JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 169.150.227.209

169.150.227.209 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 4%: ?

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-169-150-227-209.datapacket.com
Domain Name	datacamp.co.uk
Country	🇮🇱 Israel
City	Tel Aviv, Tel Aviv

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 169.150.227.209

Whois 169.150.227.209

IP Abuse Reports for 169.150.227.209:

This IP address has been reported a total of 38 times from 26 distinct sources. 169.150.227.209 was first reported on March 27th 2024, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mw	2026-07-24 00:20:19 (2 hours ago)	GET /..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd HTTP/1.1	Web App Attack
🇺🇸 TPI-Abuse	2026-04-15 03:08:31 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 169.150.227.209 (unn-169-150-227-209.datapacket ... show more (mod_security) mod_security (id:210730) triggered by 169.150.227.209 (unn-169-150-227-209.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 23:08:23.337080 2026] [security2:error] [pid 2360494:tid 2360494] [client 169.150.227.209:56517] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|snapdragonworkshops.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "snapdragonworkshops.com"] [uri "/[email protected]"] [unique_id "ad8BJ8YoQG00ZmUzYhGE9wAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-14 14:36:09 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 169.150.227.209 (unn-169-150-227-209.datapacket ... show more (mod_security) mod_security (id:210730) triggered by 169.150.227.209 (unn-169-150-227-209.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 10:36:05.527749 2026] [security2:error] [pid 2454566:tid 2454566] [client 169.150.227.209:52254] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bayareamustangs.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bayareamustangs.com"] [uri "/links/fordofwesleychapel.com"] [unique_id "ad5Q1ej6aDbGFSVlkT6FJwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-13 11:06:41 (3 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IL, Attack patterns: Auto ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IL, Attack patterns: Automated scanning show less	Bad Web Bot Web App Attack
🇩🇪 findlab	2026-04-13 07:00:02 (3 months ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
Anonymous	2026-04-12 10:02:24 (3 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IL, Attack patterns: Auto ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IL, Attack patterns: Automated scanning show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-11 20:06:55 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 169.150.227.209 (unn-169-150-227-209.datapacket ... show more (mod_security) mod_security (id:210730) triggered by 169.150.227.209 (unn-169-150-227-209.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 11 16:06:47.599357 2026] [security2:error] [pid 1748927:tid 1748927] [client 169.150.227.209:58240] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|brookspowell.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "brookspowell.com"] [uri "/mail to: [email protected]"] [unique_id "adqp12t3XykNOmfC9HKcvAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇻🇳 hirosume2	2026-04-11 11:06:08 (3 months ago)	DDoS composite score 37.9 (challenge tier) - 31 reqs/5min - high_traffic	DDoS Attack
Anonymous	2026-04-11 02:05:18 (3 months ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (24/60 min)'; Requests=24	Port Scan
🇬🇧 findlab	2026-04-09 23:20:01 (3 months ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-04-02 15:25:48 (3 months ago)	Blocked by UFW (TCP on 1) Source port: 7001 TTL: 108 Packet length: 52 TOS: 0x08 This report (for 1 ... show more Blocked by UFW (TCP on 1) Source port: 7001 TTL: 108 Packet length: 52 TOS: 0x08 This report (for 169.150.227.209) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Bensay	2026-01-27 20:05:21 (5 months ago)	[Tue Jan 27 21:05:20.556121 2026] [authz_core:error] [pid 2195568:tid 2195568] [client 169.150.227.2 ... show more [Tue Jan 27 21:05:20.556121 2026] [authz_core:error] [pid 2195568:tid 2195568] [client 169.150.227.209:50762] AH01630: client denied by server configuration: /var/www/empty/ [Tue Jan 27 21:05:20.675957 2026] [authz_core:error] [pid 2195568:tid 2195568] [client 169.150.227.209:50762] AH01630: client denied by server configuration: /var/www/empty/favicon.ico ... show less	Hacking Bad Web Bot Web App Attack
🇪🇸 el-brujo	2026-01-22 11:50:59 (6 months ago)	01/22/2026-12:50:59.205920 169.150.227.209 Protocol: 6 ET SCAN NMAP -sS window 1024	Port Scan
🇺🇸 MPL	2025-11-08 16:21:48 (8 months ago)	tcp/80 (2 or more attempts)	Port Scan
🇩🇪 QUADEMU Abuse Dpt	2025-08-27 04:53:41 (10 months ago)	[New] Noxious/Nuisible/вредоносный Host.	Port Scan Exploited Host

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 212.220.15.34

🇺🇸 147.182.177.180

🇹🇷 95.70.144.216

🇫🇷 80.87.206.19

🇺🇸 173.244.60.241

🇺🇸 166.70.146.141

🇵🇰 154.208.58.208

🇺🇸 102.129.153.213

🇺🇸 64.62.156.153

🇨🇳 61.151.249.194

🇹🇼 59.126.224.134

🇺🇸 40.80.200.186

🇬🇧 35.203.210.203

🇧🇪 35.195.202.190

🇧🇪 34.140.21.246

🇺🇸 172.202.118.20

🇮🇳 139.59.79.98

🇮🇩 103.191.14.243

🇷🇴 92.118.39.62

🇫🇷 91.231.89.206