JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.50.211.158

149.50.211.158 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 37%: ?

37%

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-149-50-211-158.datapacket.com
Domain Name	datacamp.co.uk
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.50.211.158

Whois 149.50.211.158

IP Abuse Reports for 149.50.211.158:

This IP address has been reported a total of 40 times from 29 distinct sources. 149.50.211.158 was first reported on March 6th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Tilellit.PRO	2026-10-21 03:09:07 (2 days ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot
🇳🇱 oisecnet	2026-10-17 21:02:07 (5 days ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-10-17. 1 requests from this I ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-10-17. 1 requests from this IP. show less	Port Scan Hacking Web App Attack
🇩🇪 Kejult	2026-10-17 07:05:55 (6 days ago)	Honeypot Finding: repeated TCP service probing on TCP/443 (HTTPS); 6 application-level events across ... show more Honeypot Finding: repeated TCP service probing on TCP/443 (HTTPS); 6 application-level events across 6 source port(s). Sensor(s): H0neytr4p. show less	Port Scan
🇫🇷 spot	2026-10-17 06:44:19 (6 days ago)	149.50.211.158 - - [17/Oct/2026:07:44:17 +0100] "GET /wp-content/plugins/my-calendar/readme.txt HTTP ... show more 149.50.211.158 - - [17/Oct/2026:07:44:17 +0100] "GET /wp-content/plugins/my-calendar/readme.txt HTTP/1.1" 404 4767 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" ... show less	Web App Attack Hacking
Anonymous	2026-09-29 22:00:43 (3 weeks ago)	Large-scale coordinated botnet (6M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (6M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Offpeak: Sessionless Catalog Access Blocked: /wishlist/index/add/product/270/form_key/ttWEy5yGKNWM1byK/ \| UA: Opera/8.10.(X11; Linux i686; id-ID) Presto/2.9.181 Version/12.00 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-09-26 22:16:52 (3 weeks ago)		Brute-Force Web App Attack
🇵🇱 bmino.pl	2026-09-13 19:35:50 (1 month ago)	Autoban IP(2): 149.50.211.158 - Hostname: Datacamp Limited - City: Singapore - Region: North West - ... show more Autoban IP(2): 149.50.211.158 - Hostname: Datacamp Limited - City: Singapore - Region: North West - Country: Singapore - Location: 1.35208,103.82 - Organization: Datacamp Limited - failed attempts. show less	Web App Attack
🇺🇸 kosada.com	2026-09-07 11:07:23 (1 month ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A311&f%5B1%5D=digest_key_terms%3A331&f%5B2%5D=digest_key_terms%3A391&field_article_edition%5B504%5D=504&field_key_terms%5B329%5D=329 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇺🇸 MPL	2026-07-28 22:28:08 (2 months ago)	tcp/23 (16 or more attempts)	Port Scan
🇺🇸 TPI-Abuse	2026-07-24 12:20:23 (2 months ago)	(mod_security) mod_security (id:210740) triggered by 149.50.211.158 (unn-149-50-211-158.datapacket.c ... show more (mod_security) mod_security (id:210740) triggered by 149.50.211.158 (unn-149-50-211-158.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 08:20:19.151409 2026] [security2:error] [pid 3700581:tid 3700581] [client 149.50.211.158:37450] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|naturalhomebuilders.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "naturalhomebuilders.com"] [uri "/"] [unique_id "amNYgytkMap_yJo1PyAduQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 baku.hosting	2026-07-23 15:33:17 (3 months ago)	CSF Auto Report: (cpanel) Failed cPanel login from 149.50.211.158 (SG/Singapore/unn-149-50-211-158.d ... show more CSF Auto Report: (cpanel) Failed cPanel login from 149.50.211.158 (SG/Singapore/unn-149-50-211-158.datapacket.com): 4 in the last 3600 secs show less	Brute-Force Web App Attack
🇺🇸 stechusa	2026-07-12 05:07:42 (3 months ago)	ELEVATED_THREAT \| 350 IPs targeting /brand.html \| URL template shared by 167 IPs: /brand.html?bulb_s ... show more ELEVATED_THREAT \| 350 IPs targeting /brand.html \| URL template shared by 167 IPs: /brand.html?bulb_shape=&bulb_shape_type=&bulb_type=&mode=list&p= \| Facet request during elevated threat (facet_ratio=0.97, unique_ips=473) show less	Bad Web Bot DDoS Attack
Anonymous	2026-07-07 13:09:02 (3 months ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 kosada.com	2026-07-06 19:39:30 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 mnsf	2026-06-25 23:05:10 (3 months ago)	Abuse Detected (1)	Brute-Force Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 190.220.172.154

🇩🇪 185.220.101.104

🇳🇱 185.136.15.82

🇸🇬 154.18.238.98

🇷🇺 83.167.19.121

🇺🇸 66.132.172.136

🇭🇰 49.213.6.30

🇺🇸 34.181.213.128

🇮🇷 5.160.128.67

🇺🇸 216.25.89.65

🇨🇴 190.248.161.63

🇦🇷 181.46.39.10

🇵🇭 180.191.255.21

🇻🇳 171.251.237.7

🇬🇧 64.205.72.23

🇻🇳 45.121.25.115

🇸🇬 43.134.109.200

🇯🇵 35.200.42.151

🇺🇸 34.150.128.205

🇺🇸 34.106.146.204