JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

149.102.237.36

Neutral Activity

Abuse confidence score ?

0% Low Risk

91 reports

38 reporters · latest 2 years ago

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-149-102-237-36.datapacket.com
Domain Name	datacamp.co.uk
Country	🇮🇹 Italy
City	Milan, Lombardy

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

149.102.237.36 has been reported 91 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 149.102.237.36

Export CSV

This IP address has been reported a total of 91 times from 38 distinct sources. 149.102.237.36 was first reported on January 24th 2024, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 MAGIC	2024-07-06 15:03:52 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇳🇱 Linuxmalwarehuntingnl	2024-07-01 10:34:48 (2 years ago)	Unauthorized connection attempt	Brute-Force
🇺🇸 raymarron.com	2024-06-21 14:11:50 (2 years ago)	/wp-config.php.bak	Exploited Host Web App Attack
Anonymous	2024-06-18 08:25:00 (2 years ago)	Blocked by firewall for Known malicious User-Agents 18/06/2024 06:41:59 (2 hours 43 mins ago) IP ... show more Blocked by firewall for Known malicious User-Agents 18/06/2024 06:41:59 (2 hours 43 mins ago) IP: 149.102.237.36 Hostname: unn-149-102-237-36.datapacket.com Human/Bot: Human Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0 show less	Hacking Web App Attack
🇧🇷 hostseries	2024-06-18 06:14:31 (2 years ago)	Trigger: LF_MODSEC	Brute-Force
🇧🇪 taivas.nl	2024-06-18 04:32:34 (2 years ago)	Many_bad_calls	Web App Attack
🇦🇺 MAGIC	2024-06-18 04:00:11 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2024-06-17 21:08:11 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 149.102.237.36 (unn-149-102-237-36.datapacket.c ... show more (mod_security) mod_security (id:210492) triggered by 149.102.237.36 (unn-149-102-237-36.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 17 17:08:05.839911 2024] [security2:error] [pid 1268356:tid 47380970632960] [client 149.102.237.36:16625] [client 149.102.237.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tobiume-shounika.com"] [uri "/wp-config.php.bak"] [unique_id "ZnCltb4LKxMoUAkn8cnwrAAAAEI"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 akac	2024-06-17 20:02:11 (2 years ago)	Web vulnerability scanning: HTTP/1.0 GET /wp-config.php.bak	Hacking Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-06-17 19:14:08 (2 years ago)	[20:14:06] 4: Exploit attempt against non-existent file - /wp-config.php.bak	Hacking Web App Attack
🇺🇸 TPI-Abuse	2024-06-17 18:07:43 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 149.102.237.36 (unn-149-102-237-36.datapacket.c ... show more (mod_security) mod_security (id:210492) triggered by 149.102.237.36 (unn-149-102-237-36.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 17 14:07:37.578608 2024] [security2:error] [pid 20040] [client 149.102.237.36:29447] [client 149.102.237.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kingmanrents.com"] [uri "/wp-config.php.bak"] [unique_id "ZnB7acb1t0cZv4kU3SQ33gAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 taivas.nl	2024-06-17 16:02:14 (2 years ago)	Bad_requests	Bad Web Bot
🇺🇸 TPI-Abuse	2024-06-17 14:09:36 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 149.102.237.36 (unn-149-102-237-36.datapacket.c ... show more (mod_security) mod_security (id:210492) triggered by 149.102.237.36 (unn-149-102-237-36.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 17 10:09:31.995783 2024] [security2:error] [pid 31709] [client 149.102.237.36:28403] [client 149.102.237.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dodojuice.com"] [uri "/wp-config.php.bak"] [unique_id "ZnBDm_C0uA9c4EJoXlMJHgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-06-17 11:24:39 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 149.102.237.36 (unn-149-102-237-36.datapacket.c ... show more (mod_security) mod_security (id:210492) triggered by 149.102.237.36 (unn-149-102-237-36.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 17 07:24:35.273997 2024] [security2:error] [pid 14836] [client 149.102.237.36:17993] [client 149.102.237.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "namefinder.com"] [uri "/wp-config.php.bak"] [unique_id "ZnAc8yOu0DrSwvl0cUpw5gAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 syokadmin	2024-06-17 10:35:11 (2 years ago)	(mod_security) mod_security (id:77350212) triggered by 149.102.237.36 (IT/Italy/unn-149-102-237-36.d ... show more (mod_security) mod_security (id:77350212) triggered by 149.102.237.36 (IT/Italy/unn-149-102-237-36.datapacket.com): 1 in the last 3600 secs show less	Brute-Force

Showing 1 to 15 of 91 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.151.98.48

🇧🇷 186.225.232.202

🇺🇸 143.42.1.201

🇨🇳 139.170.72.209

🇯🇵 45.66.130.222

🇵🇷 24.139.90.50

🇺🇸 207.90.244.28

🇷🇺 194.135.123.68

🇩🇪 193.233.198.196

🇩🇪 193.233.75.74

🇧🇴 181.115.171.3

🇧🇷 177.22.66.156

🇺🇸 172.236.228.224

🇨🇳 39.100.78.44

🇨🇦 38.162.201.105

🇸🇦 37.243.251.78

🇨🇳 14.115.252.101

🇺🇸 2600:8805:a207:700:b956:ec4a:7fbf:fa1b

🇷🇺 212.104.70.143

🇿🇦 110.238.79.180