JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.22.87.4

149.22.87.4 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 13%: ?

13%

ISP	DataCamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-149-22-87-4.datapacket.com
Domain Name	datacamp.co.uk
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.22.87.4

Whois 149.22.87.4

IP Abuse Reports for 149.22.87.4:

This IP address has been reported a total of 17 times from 14 distinct sources. 149.22.87.4 was first reported on November 17th 2024, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-13 08:25:09 (4 days ago)	(mod_security) mod_security (id:210730) triggered by 149.22.87.4 (unn-149-22-87-4.datapacket.com): 1 ... show more (mod_security) mod_security (id:210730) triggered by 149.22.87.4 (unn-149-22-87-4.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 04:25:02.830557 2026] [security2:error] [pid 11746:tid 11791] [client 149.22.87.4:61599] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.docdalton.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.docdalton.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "ai0T3ottbVuy9HyVwzMh_wAAAc8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 01:57:02 (4 days ago)	(mod_security) mod_security (id:210730) triggered by 149.22.87.4 (unn-149-22-87-4.datapacket.com): 1 ... show more (mod_security) mod_security (id:210730) triggered by 149.22.87.4 (unn-149-22-87-4.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 21:56:58.234589 2026] [security2:error] [pid 18503:tid 18503] [client 149.22.87.4:46999] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.editions.click\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.editions.click"] [uri "/vigory/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aiy46scK07A-bhc_OSLPYQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 SentinalX by uzumaru	2026-06-02 04:14:11 (2 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.cloudflare.com:443 show less	Open Proxy Port Scan
🇯🇵 SentinalX by uzumaru	2026-05-31 07:31:15 (2 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: clients3.google.com:443 show less	Open Proxy Port Scan
🇮🇩 David Koswari	2026-04-17 05:54:00 (2 months ago)	REQ_BLOCKED_SECURITY	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇩🇪 ghostwarriors	2026-04-10 09:50:06 (2 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Ar1s	2026-04-09 12:51:43 (2 months ago)	[1:2064917] ET HUNTING Request for Webshell in .well-known directory ::: Port: 80/TCP	Exploited Host
Anonymous	2026-02-26 11:35:02 (3 months ago)	Malicious activity detected	Hacking Web App Attack
🇨🇭 Origon	2026-02-25 08:38:00 (3 months ago)	recidive - IP: 149.22.87.4 - 2026-02-25 04:28:16,579 fail2ban.actions [245081]: NOTICE [plesk-wordp ... show more recidive - IP: 149.22.87.4 - 2026-02-25 04:28:16,579 fail2ban.actions [245081]: NOTICE [plesk-wordpress] Ban 149.22.87.4 2026-02-25 08:50:56,837 fail2ban.actions [245081]: NOTICE [plesk-wordpress] Ban 149.22.87.4 2026-02-25 09:38:00,191 fail2ban.actions [245081]: NOTICE [plesk-wordpress] Ban 149.22.87.4 show less	Web App Attack
🇧🇪 cmbplf	2026-02-25 06:26:54 (3 months ago)	1.973 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇮🇹 VHosting	2025-10-14 09:15:09 (8 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇺🇸 xmission.com	2025-08-27 12:30:01 (9 months ago)	Blocked by UFW (TCP on 1) Source port: 3613 TTL: 118 Packet length: 52 TOS: 0x00 This report (for 1 ... show more Blocked by UFW (TCP on 1) Source port: 3613 TTL: 118 Packet length: 52 TOS: 0x00 This report (for 149.22.87.4) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇭🇺 HoneyPotEu	2025-07-20 09:57:56 (10 months ago)	149.22.87.4 [redacted]:443 (212238-Datacamp Limited Japan Tokyo) - - [20/Jul/2025:11:57:48 +0200] "G ... show more 149.22.87.4 [redacted]:443 (212238-Datacamp Limited Japan Tokyo) - - [20/Jul/2025:11:57:48 +0200] "GET / HTTP/1.1" 400 248 "-" "WanScannerBot/1.1" ... show less	Bad Web Bot Web App Attack
🇺🇸 rafled	2024-11-17 10:26:02 (1 year ago)	Nov 17 10:26:02 proxy sshd[2416620]: Invalid user user from 149.22.87.4 port 34422 ...	Brute-Force SSH
🇺🇸 rafled	2024-11-17 10:09:11 (1 year ago)	Nov 17 10:09:11 proxy sshd[2416249]: Invalid user postgres from 149.22.87.4 port 51196 ...	Brute-Force SSH

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 185.56.45.50

🇨🇴 181.133.215.45

🇭🇰 154.211.37.101

🇨🇳 103.10.87.52

🇳🇱 91.92.40.19

🇺🇸 66.132.153.134

🇧🇷 45.233.177.204

🇸🇬 45.129.228.171

🇺🇸 216.25.89.74

🇺🇸 162.142.125.231

🇺🇸 162.142.125.91

🇭🇰 152.32.131.112

🇫🇷 85.217.140.36

🇦🇹 85.124.207.102

🇸🇬 43.160.200.211

🇺🇸 40.65.222.177

🇺🇸 34.75.245.157

🇷🇺 5.167.64.202

🇳🇨 202.22.136.102

🇷🇺 188.187.152.172