JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.22.88.144

149.22.88.144 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 0%: ?

ISP	DataCamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-149-22-88-144.datapacket.com
Domain Name	datacamp.co.uk
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.22.88.144

Whois 149.22.88.144

IP Abuse Reports for 149.22.88.144:

This IP address has been reported a total of 21 times from 17 distinct sources. 149.22.88.144 was first reported on February 2nd 2025, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 BassingsVPN	2025-08-03 19:02:21 (10 months ago)	Suspicious Bot traffic detected. (Abuse score: 35%)	DDoS Attack Exploited Host
🇨🇴 j458rjqwi348fhjq46	2025-08-03 16:00:42 (10 months ago)	Malicious IP detected by WAF with anomaly score 11.0. Attack types: Timestamp deviates by 1.9 hours, ... show more Malicious IP detected by WAF with anomaly score 11.0. Attack types: Timestamp deviates by 1.9 hours, Timestamp deviates by 1.3 hours, Exposure of environment file (.env) (+8 more). Activity: 1542 requests to 50 URLs. Period: 2025-08-03 10:45:11 - 2025-08-03 10:44:44 (America/Bogota). Origin: US. Source: Automated WAF log analysis. show less	Hacking Web App Attack
🇺🇸 xmission.com	2025-08-02 10:15:16 (10 months ago)	Blocked by UFW (TCP on 8080) Source port: 63092 TTL: 59 Packet length: 40 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 8080) Source port: 63092 TTL: 59 Packet length: 40 TOS: 0x00 This report (for 149.22.88.144) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 xmission.com	2025-07-31 03:38:38 (10 months ago)	Blocked by UFW (TCP on 8080) Source port: 31889 TTL: 60 Packet length: 40 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 8080) Source port: 31889 TTL: 60 Packet length: 40 TOS: 0x00 This report (for 149.22.88.144) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇪🇸 Global Cyber Police	2025-07-27 13:24:35 (10 months ago)	Malicious bot activity detected: Hitting honeypot page (200 OK with 258/259 bytes sent).	Port Scan Brute-Force Web App Attack
🇨🇭 backslash	2025-07-24 08:55:05 (10 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇫🇷 ᴀʀᴛ	2025-07-22 15:21:28 (10 months ago)	Triggered Cloudflare WAF (l7ddos) from US. ASN: 212238 (CDNEXT) Protocol: HTTP/2 (GET method) UA: Mo ... show more Triggered Cloudflare WAF (l7ddos) from US. ASN: 212238 (CDNEXT) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 show less	DDoS Attack Bad Web Bot
🇯🇵 Axel	2025-06-21 22:21:22 (11 months ago)	SSH login attempts (endlessh): 2025-06-21T18:03:06.320Z ACCEPT host=::ffff:149.22.88.144 port=36358 ... show more SSH login attempts (endlessh): 2025-06-21T18:03:06.320Z ACCEPT host=::ffff:149.22.88.144 port=36358 fd=12 n=9/4096 show less	Brute-Force SSH
🇻🇬 Axel	2025-06-21 18:39:09 (11 months ago)	SSH login attempts (endlessh): 2025-06-21T18:02:09.633Z ACCEPT host=::ffff:149.22.88.144 port=18868 ... show more SSH login attempts (endlessh): 2025-06-21T18:02:09.633Z ACCEPT host=::ffff:149.22.88.144 port=18868 fd=6 n=3/4096 show less	Brute-Force SSH
🇯🇵 Axel	2025-06-21 18:03:09 (11 months ago)	SSH login attempts (endlessh): 2025-06-21T18:01:41.820Z ACCEPT host=::ffff:149.22.88.144 port=18815 ... show more SSH login attempts (endlessh): 2025-06-21T18:01:41.820Z ACCEPT host=::ffff:149.22.88.144 port=18815 fd=5 n=2/4096 show less	Brute-Force SSH
🇨🇦 wil.com	2025-04-22 10:41:41 (1 year ago)	GlobalProtect login attempts with user gmigliorini.	VPN IP Brute-Force
🇺🇸 TPI-Abuse	2025-04-21 08:43:13 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 149.22.88.144 (unn-149-22-88-144.datapacket.com ... show more (mod_security) mod_security (id:210492) triggered by 149.22.88.144 (unn-149-22-88-144.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 21 04:43:07.824519 2025] [security2:error] [pid 529044:tid 529044] [client 149.22.88.144:30529] [client 149.22.88.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stellwagenmusic.com"] [uri "/.env"] [unique_id "aAYFG1in7z4YEr1TIWlmoQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 bescared	2025-04-21 08:02:45 (1 year ago)	F2B - Malicious activity detected. URL Probing.	Hacking Web App Attack
🇪🇸 librebit	2025-04-05 07:41:38 (1 year ago)	Brute force	Brute-Force
🇩🇪 NetworkOperationsTeam	2025-03-19 14:42:09 (1 year ago)	SMS Bombing. Trying to authenticate. API Abuse rate limit exceeded	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:9625:4001

🇺🇸 193.3.53.7

🇺🇸 154.83.197.15

🇺🇸 103.203.57.17

🇸🇬 103.187.146.33

🇮🇳 182.95.113.74

🇮🇳 106.219.247.135

🇮🇳 103.173.211.116

🇳🇱 64.188.77.26

🇺🇦 31.42.184.158

🇺🇸 5.183.252.166

🇺🇸 172.245.225.106

🇧🇷 152.237.134.47

🇮🇩 103.164.213.42

🇮🇩 103.164.194.238

🇺🇸 44.220.185.226

🇸🇬 43.156.51.128

🇨🇳 220.154.133.120

🇸🇬 152.42.176.167

🇨🇦 143.198.47.232