JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.202.227.64

149.202.227.64 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 96%: ?

96%

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	vps-f241799d.vps.ovh.net
Domain Name	ovh.net
Country	🇫🇷 France
City	Lille, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.202.227.64

Whois 149.202.227.64

IP Abuse Reports for 149.202.227.64:

This IP address has been reported a total of 27 times from 16 distinct sources. 149.202.227.64 was first reported on September 1st 2026, and the most recent report was 13 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 jormaster3k	2026-09-03 16:35:21 (13 minutes ago)	Attack against WordPress	Web App Attack
🇹🇷 oalver	2026-09-03 15:14:23 (1 hour ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signa ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to //xmlrpc.php?rsd (HTTP 200). First seen: 2026-09-03. Risk score: 30/100. show less	Web App Attack
🇫🇷 Sklurk	2026-09-03 14:56:12 (1 hour ago)	Web App Attack	Web App Attack
🇧🇪 cmbplf	2026-09-03 13:18:43 (3 hours ago)	12.465 post requests in 1 hour (6d5h45m)	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-03 12:43:53 (4 hours ago)	(mod_security) mod_security (id:225170) triggered by 149.202.227.64 (vps-f241799d.vps.ovh.net): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 149.202.227.64 (vps-f241799d.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 08:43:50.337865 2026] [security2:error] [pid 4570:tid 4570] [client 149.202.227.64:52145] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|gaeltv.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gaeltv.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aplrhiYl94fv-IOT9oo4ywAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-09-03 12:25:21 (4 hours ago)	WordPress wp-login.php Brute Force Attack	Brute-Force Web App Attack
🇩🇪 LRob	2026-09-03 11:59:39 (4 hours ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: //xmlrpc.php \| 2026-09-03 11:59 UTC show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 11:48:53 (4 hours ago)	(mod_security) mod_security (id:225170) triggered by 149.202.227.64 (vps-f241799d.vps.ovh.net): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 149.202.227.64 (vps-f241799d.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 07:48:48.867380 2026] [security2:error] [pid 31370:tid 31370] [client 149.202.227.64:54693] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.gabbyspetnanny.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.gabbyspetnanny.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "apleoMKdreUexEEXaM2LaQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇱 Dolphi	2026-09-03 11:22:13 (5 hours ago)	POST //xmlrpc.php	Brute-Force Web App Attack
🇯🇵 ki3	2026-09-03 11:14:36 (5 hours ago)	Fail2Ban: Web App Attacks and Forum Spam 149.202.227.64 1788434076.0(JST)	Web Spam Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-02 07:02:48 (1 day ago)	WordPress login brute-force \| path: //wp-login.php \| 2026-09-02 07:02 UTC	Brute-Force Web App Attack
🇫🇷 masterguru	2026-09-02 06:01:47 (1 day ago)	(PERMBLOCK) 149.202.227.64 (FR/France/vps-f241799d.vps.ovh.net) has had more than 4 temp blocks in t ... show more (PERMBLOCK) 149.202.227.64 (FR/France/vps-f241799d.vps.ovh.net) has had more than 4 temp blocks in the last 86400 secs (0-196) show less	Hacking
🇩🇪 LRob	2026-09-02 05:57:46 (1 day ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: //wp-json/wp/v2/users/ \| 2026-09-02 05:57 UTC show less	Hacking Web App Attack
🇫🇷 masterguru	2026-09-02 04:00:57 (1 day ago)	(wordpress) Apache: Failed WordPress login from 149.202.227.64 (FR/France/vps-f241799d.vps.ovh.net): ... show more (wordpress) Apache: Failed WordPress login from 149.202.227.64 (FR/France/vps-f241799d.vps.ovh.net): 10 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-09-02 02:47:34 (1 day ago)	(PERMBLOCK) 149.202.227.64 (FR/France/vps-f241799d.vps.ovh.net) has had more than 4 temp blocks in t ... show more (PERMBLOCK) 149.202.227.64 (FR/France/vps-f241799d.vps.ovh.net) has had more than 4 temp blocks in the last 86400 secs (0-193) show less	Hacking

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 185.35.8.156

🇳🇱 178.16.54.148

🇺🇸 52.203.62.112

🇫🇮 5.183.255.87

🇦🇷 201.254.226.29

🇧🇷 201.131.246.103

🇨🇴 179.51.109.109

🇨🇳 120.48.132.243

🇫🇷 91.196.152.234

🇬🇧 74.125.43.153

🇹🇯 62.89.208.254

🇬🇧 35.203.210.133

🇸🇬 34.87.14.184

🇯🇵 8.216.7.197

🇬🇧 2.57.17.64

🇰🇷 210.123.87.143

🇭🇰 199.45.154.114

🇳🇱 195.178.110.108

🇨🇳 182.105.123.10

🇺🇸 147.185.132.125