JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.40.48.241

149.40.48.241 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 3%: ?

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-149-40-48-241.datapacket.com
Domain Name	datacamp.co.uk
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.40.48.241

Whois 149.40.48.241

IP Abuse Reports for 149.40.48.241:

This IP address has been reported a total of 19 times from 11 distinct sources. 149.40.48.241 was first reported on March 24th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 pengpeng	2026-07-11 11:28:40 (1 week ago)	monitor: on VM-0-7-ubuntu \| port: 28052 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 28052 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 pengpeng	2026-06-02 08:10:41 (1 month ago)	monitor: on VM-0-7-ubuntu \| port: 38255 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 38255 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 Ticlem	2026-02-11 14:26:39 (5 months ago)	2026-02-11T14:56:37.865007+01:00 clement-turlure kernel: [240607.681316] [UFW BLOCK] IN=enp0s31f6 OU ... show more 2026-02-11T14:56:37.865007+01:00 clement-turlure kernel: [240607.681316] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=149.40.48.241 DST=95.216.21.136 LEN=143 TOS=0x00 PREC=0x00 TTL=55 ID=23223 PROTO=UDP SPT=44388 DPT=6881 LEN=123 2026-02-11T15:11:37.332863+01:00 clement-turlure kernel: [241507.148336] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=149.40.48.241 DST=95.216.21.136 LEN=143 TOS=0x00 PREC=0x00 TTL=55 ID=14288 PROTO=UDP SPT=12979 DPT=6881 LEN=123 2026-02-11T15:26:38.088257+01:00 clement-turlure kernel: [242407.902796] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=149.40.48.241 DST=95.216.21.136 LEN=143 TOS=0x00 PREC=0x00 TTL=55 ID=21229 PROTO=UDP SPT=3292 DPT=1026 LEN=123 ... show less	Port Scan
🇷🇺 Agrohim	2026-01-16 11:56:56 (6 months ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇩🇪 creations.works	2025-12-20 13:39:50 (7 months ago)	Blocked by UFW on atums [43493/tcp] Source port: 30381 TTL: 57 Packet length: 60 TOS: 0x00 This rep ... show more Blocked by UFW on atums [43493/tcp] Source port: 30381 TTL: 57 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 creations.works	2025-12-20 01:31:50 (7 months ago)	Blocked by UFW on atums [43493/tcp] Source port: 1450 TTL: 57 Packet length: 60 TOS: 0x00 This repo ... show more Blocked by UFW on atums [43493/tcp] Source port: 1450 TTL: 57 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 creations.works	2025-12-19 12:50:50 (7 months ago)	Blocked by UFW on atums [43493/tcp] Source port: 11600 TTL: 57 Packet length: 60 TOS: 0x00 This rep ... show more Blocked by UFW on atums [43493/tcp] Source port: 11600 TTL: 57 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 creations.works	2025-12-18 23:21:10 (7 months ago)	Blocked by UFW on atums [43493/tcp] Source port: 20570 TTL: 57 Packet length: 60 TOS: 0x00 This rep ... show more Blocked by UFW on atums [43493/tcp] Source port: 20570 TTL: 57 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇩 Burayot	2025-07-07 21:00:42 (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 149.40.48.241 (GB/United Kingdom/un ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 149.40.48.241 (GB/United Kingdom/unn-149-40-48-241.datapacket.com): 1 in the last 3600 secs show less	Web App Attack
Anonymous	2025-07-07 01:37:20 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇧🇪 voormedia	2025-07-06 17:58:22 (1 year ago)	Accessed trap at '/xmlrpc.php'	Web App Attack
🇩🇪 stinpriza	2025-07-06 09:25:10 (1 year ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2025-07-06 01:28:46 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 149.40.48.241 (unn-149-40-48-241.datapacket.com ... show more (mod_security) mod_security (id:225170) triggered by 149.40.48.241 (unn-149-40-48-241.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 05 21:28:40.895861 2025] [security2:error] [pid 13460:tid 13460] [client 149.40.48.241:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|nursetammytalks.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nursetammytalks.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aGnRSOzLr92jkADsOIA4dQAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 Progetto1	2025-07-06 00:24:02 (1 year ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
Anonymous	2025-07-06 00:03:43 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

127.0.0.1

🇹🇭 119.46.148.53

🇮🇱 82.102.149.88

🇺🇸 66.132.172.186

🇫🇷 62.210.142.167

🇮🇪 2a05:d018:10df:d400:2bc3:3d33:8697:99b1

🇨🇳 221.13.93.66

🇧🇷 205.210.31.214

🇲🇺 197.225.146.23

🇸🇪 193.138.218.203

🇲🇽 189.240.44.9

🇮🇱 169.150.227.209

🇺🇸 162.216.149.107

🇩🇪 151.243.11.52

🇨🇭 138.199.6.198

🇨🇳 124.117.194.189

🇬🇧 104.143.233.33

🇳🇿 103.75.11.53

🇷🇴 92.118.39.209

🇳🇱 91.92.47.123