JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.49.149.209

195.49.149.209 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 32%: ?

32%

ISP	FAUST ISP LTD.
Usage Type	Fixed Line ISP
ASN	AS29074
Domain Name	faust.net.ua
Country	🇺🇦 Ukraine
City	Obukhiv, Kyiv Oblast

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.49.149.209

Whois 195.49.149.209

IP Abuse Reports for 195.49.149.209:

This IP address has been reported a total of 20 times from 11 distinct sources. 195.49.149.209 was first reported on June 1st 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-14 18:48:48 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 195.49.149.209 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 195.49.149.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 14:48:41.339381 2026] [security2:error] [pid 27236:tid 27236] [client 195.49.149.209:51906] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|cougarcrusade.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cougarcrusade.com"] [uri "/about/"] [unique_id "aqhBiUx3evvmFCkzoNe2VwAAAAI"], referer: https://cougarcrusade.com/contact show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-12 23:46:36 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 195.49.149.209 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 195.49.149.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 19:46:29.311640 2026] [security2:error] [pid 7342:tid 7342] [client 195.49.149.209:44650] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|tonytremblayauthor.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tonytremblayauthor.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aqXkVbsrTEbBreJq48UyNwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Hazzard	2026-09-11 11:26:28 (1 week ago)	(wordpress) Failed wordpress login from 195.49.149.209 (UA/Ukraine/Kyiv City/Kyiv/-/[redacted]): (C ... show more (wordpress) Failed wordpress login from 195.49.149.209 (UA/Ukraine/Kyiv City/Kyiv/-/[redacted]): (CF_ENABLE) show less	Brute-Force
🇮🇹 A000Z	2026-09-01 01:17:31 (2 weeks ago)	Fail2Ban: 195.49.149.209 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 195.49.149.209 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-30 04:08:06 (2 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-20 21:40:57 (4 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-20 13:59:57 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-20 04:21:24 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
Anonymous	2026-08-18 06:02:41 (1 month ago)	Distributed scraper residential proxy pool — shop.damesliquor.com /store/filtered/ (WineCommerce WAF ... show more Distributed scraper residential proxy pool — shop.damesliquor.com /store/filtered/ (WineCommerce WAF) show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 kosada.com	2026-07-31 23:10:06 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-06 22:10:37 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-25 20:19:08 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-25 06:46:08 (2 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇺🇸 gui-ying233	2026-06-11 00:01:45 (3 months ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇸🇰 GOVCERT	2024-09-12 08:12:21 (2 years ago)	SMB Port Scan	Port Scan

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.166.12.235

🇦🇷 181.26.236.231

🇮🇩 103.174.236.65

🇫🇷 91.231.89.14

🇸🇬 43.133.61.254

🇸🇦 34.166.144.231

🇺🇸 20.127.202.147

🇨🇳 218.29.196.162

🇺🇸 162.216.150.243

🇨🇳 125.39.148.106

🇰🇷 123.212.9.122

🇺🇸 108.165.185.104

🇨🇦 85.217.149.46

🇫🇷 85.217.140.34

🇺🇸 66.175.239.44

🇺🇸 204.188.254.146

🇧🇷 187.32.131.170

🇮🇩 163.7.3.26

🇧🇬 91.148.190.150

🇩🇪 34.179.225.168