This IP address has been reported a total of
11
times from
9 distinct
sources.
4.149.184.214 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 2
reports;
Finland
with 2
reports;
Switzerland
with 1
report.
The most common categories in these recent reports were:
Web App Attack
4
times;
Hacking
2
times;
Bad Web Bot
2
times.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
[SatOct1021:52:25.6550122026][security2:error][pid265826:tid265900][client4.149.184.214:0]ModSecurit ...
show more[SatOct1021:52:25.6550122026][security2:error][pid265826:tid265900][client4.149.184.214:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\${encodeuricomponent\(string\(res\)\)}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=\(function\(\){var_r=typeofrequire\!==undefined\?require:\(process.mainmodule\?process.mainmodule.require.bind\(process.mainmodule\):\(typeofglobalthis.require\!==undefined\?globalthis.require:null\)\)returnvuln_check_success_69420}\)\(\)throwobject.assign\(newerror\(next_redirect...\"][tag\"attack-rce\"
show less
(modsec_5015) ModSec 5015: Suspicious User-Agent from 4.149.184.214 (US/United States/-): 1 in the l ...
show more(modsec_5015) ModSec 5015: Suspicious User-Agent from 4.149.184.214 (US/United States/-): 1 in the last 3600 secs (0-195)
show less
[Thu Jun 11 02:50:31.795490 2026] [security2:error] [pid 81240:tid 81373] [client 4.149.184.214:1305 ...
show more[Thu Jun 11 02:50:31.795490 2026] [security2:error] [pid 81240:tid 81373] [client 4.149.184.214:13059] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 55)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "login.yorknation.com"] [uri "/"] [unique_id "aipat682p38LeV3GaOq0zQAAAEk"]
...
show less
Web App Attack
Anonymous
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js ...
show moreIM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)
show less
Hacking
Anonymous
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js ...
show moreIM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)
show less
[WedMay2709:12:28.5689962026][security2:error][pid2814990:tid2815071][client4.149.184.214:0]ModSecur ...
show more[WedMay2709:12:28.5689962026][security2:error][pid2814990:tid2815071][client4.149.184.214:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\${encodeuricomponent\(string\(res\)\)}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=\(function\(\){var_r=typeofrequire\!==undefined\?require:\(process.mainmodule\?process.mainmodule.require.bind\(process.mainmodule\):\(typeofglobalthis.require\!==undefined\?globalthis.require:null\)\)returnvuln_check_success_69420}\)\(\)throwobject.assign\(newerror\(next_redirect...\"][tag\"attack-rce
show less
Mar 14 20:31:07 altux6 sshd\[27382\]: Invalid user test from 4.149.184.214 port 1152
Mar 14 20:31:07 ...
show moreMar 14 20:31:07 altux6 sshd\[27382\]: Invalid user test from 4.149.184.214 port 1152
Mar 14 20:31:07 altux6 sshd\[27382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.149.184.214
Mar 14 20:31:09 altux6 sshd\[27382\]: Failed password for invalid user test from 4.149.184.214 port 1152 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
11
of 11 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
