JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.102.237.115

149.102.237.115

Neutral Activity

16 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Datacamp Limited

Usage Type

Data Center/Web Hosting/Transit

ASN

AS212238

Hostname(s)

unn-149-102-237-115.datapacket.com

Domain Name

datacamp.co.uk

Country

🇮🇹 Italy

City

Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 149.102.237.115:

This IP address has been reported a total of 16 times from 11 distinct sources. 149.102.237.115 was first reported on April 7th 2024, and the most recent report was 3 weeks ago. In the last 60 days, the only reporter location was: Singapore with 1 report. The most common categories in these recent reports were: Brute-Force 1 time; Web App Attack 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 billeasecom	2026-08-15 22:23:11 (3 weeks ago)	Credential-stuffing / bot on consumer login (auth/token): 6 distinct usernames sprayed, 21 failed lo ... show more Credential-stuffing / bot on consumer login (auth/token): 6 distinct usernames sprayed, 21 failed logins, fail-ratio 1.00. Auto-detected & edge-blocked 2026-08-16 06:23 PHT. Automated report. show less	Brute-Force Web App Attack
Anonymous	2025-01-18 05:42:21 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-04-26 19:29:46 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 149.102.237.115 (unn-149-102-237-115.datapacket ... show more (mod_security) mod_security (id:210492) triggered by 149.102.237.115 (unn-149-102-237-115.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 26 15:29:37.586059 2024] [security2:error] [pid 16364] [client 149.102.237.115:26369] [client 149.102.237.115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.214"] [uri "/.env"] [unique_id "ZiwAoXu2plWgndFIUOtFAwAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 hbrks	2024-04-07 12:57:52 (2 years ago)	HEAD http://173.212.231.99/.envstatusCode: 503user-agent:Go-http-client/1.1	Web Spam Hacking Bad Web Bot
🇫🇷 someone	2024-04-07 12:22:59 (2 years ago)	:80 149.102.237.115 - - [07/Apr/2024:14:22:58 +0200] "HEAD /.env HTTP/1.1" 301 168 "-" "Go-http-cli ... show more :80 149.102.237.115 - - [07/Apr/2024:14:22:58 +0200] "HEAD /.env HTTP/1.1" 301 168 "-" "Go-http-client/1.1" show less	Web App Attack
🇺🇸 TPI-Abuse	2024-04-07 11:24:02 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 149.102.237.115 (unn-149-102-237-115.datapacket ... show more (mod_security) mod_security (id:210492) triggered by 149.102.237.115 (unn-149-102-237-115.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 07 07:23:57.971261 2024] [security2:error] [pid 31141:tid 47026171242240] [client 149.102.237.115:24239] [client 149.102.237.115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.128"] [uri "/.env"] [unique_id "ZhKCTSMeo2RI1gSAJL_CywAAAcY"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 ozisp.com.au	2024-04-07 11:07:03 (2 years ago)	ES_PSINet, CDN77_<33>1712488011 [1:2031502:4] ET INFO Request to Hidden Environment File - Inbound [ ... show more ES_PSINet, CDN77_<33>1712488011 [1:2031502:4] ET INFO Request to Hidden Environment File - Inbound [Classification: Misc activity] [Priority: 3] {TCP} 149.102.237.115:22489 show less	Hacking
🇺🇸 FireballDWF	2024-04-07 10:55:15 (2 years ago)	404 NOT FOUND	Web App Attack
🇺🇸 TPI-Abuse	2024-04-07 10:46:17 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 149.102.237.115 (unn-149-102-237-115.datapacket ... show more (mod_security) mod_security (id:210492) triggered by 149.102.237.115 (unn-149-102-237-115.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 07 06:46:13.903370 2024] [security2:error] [pid 17845] [client 149.102.237.115:60853] [client 149.102.237.115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.188"] [uri "/.env"] [unique_id "ZhJ5dUnoTyZAaCQXlW69YAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mdgudell	2024-04-07 10:42:28 (2 years ago)	[Sun Apr 07 05:42:27.802409 2024] [core:info] [pid 713:tid 2867788608] [client 149.102.237.115:27679 ... show more [Sun Apr 07 05:42:27.802409 2024] [core:info] [pid 713:tid 2867788608] [client 149.102.237.115:27679] AH00128: File does not exist: /var/www/html/.env show less	Bad Web Bot Web App Attack
🇺🇸 anon333	2024-04-07 10:33:35 (2 years ago)	Hacker syslog review x 32644.841086523	Hacking
🇺🇸 TPI-Abuse	2024-04-07 09:56:52 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 149.102.237.115 (unn-149-102-237-115.datapacket ... show more (mod_security) mod_security (id:210492) triggered by 149.102.237.115 (unn-149-102-237-115.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 07 05:56:47.255388 2024] [security2:error] [pid 3572] [client 149.102.237.115:34645] [client 149.102.237.115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.94"] [uri "/.env"] [unique_id "ZhJt36TZGgWTqQBozbIybwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 kumiko	2024-04-07 09:34:58 (2 years ago)	[2024-04-07 09:34:58] Probing for dotfiles "HEAD /.env HTTP/1.1" 403	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-04-07 09:30:11 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 149.102.237.115 (unn-149-102-237-115.datapacket ... show more (mod_security) mod_security (id:210492) triggered by 149.102.237.115 (unn-149-102-237-115.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 07 05:30:05.947403 2024] [security2:error] [pid 30831] [client 149.102.237.115:40311] [client 149.102.237.115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.17"] [uri "/.env"] [unique_id "ZhJnnRysq401u2jvmiDdKQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-04-07 09:07:15 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 149.102.237.115 (unn-149-102-237-115.datapacket ... show more (mod_security) mod_security (id:210492) triggered by 149.102.237.115 (unn-149-102-237-115.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 07 05:07:11.235665 2024] [security2:error] [pid 2790435] [client 149.102.237.115:49869] [client 149.102.237.115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.52"] [uri "/.env"] [unique_id "ZhJiP1bUNWT3f9F7GGozMAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 40.124.113.121

🇺🇸 2607:f8b0:4001:c0e::122

🇨🇳 218.92.244.10

🇺🇸 216.25.89.119

🇮🇪 207.254.29.22

🇧🇷 205.210.31.181

🇳🇱 195.178.110.30

🇳🇴 185.12.59.118

🇸🇾 178.253.95.167

🇫🇷 158.220.118.251

🇺🇦 91.207.54.182

🇫🇷 51.68.107.150

🇫🇮 45.87.249.146

🇺🇸 34.94.246.148

🇷🇺 31.76.34.47

🇺🇸 207.5.250.114

🇲🇽 187.141.57.197

🇹🇭 183.88.240.124

🇵🇱 176.53.159.197

🇺🇸 162.216.150.248