JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.102.233.44

149.102.233.44 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 63%: ?

63%

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-149-102-233-44.datapacket.com
Domain Name	datacamp.co.uk
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.102.233.44

Whois 149.102.233.44

IP Abuse Reports for 149.102.233.44:

This IP address has been reported a total of 43 times from 30 distinct sources. 149.102.233.44 was first reported on September 21st 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 lostswordfish.com	2026-07-13 07:32:04 (2 days ago)	Wordfence waf block on lostswordfish	Web App Attack
🇷🇺 DZBOT	2026-07-13 06:25:13 (2 days ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇩🇪 maxpower	2026-07-13 05:54:38 (2 days ago)	(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 149.102.233.44 (BR/Brazil/unn-149-102-233-44.d ... show more (nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 149.102.233.44 (BR/Brazil/unn-149-102-233-44.datapacket.com): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/07/13 07:54:30 [error] 643243#643243: 439297 access forbidden by rule, client: 149.102.233.44, server: italpmiabruzzo.conapipescara.it, request: "GET //xmlrpc.php?rsd HTTP/2.0", host: "italpmiabruzzo.it" 2026/07/13 07:54:34 [error] 643243#643243: 439297 access forbidden by rule, client: 149.102.233.44, server: italpmiabruzzo.conapipescara.it, request: "GET //?author=1 HTTP/2.0", host: "italpmiabruzzo.it" 2026/07/13 07:54:35 [error] 643243#643243: 439297 access forbidden by rule, client: 149.102.233.44, server: italpmiabruzzo.conapipescara.it, request: "GET //?author=2 HTTP/2.0", host: "italpmiabruzzo.it" show less	Port Scan
🇨🇦 electronico	2026-07-13 05:52:34 (2 days ago)	149.102.233.44 - - [13/Jul/2026:16:52:33 +1100] "GET //xmlrpc.php?rsd HTTP/1.1" 404 2111 "-" "Mozill ... show more 149.102.233.44 - - [13/Jul/2026:16:52:33 +1100] "GET //xmlrpc.php?rsd HTTP/1.1" 404 2111 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 05:36:09 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 149.102.233.44 (unn-149-102-233-44.datapacket.c ... show more (mod_security) mod_security (id:225170) triggered by 149.102.233.44 (unn-149-102-233-44.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 01:36:02.212475 2026] [security2:error] [pid 30641:tid 30641] [client 149.102.233.44:64377] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.circleofsound.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.circleofsound.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "alR5QhciLX1I8LRtqnNSWwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 05:17:03 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 149.102.233.44 (unn-149-102-233-44.datapacket.c ... show more (mod_security) mod_security (id:225170) triggered by 149.102.233.44 (unn-149-102-233-44.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 01:16:59.439450 2026] [security2:error] [pid 30848:tid 30848] [client 149.102.233.44:63796] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cashforjunkcars.info\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cashforjunkcars.info"] [uri "/wordpress/wp-json/wp/v2/users/"] [unique_id "alR0y98le14Oofc7sIzD_AAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 04:47:39 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 149.102.233.44 (unn-149-102-233-44.datapacket.c ... show more (mod_security) mod_security (id:225170) triggered by 149.102.233.44 (unn-149-102-233-44.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 00:47:34.533674 2026] [security2:error] [pid 15068:tid 15068] [client 149.102.233.44:63790] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.bonvivantorganics.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.bonvivantorganics.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "alRt5j5HuwOEJ13pkDXMSwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Catalin Negru	2026-07-13 04:43:41 (2 days ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇧🇪 taivas.nl	2026-07-13 04:32:09 (2 days ago)	Bad_requests	Bad Web Bot
🇮🇩 Burayot	2026-07-13 04:28:40 (2 days ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 149.102.233.44 (BR/Brazil/unn-149-1 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 149.102.233.44 (BR/Brazil/unn-149-102-233-44.datapacket.com): 1 in the last 3600 secs show less	Web App Attack
Anonymous	2026-07-13 04:20:02 (2 days ago)	\| [Dangerous/Brazil] Aggressive IP 149.102.233.44 (~30 hits). Type: DoS Defender- Web server 400 err ... show more \| [Dangerous/Brazil] Aggressive IP 149.102.233.44 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
Anonymous	2026-07-13 04:15:19 (2 days ago)	149.102.233.44 - - [13/Jul/2026:06:15:17 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 432 ... show more 149.102.233.44 - - [13/Jul/2026:06:15:17 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.102.233.44 - - [13/Jul/2026:06:15:17 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 271 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.102.233.44 - - [13/Jul/2026:06:15:18 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.102.233.44 - - [13/Jul/2026:06:15:18 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 271 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.102.233.44 - - [13/Jul/2026:06:15:19 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 27 ... show less	Brute-Force Web App Attack
🇧🇷 KingHost	2026-06-11 22:56:41 (1 month ago)		Brute-Force
🇺🇸 TPI-Abuse	2026-06-03 23:31:39 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 149.102.233.44 (unn-149-102-233-44.datapacket.c ... show more (mod_security) mod_security (id:210492) triggered by 149.102.233.44 (unn-149-102-233-44.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 19:31:34.619177 2026] [security2:error] [pid 22168:tid 22168] [client 149.102.233.44:49254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "17thstreetrealty.com"] [uri "/.env"] [unique_id "aiC5Vo4rxz268mI0bw3EsQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Tilellit.PRO	2026-05-31 01:27:32 (1 month ago)	Fail2Ban banned 149.102.233.44 for security violations in jail wp-armour. Log: 2026/05/31 01:27:31 [ ... show more Fail2Ban banned 149.102.233.44 for security violations in jail wp-armour. Log: 2026/05/31 01:27:31 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 149.102.233.44 \| Target: wplogin" , client: 149.102.233.44, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED] ... show less	Web Spam

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇦 190.14.223.70

🇻🇳 171.231.199.155

🇭🇰 123.58.210.86

🇫🇷 85.217.140.8

🇺🇸 45.74.252.205

🇨🇳 221.13.93.11

🇬🇧 198.244.240.198

🇳🇱 172.94.9.55

🇺🇸 162.216.150.170

🇨🇳 60.16.174.161

🇳🇱 45.156.87.13

🇳🇱 23.109.176.30

🇸🇬 209.97.169.43

🇦🇷 170.155.2.13

🇨🇳 123.144.24.76

🇺🇸 104.165.203.129

🇮🇳 103.161.30.74

🇺🇸 96.78.175.45

🇫🇷 85.217.140.9

🇧🇬 78.90.19.40