secretscan) Secret-Scanner (env/git/ssh/credentials) from 143.244.57.118 (FR/France/unn-143-244-57-118.datapacket.com)	Hacking

Showing 1 to 15 of 5353 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 205.210.31.203

🇧🇷 177.43.105.11

🇺🇸 162.216.149.167

🇫🇮 147.185.133.185

🇫🇮 147.185.133.130

🇳🇬 143.105.113.6

🇺🇸 137.184.50.8

🇫🇷 91.196.152.30

🇳🇱 77.238.239.20

🇺🇸 66.132.172.41

🇲🇾 49.124.152.215

🇺🇸 45.204.116.147

🇫🇷 31.24.243.6

🇬🇧 209.97.131.192

🇧🇬 193.24.211.219

🇵🇰 182.190.212.136

🇹🇹 181.118.57.79

🇫🇷 169.58.170.255

🇨🇳 110.166.67.189

🇳🇴 85.165.130.77