JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.102.224.217

149.102.224.217 was found in our database!

This IP was reported 101 times. Confidence of Abuse is 79%: ?

79%

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-149-102-224-217.datapacket.com
Domain Name	datacamp.co.uk
Country	🇺🇸 United States of America
City	Miami, Florida

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.102.224.217

Whois 149.102.224.217

IP Abuse Reports for 149.102.224.217:

This IP address has been reported a total of 101 times from 62 distinct sources. 149.102.224.217 was first reported on April 10th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-07-07 20:55:58 (2 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇩🇪 konseptit	2026-07-07 20:49:18 (2 days ago)	(wordpress) Failed wordpress login from 149.102.224.217 (US/United States/unn-149-102-224-217.datapa ... show more (wordpress) Failed wordpress login from 149.102.224.217 (US/United States/unn-149-102-224-217.datapacket.com) show less	Brute-Force
🇫🇮 inlink.ltd	2026-07-07 20:41:15 (2 days ago)	Known malicious PHP file or CMS probe	Web App Attack
🇩🇪 Teufel100	2026-07-07 17:41:20 (3 days ago)	Brutforceangriff auf /xmlrpc.php	Brute-Force Hacking Web App Attack
🇪🇸 alferez	2026-07-07 15:56:20 (3 days ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
🇫🇷 dynamix	2026-07-07 01:19:18 (3 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 23:50:47 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 149.102.224.217 (unn-149-102-224-217.datapacket ... show more (mod_security) mod_security (id:240335) triggered by 149.102.224.217 (unn-149-102-224-217.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 19:50:42.929296 2026] [security2:error] [pid 15234:tid 15234] [client 149.102.224.217:33838] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 149.102.224.217 (+1 hits since last alert)\|globalsolutions.technology\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "globalsolutions.technology"] [uri "/xmlrpc.php"] [unique_id "akw_UqTLpRQK5dKeXp5MZAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-07-06 22:48:30 (3 days ago)	(xmlrpc) Failed xmlrpc access from 149.102.224.217 (US/United States/unn-149-102-224-217.datapacket. ... show more (xmlrpc) Failed xmlrpc access from 149.102.224.217 (US/United States/unn-149-102-224-217.datapacket.com): 5 in the last 3600 secs (0-122) show less	Hacking
Anonymous	2026-07-06 22:47:47 (3 days ago)		Bad Web Bot Web App Attack
Anonymous	2026-07-06 11:20:14 (4 days ago)	Attac	Brute-Force
🇺🇸 TPI-Abuse	2026-07-06 09:17:46 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 149.102.224.217 (unn-149-102-224-217.datapacket ... show more (mod_security) mod_security (id:240335) triggered by 149.102.224.217 (unn-149-102-224-217.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 05:17:38.822947 2026] [security2:error] [pid 9275:tid 9275] [client 149.102.224.217:48344] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 149.102.224.217 (+1 hits since last alert)\|lysedzija.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lysedzija.com"] [uri "/xmlrpc.php"] [unique_id "aktysiAAw9wQNcycLLwogwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-06 00:04:29 (4 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 12:06:03 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 149.102.224.217 (unn-149-102-224-217.datapacket ... show more (mod_security) mod_security (id:240335) triggered by 149.102.224.217 (unn-149-102-224-217.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 08:05:55.776736 2026] [security2:error] [pid 1528:tid 1528] [client 149.102.224.217:38954] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 149.102.224.217 (+1 hits since last alert)\|limeroc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "limeroc.com"] [uri "/xmlrpc.php"] [unique_id "akpIo-WszDDoL4vyUPtcXwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TAY	2026-07-05 12:02:28 (5 days ago)	149.102.224.217 - - [05/Jul/2026:20:02:07 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5941 "-" "Jetpack/1 ... show more 149.102.224.217 - - [05/Jul/2026:20:02:07 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5941 "-" "Jetpack/12.1; WordPress/6.4; http://site99621064.com" 149.102.224.217 - - [05/Jul/2026:20:02:17 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5941 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" 149.102.224.217 - - [05/Jul/2026:20:02:28 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5941 "-" "Jetpack/12.0; WordPress/6.2; http://site27564648.com" ... show less	Brute-Force
🇩🇪 konseptit	2026-07-05 11:03:21 (5 days ago)	(wordpress) Failed wordpress login from 149.102.224.217 (US/United States/unn-149-102-224-217.datapa ... show more (wordpress) Failed wordpress login from 149.102.224.217 (US/United States/unn-149-102-224-217.datapacket.com) show less	Brute-Force

Showing 1 to 15 of 101 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 158.94.211.49

🇱🇹 45.227.254.170

🇺🇸 34.86.228.221

🇵🇱 176.53.159.198

🇩🇪 159.89.2.27

🇩🇪 157.230.125.240

🇱🇹 62.60.130.219

🇺🇸 57.154.167.117

🇺🇸 47.251.142.22

🇶🇦 2600:1900:4260:40e::ee

🇵🇱 176.53.159.197

🇸🇬 159.65.143.47

🇭🇰 104.208.108.166

🇻🇳 103.179.174.112

🇹🇭 49.228.233.149

🇳🇱 45.43.157.115

🇦🇪 5.195.242.140

🇦🇹 213.225.11.46

🇺🇸 192.227.67.225

🇺🇸 174.30.13.135