JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.102.234.68

149.102.234.68 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 2%: ?

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-149-102-234-68.datapacket.com
Domain Name	datacamp.co.uk
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.102.234.68

Whois 149.102.234.68

IP Abuse Reports for 149.102.234.68:

This IP address has been reported a total of 21 times from 13 distinct sources. 149.102.234.68 was first reported on October 25th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 KingHost	2026-07-11 01:20:55 (2 weeks ago)		Brute-Force
🇩🇪 SCHAPPY	2026-05-08 00:22:29 (2 months ago)	Brute-force attack to identify web exploits	Brute-Force Web App Attack
Anonymous	2026-04-21 21:30:16 (3 months ago)	149.102.234.68 - - [21/Apr/2026:23:30:13 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.0" 404 457 ... show more 149.102.234.68 - - [21/Apr/2026:23:30:13 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.0" 404 457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 149.102.234.68 - - [21/Apr/2026:23:30:13 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 277 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 149.102.234.68 - - [21/Apr/2026:23:30:15 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.0" 404 457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 149.102.234.68 - - [21/Apr/2026:23:30:15 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 277 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 149.102.234.68 - - [21/Apr/2026:23:30:15 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.0" 404 45 ... show less	Brute-Force Web App Attack
🇫🇷 ELYAZ	2026-04-21 21:08:49 (3 months ago)	(y3) Failed access -byebye- from 149.102.234.68 (BR/Brazil/unn-149-102-234-68.datapacket.com): (CF_ ... show more (y3) Failed access -byebye- from 149.102.234.68 (BR/Brazil/unn-149-102-234-68.datapacket.com): (CF_ENABLE) show less	Hacking
🇺🇸 WellSpring	2026-04-21 17:17:45 (3 months ago)	Automated probe detected by Ody Sentinel / WellSpr.ing. Type: wordpress_scan. Path: /website/wp-incl ... show more Automated probe detected by Ody Sentinel / WellSpr.ing. Type: wordpress_scan. Path: /website/wp-includes/wlwmanifest.xml. Auto-blocked after threshold exceeded. Dossier: https://wellspr.ing/dossier/sentinel-149-102-234-68 show less	Web App Attack
🇧🇪 cmbplf	2026-04-21 15:31:17 (3 months ago)	26.387 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-21 15:29:42 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 149.102.234.68 (unn-149-102-234-68.datapacket.c ... show more (mod_security) mod_security (id:225170) triggered by 149.102.234.68 (unn-149-102-234-68.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 11:29:37.696077 2026] [security2:error] [pid 112826:tid 112826] [client 149.102.234.68:51359] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|topofbig4.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "topofbig4.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aeeX4TTEsQ0GsV8oaOk5wAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-21 14:50:38 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 149.102.234.68 (unn-149-102-234-68.datapacket.c ... show more (mod_security) mod_security (id:225170) triggered by 149.102.234.68 (unn-149-102-234-68.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 10:50:32.117540 2026] [security2:error] [pid 2023:tid 2060] [client 149.102.234.68:53543] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.peterhansenranch.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.peterhansenranch.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aeeOuIkZvgRhNXNKUmxaqQAAAII"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 launch.joomla.org	2026-03-11 18:09:00 (4 months ago)	Phishing	Fraud Orders Phishing VPN IP
🇧🇪 cmbplf	2026-03-11 01:27:39 (4 months ago)	242 requests with url.path */wp-includes/wlwmanifest.xml	Brute-Force Bad Web Bot
Anonymous	2026-03-10 21:08:20 (4 months ago)	149.102.234.68 - - [10/Mar/2026:23:08:17 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.0" 404 458 ... show more 149.102.234.68 - - [10/Mar/2026:23:08:17 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.0" 404 458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.102.234.68 - - [10/Mar/2026:23:08:17 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 278 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.102.234.68 - - [10/Mar/2026:23:08:19 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.0" 404 458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.102.234.68 - - [10/Mar/2026:23:08:19 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 278 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.102.234.68 - - [10/Mar/2026:23:08:19 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.0" 404 45 ... show less	Brute-Force Web App Attack
🇺🇸 AutoAddOnStore	2026-01-22 19:52:00 (6 months ago)	probing for vulnerabilities	Hacking Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-01-22 00:13:26 (6 months ago)	326 requests with url.path */wp-includes/wlwmanifest.xml	Brute-Force Bad Web Bot
🇮🇹 VHosting	2026-01-21 23:40:04 (6 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇨🇦 1gz	2026-01-21 22:41:03 (6 months ago)	Triggered Cloudflare WAF (firewallManaged) from BR. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from BR. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-config.php~ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:400e:c0c::121

🇨🇳 223.199.184.99

🇭🇰 139.198.113.29

🇮🇳 125.62.213.250

🇺🇸 107.150.100.178

🇨🇭 92.119.165.164

🇺🇿 84.54.71.58

🇧🇬 79.124.62.230

🇧🇬 79.124.58.90

🇩🇪 69.5.169.86

🇩🇪 69.5.169.53

🇺🇸 64.62.197.182

🇳🇱 45.154.98.52

🇸🇬 43.172.197.85

🇺🇸 40.124.173.173

🇬🇧 35.203.210.216

🇬🇧 35.203.210.189

🇬🇧 35.203.210.101

🇩🇪 34.159.18.221

🇧🇪 34.79.124.116