JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.22.87.44

149.22.87.44 was found in our database!

This IP was reported 73 times. Confidence of Abuse is 26%: ?

26%

ISP	DataCamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-149-22-87-44.datapacket.com
Domain Name	datacamp.co.uk
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.22.87.44

Whois 149.22.87.44

IP Abuse Reports for 149.22.87.44:

This IP address has been reported a total of 73 times from 42 distinct sources. 149.22.87.44 was first reported on September 26th 2024, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 cpxducky	2026-08-21 09:52:43 (5 days ago)	2026-08-21 09:52:43: Minecraft server scan detected from 149.22.87.44 on port 25565 of mail.cpxducky ... show more 2026-08-21 09:52:43: Minecraft server scan detected from 149.22.87.44 on port 25565 of mail.cpxducky.com show less	Port Scan
🇺🇸 xmission.com	2026-08-12 07:57:38 (2 weeks ago)	Blocked by UFW (TCP on 1) Source port: 34498 TTL: 51 Packet length: 60 TOS: 0x08 This report (for 1 ... show more Blocked by UFW (TCP on 1) Source port: 34498 TTL: 51 Packet length: 60 TOS: 0x08 This report (for 149.22.87.44) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-11 01:46:58 (2 weeks ago)	Blocked by UFW (TCP on 1) Source port: 53606 TTL: 51 Packet length: 60 TOS: 0x08 This report (for 1 ... show more Blocked by UFW (TCP on 1) Source port: 53606 TTL: 51 Packet length: 60 TOS: 0x08 This report (for 149.22.87.44) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇩 it.inka	2026-08-04 22:13:36 (3 weeks ago)	149.22.87.44 - - [05/Aug/2026:05:13:36 +0700] "GET /?or_id=minitoto HTTP/1.1" 403 189 "-" "Mozilla/5 ... show more 149.22.87.44 - - [05/Aug/2026:05:13:36 +0700] "GET /?or_id=minitoto HTTP/1.1" 403 189 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36" ... show less	Web App Attack
🇺🇸 xmission.com	2026-08-03 13:50:38 (3 weeks ago)	Blocked by UFW (TCP on 1) Source port: 40620 TTL: 54 Packet length: 60 TOS: 0x08 This report (for 1 ... show more Blocked by UFW (TCP on 1) Source port: 40620 TTL: 54 Packet length: 60 TOS: 0x08 This report (for 149.22.87.44) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-15 16:06:18 (1 month ago)	Blocked by UFW (TCP on 1) Source port: 58914 TTL: 54 Packet length: 60 TOS: 0x08 This report (for 1 ... show more Blocked by UFW (TCP on 1) Source port: 58914 TTL: 54 Packet length: 60 TOS: 0x08 This report (for 149.22.87.44) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 matthieul.dev	2026-07-11 02:50:29 (1 month ago)	Blocked by os-abuseipdb; 10 hits, proto=tcp,udp, ports=60081	Port Scan Brute-Force
🇺🇸 kosada.com	2026-07-03 14:35:46 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 xmission.com	2026-07-01 04:28:39 (1 month ago)	Blocked by UFW (TCP on 1) Source port: 16082 TTL: 51 Packet length: 60 TOS: 0x08 This report (for 1 ... show more Blocked by UFW (TCP on 1) Source port: 16082 TTL: 51 Packet length: 60 TOS: 0x08 This report (for 149.22.87.44) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 SiliSoftware	2026-06-28 22:15:09 (1 month ago)	/vendor/phpunit/phpunit/phpunit.xsd	Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 21:04:55 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 149.22.87.44 (unn-149-22-87-44.datapacket.com): ... show more (mod_security) mod_security (id:210730) triggered by 149.22.87.44 (unn-149-22-87-44.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 17:04:47.702707 2026] [security2:error] [pid 31255:tid 31255] [client 149.22.87.44:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|nyemdr.org\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nyemdr.org"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "akGMb0D127LD4wJ-IzoLFgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 21:14:16 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 149.22.87.44 (unn-149-22-87-44.datapacket.com): ... show more (mod_security) mod_security (id:210730) triggered by 149.22.87.44 (unn-149-22-87-44.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 17:14:11.269876 2026] [security2:error] [pid 27050:tid 27050] [client 149.22.87.44:49671] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.ileronde.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.ileronde.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "akA9I1Sv-tM8R3g_1xhAAwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 20:37:21 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 149.22.87.44 (unn-149-22-87-44.datapacket.com): ... show more (mod_security) mod_security (id:210730) triggered by 149.22.87.44 (unn-149-22-87-44.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 16:37:15.266706 2026] [security2:error] [pid 12258:tid 12258] [client 149.22.87.44:25651] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|radar24hrs.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "radar24hrs.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "akA0ezODaBTTaUZjacKU2QAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 19:00:41 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 149.22.87.44 (unn-149-22-87-44.datapacket.com): ... show more (mod_security) mod_security (id:210730) triggered by 149.22.87.44 (unn-149-22-87-44.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 15:00:34.413023 2026] [security2:error] [pid 15143:tid 15143] [client 149.22.87.44:22777] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mykidsdaycare.net\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mykidsdaycare.net"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "akAd0g2OCwu7wboAH6r5rgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 03:22:40 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 149.22.87.44 (unn-149-22-87-44.datapacket.com): ... show more (mod_security) mod_security (id:210730) triggered by 149.22.87.44 (unn-149-22-87-44.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 23:22:33.117246 2026] [security2:error] [pid 12463:tid 12463] [client 149.22.87.44:24413] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|med-engineering.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "med-engineering.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aj9B-W5djv-p1y_55WxWPQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 73 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 20.65.195.62

🇰🇷 220.119.37.141

🇬🇲 197.255.203.112

🇦🇷 181.0.198.196

🇰🇷 112.161.26.125

🇬🇧 8.208.10.94

🇧🇪 198.235.24.203

🇲🇽 187.174.238.116

🇺🇸 172.68.70.40

🇨🇳 47.100.33.129

🇺🇸 45.33.98.188

🇹🇷 5.175.136.100

🇧🇷 2800:3f0:4001:c03::122

🇺🇸 172.202.118.16

🇸🇬 47.128.127.177

🇧🇷 187.66.147.65

🇨🇳 175.10.89.141

🇨🇳 120.242.153.84

🇨🇴 108.174.156.122

🇱🇹 62.60.130.242