JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.40.48.184

149.40.48.184 was found in our database!

This IP was reported 56 times. Confidence of Abuse is 100%: ?

100%

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-149-40-48-184.datapacket.com
Domain Name	datacamp.co.uk
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.40.48.184

Whois 149.40.48.184

IP Abuse Reports for 149.40.48.184:

This IP address has been reported a total of 56 times from 44 distinct sources. 149.40.48.184 was first reported on June 9th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob.fr	2026-06-12 23:30:22 (2 days ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇬🇷 setupgr	2026-06-12 23:10:20 (2 days ago)	(mod_security) mod_security (id:11000011) triggered by 149.40.48.184: 1 in the last 86400 secs; Port ... show more (mod_security) mod_security (id:11000011) triggered by 149.40.48.184: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 02:10:19.142870 2026] [security2:error] [pid 379042:tid 379070] [client 149.40.48.184:21637] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "datapacket.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: unn-149-40-48-184.datapacket.com"] [hostname "pankoskal.gr"] [uri "/chosen"] [unique_id "aiyR226KWXh6Y3bFiqkP7gAAAIE"] show less	Port Scan
Anonymous	2026-06-12 21:36:04 (2 days ago)	WordPress/Woo probe	Web App Attack
🇦🇺 rubixstudios	2026-06-12 21:07:02 (2 days ago)	Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360	DDoS Attack Brute-Force Web App Attack
🇫🇮 Christopher Hughes	2026-06-12 21:04:27 (2 days ago)	[Fri Jun 12 22:04:25.007571 2026] [proxy_fcgi:error] [pid 682137:tid 139822240880192] [client 149.40 ... show more [Fri Jun 12 22:04:25.007571 2026] [proxy_fcgi:error] [pid 682137:tid 139822240880192] [client 149.40.48.184:62453] AH01071: Got error 'Primary script unknown' [Fri Jun 12 22:04:25.353565 2026] [proxy_fcgi:error] [pid 682137:tid 139821183923776] [client 149.40.48.184:62453] AH01071: Got error 'Primary script unknown' [Fri Jun 12 22:04:25.414480 2026] [proxy_fcgi:error] [pid 682137:tid 139822767470144] [client 149.40.48.184:62453] AH01071: Got error 'Primary script unknown' [Fri Jun 12 22:04:25.894741 2026] [proxy_fcgi:error] [pid 682137:tid 139822759077440] [client 149.40.48.184:62453] AH01071: Got error 'Primary script unknown' [Fri Jun 12 22:04:26.334639 2026] [proxy_fcgi:error] [pid 682137:tid 139821167138368] [client 149.40.48.184:62453] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇳🇱 ParaBug	2026-06-12 16:44:12 (3 days ago)	149.40.48.184 - - [12/Jun/2026:18:44:11 +0200] "GET /wp-load.php HTTP/1.1" 403 461 "-" "Mozilla/5.0 ... show more 149.40.48.184 - - [12/Jun/2026:18:44:11 +0200] "GET /wp-load.php HTTP/1.1" 403 461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Phishing Brute-Force Web App Attack
🇳🇱 GabrielJST	2026-06-12 16:42:16 (3 days ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 149.40.48.184 (GB/United ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 149.40.48.184 (GB/United Kingdom/unn-149-40-48-184.datapacket.com) show less	Port Scan
🇺🇸 LSPCCU	2026-06-12 15:08:13 (3 days ago)	TSEC Honeypot Network report. Threat score: 100/100. Categories: DDoS Attack, Port Scan, Hacking, Br ... show more TSEC Honeypot Network report. Threat score: 100/100. Categories: DDoS Attack, Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: ssh-telnet, cowrie. Context: 149. show less	DDoS Attack Port Scan Hacking Brute-Force Web App Attack SSH
🇳🇱 Site.eu	2026-06-12 14:13:33 (3 days ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-06-12 13:43:58 (3 days ago)	Multiple web server 400 error codes from same source ip	Web App Attack
Anonymous	2026-06-12 12:34:39 (3 days ago)	149.40.48.184 - - [12/Jun/2026:14:34:30 +0200] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 404 ... show more 149.40.48.184 - - [12/Jun/2026:14:34:30 +0200] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 404 62100 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 149.40.48.184 - - [12/Jun/2026:14:34:31 +0200] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 404 14475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 149.40.48.184 - - [12/Jun/2026:14:34:31 +0200] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 404 62100 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 149.40.48.184 - - [12/Jun/2026:14:34:31 +0200] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 404 14475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 149.40.48.184 - - [12/Jun/2026:14:34:38 +0200] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 404 ... show less	Brute-Force Web App Attack
🇦🇺 2000cn.com.au	2026-06-12 12:20:02 (3 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-wordpress-scan	Web App Attack Hacking
Anonymous	2026-06-12 11:48:42 (3 days ago)	Attempt to scan vulnerabilities	Hacking
🇩🇪 4server	2026-06-12 11:19:04 (3 days ago)	[FriJun1213:19:01.0806082026][security2:error][pid3596059:tid3596123][client149.40.48.184:0]ModSecur ... show more [FriJun1213:19:01.0806082026][security2:error][pid3596059:tid3596123][client149.40.48.184:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"\^/wp-content/$uploads\\|cache\\|backup\\|backups\\|upgrade\\|ai1wm-backups$/.\*\\\\\\\\.ph$p[0-9]\?\\|tml\\|ar$\$\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"317\"][id\"990070\"][msg\"PHPexecutionblockedinstoragedirectory\"][hostname\"ponzellini.ch\"][uri\"/wp-content/upgrade/about.php\"][unique_id\"aivrJbf78EtxEi6PbLqC8wAAAFY\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-06-12 10:40:12 (3 days ago)	PSCSERV WPSCAN 149.40.48.184	Bad Web Bot Web App Attack

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 208.84.100.220

🇧🇪 198.235.24.173

🇪🇨 193.30.14.163

🇷🇺 188.170.243.179

🇲🇽 177.241.165.169

🇧🇷 177.174.0.3

🇳🇱 176.65.139.236

🇩🇪 141.11.250.239

🇮🇳 125.19.138.74

🇨🇳 120.196.86.140

🇨🇳 115.190.60.214

🇨🇳 112.254.142.237

🇷🇸 77.105.37.219

🇨🇦 20.63.85.172

🇵🇰 14.1.107.190

🇪🇸 5.182.83.231

🇺🇸 2604:a880:400:d1:0:4:9625:3001

🇫🇷 2001:41d0:33d:9200::40f

🇰🇷 222.110.147.58

🇩🇪 167.94.146.47