JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

149.102.247.251

Recent Activity

Abuse confidence score ?

75% Critical

130 reports

76 reporters · latest 7 hours ago

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-149-102-247-251.datapacket.com
Domain Name	datacamp.co.uk
Country	🇭🇷 Croatia
City	Zagreb, Zagreb

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 149.102.247.251

Export CSV

This IP address has been reported a total of 130 times from 76 distinct sources. 149.102.247.251 was first reported on May 8th 2023, and the most recent report was 7 hours ago. In the last 60 days, the top reporter locations were: Germany with 3 reports; Netherlands with 2 reports; Argentina with 1 report. The most common categories in these recent reports were: Brute-Force 7 times; Web App Attack 6 times; Hacking 4 times; Email Spam 2 times; Bad Web Bot 2 times; Other 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 el-brujo	2026-10-20 00:19:18 (7 hours ago)	Cloudflare WAF: Request Path: /.git/config Request Query: Host: elhacker.net userAgent: Go-http-cli ... show more Cloudflare WAF: Request Path: /.git/config Request Query: Host: elhacker.net userAgent: Go-http-client/1.1 Action: block Source: firewallCustom ASN Description: Datacamp Limited Country: HR Method: GET Timestamp: 2026-10-20T00:19:18Z ruleId: 6b2d48d0415e4adb9f099d85f54d1de6. show less	Hacking SQL Injection Web App Attack
🇳🇱 ipoac.nl	2026-10-20 00:14:35 (7 hours ago)	ipoac.nl:80 149.102.247.251 - - [20/Oct/2026:02:14:34 +0200] ipoac.nl "GET /.git/config HTTP/1.1" 40 ... show more ipoac.nl:80 149.102.247.251 - - [20/Oct/2026:02:14:34 +0200] ipoac.nl "GET /.git/config HTTP/1.1" 403 1661 "-" "Go-http-client/1.1" show less	Bad Web Bot
🇳🇱 tmiland	2026-10-20 00:14:04 (7 hours ago)	(nginx_404) Dot directory Honeypot Trap 149.102.247.251 (HR/Croatia/unn-149-102-247-251.datapacket.c ... show more (nginx_404) Dot directory Honeypot Trap 149.102.247.251 (HR/Croatia/unn-149-102-247-251.datapacket.com): 2 in the last 3600 secs; IP: 149.102.247.251; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 149.102.247.251 - - [20/Oct/2026:02:14:01 +0200] "GET /.git/config HTTP/1.1" 404 12060 "http://.*/.git/config" "Go-http-client/1.1" 149.102.247.251 - - [20/Oct/2026:02:14:02 +0200] "GET /.git/config HTTP/1.1" 404 12058 "-" "Go-http-client/1.1" show less	Brute-Force
🇨🇭 lufi	2026-10-20 00:08:55 (7 hours ago)	2026-10-20T02:08:54+02:00 lufischer04 ids442 2026-10-20 02:08:54 149.102.247.251: blacklisted Patter ... show more 2026-10-20T02:08:54+02:00 lufischer04 ids442 2026-10-20 02:08:54 149.102.247.251: blacklisted Pattern: /.git\|.svn\|.hg/ ... show less	Web Spam Brute-Force Hacking Web App Attack
🇮🇩 xveil	2026-10-18 11:59:20 (1 day ago)	2026-10-18T18:59:18.743301 mail-honeypot postfix/submission/smtpd[3657]: warning: unknown[149.102.24 ... show more 2026-10-18T18:59:18.743301 mail-honeypot postfix/submission/smtpd[3657]: warning: unknown[149.102.247.251]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇫🇮 notelseit	2026-10-18 11:03:20 (1 day ago)	2026-10-18T13:03:14.136041+02:00 mail postfix/submission/smtpd[3146049]: NOQUEUE: reject: RCPT from ... show more 2026-10-18T13:03:14.136041+02:00 mail postfix/submission/smtpd[3146049]: NOQUEUE: reject: RCPT from unknown[149.102.247.251]: 450 4.7.25 Client host rejected: cannot find your hostname, [149.102.247.251]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<N9tDWY9uH> 2026-10-18T13:03:19.036282+02:00 mail postfix/submission/smtpd[3146049]: warning: unknown[149.102.247.251]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-10-18T13:03:19.293908+02:00 mail postfix/submission/smtpd[3146049]: disconnect from unknown[149.102.247.251] ehlo=2 starttls=1 auth=0/1 commands=3/4 ... show less	Brute-Force Email Spam
Anonymous	2026-10-18 10:23:20 (1 day ago)	Bad Postfix AUTH attempts	Email Spam Brute-Force
🇧🇷 KingHost	2026-10-18 10:21:23 (1 day ago)		Brute-Force
Anonymous	2026-10-14 00:05:56 (6 days ago)	[14/Oct/2026:03:05:53 +0300] 179193635382.557813 149.102.247.251 53995 148.251.76.218 80 [14/Oct/202 ... show more [14/Oct/2026:03:05:53 +0300] 179193635382.557813 149.102.247.251 53995 148.251.76.218 80 [14/Oct/2026:03:05:56 +0300] 179193635698.976600 149.102.247.251 48513 148.251.76.218 443 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 00:01:57 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 149.102.247.251 (unn-149-102-247-251.datapacket ... show more (mod_security) mod_security (id:210492) triggered by 149.102.247.251 (unn-149-102-247-251.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 20:01:52.008572 2026] [security2:error] [pid 27140:tid 27140] [client 149.102.247.251:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uni-plan.com"] [uri "/.git/config"] [unique_id "as7GcF8Yj_By99yNCvuLyAAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 netclix.gr	2026-10-12 01:30:45 (1 week ago)	(old_win_chrome) Blocked old Windows Chrome 149.102.247.251 (HR/Croatia/unn-149-102-247-251.datapack ... show more (old_win_chrome) Blocked old Windows Chrome 149.102.247.251 (HR/Croatia/unn-149-102-247-251.datapacket.com) show less	Hacking
Anonymous	2026-10-06 13:57:41 (1 week ago)	Unauthorized access (80/tcp/http)	Port Scan Web App Attack
🇫🇷 masterguru	2026-10-06 11:08:33 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 149.102.247.251 (HR/Croatia/unn-149-1 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 149.102.247.251 (HR/Croatia/unn-149-102-247-251.datapacket.com): 1 in the last 3600 secs (0-195) show less	Hacking
🇬🇧 consul.to	2026-09-07 06:49:32 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇨🇿 unhfree.net	2026-08-17 19:03:33 (2 months ago)	Aug 17 21:03:18 canopus postfix/smtpd[1546852]: NOQUEUE: reject: RCPT from unknown[149.102.247.251]: ... show more Aug 17 21:03:18 canopus postfix/smtpd[1546852]: NOQUEUE: reject: RCPT from unknown[149.102.247.251]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<5dCqmaD3C> Aug 17 21:03:21 canopus postfix/smtpd[1546852]: NOQUEUE: reject: RCPT from unknown[149.102.247.251]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<hsE1bJ> Aug 17 21:03:26 canopus postfix/smtpd[1546076]: NOQUEUE: reject: RCPT from unknown[149.102.247.251]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<2Sg8vLI> Aug 17 21:03:29 canopus postfix/smtpd[1546852]: NOQUEUE: reject: RCPT from unknown[149.102.247.251]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto= ... show less	Brute-Force Exploited Host

Showing 1 to 15 of 130 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.66.95.109

🇯🇵 168.110.37.227

🇩🇪 109.160.32.146

🇷🇴 92.118.39.77

🇬🇧 77.67.26.134

🇨🇳 42.53.12.33

🇲🇼 41.190.94.37

🇳🇬 41.184.176.185

🇧🇪 198.235.24.156

🇹🇼 198.235.24.73

🇰🇷 175.201.85.209

🇺🇸 167.99.98.129

🇹🇭 159.192.137.133

🇪🇸 88.4.182.83

🇺🇸 68.167.134.222

🇷🇺 46.148.99.211

🇳🇱 45.148.10.152

🇳🇱 45.148.10.141

🇸🇬 43.173.181.141

🇰🇷 20.194.96.223