JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.50.220.178

149.50.220.178 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 26%: ?

26%

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-149-50-220-178.datapacket.com
Domain Name	datacamp.co.uk
Country	🇫🇷 France
City	Marseille, Provence-Alpes-Cote d'Azur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.50.220.178

Whois 149.50.220.178

IP Abuse Reports for 149.50.220.178:

This IP address has been reported a total of 22 times from 15 distinct sources. 149.50.220.178 was first reported on August 11th 2025, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 threatintelligence_bvc	2026-06-04 08:58:06 (19 hours ago)		Brute-Force
Anonymous	2026-05-07 04:27:02 (4 weeks ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇧🇷 KingHost	2026-05-07 02:21:36 (4 weeks ago)		Brute-Force
🇫🇷 UM3	2026-04-26 16:12:29 (1 month ago)	Exim Auth Failed	Brute-Force
Anonymous	2026-04-07 19:21:31 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 149.50.220.178 (FR/France/Bouches-du-Rhône/Marseille/unn-149- ... show more (smtpauth) Failed SMTP AUTH login from 149.50.220.178 (FR/France/Bouches-du-Rhône/Marseille/unn-149-50-220-178.datapacket.com/[redacted]) show less	Brute-Force
🇨🇴 conexcol	2026-04-07 16:34:49 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 149.50.220.178 (FR/France/unn-149-50-220-178.datapacket.com): ... show more (smtpauth) Failed SMTP AUTH login from 149.50.220.178 (FR/France/unn-149-50-220-178.datapacket.com): 5 in the last 3600 secs show less	Brute-Force
Anonymous	2026-04-07 16:04:22 (1 month ago)	Credential Stuffing attacks against Microsoft 365	Brute-Force
🇨🇴 conexcol	2026-04-07 13:11:09 (1 month ago)	149.50.220.178 (FR/France/unn-149-50-220-178.datapacket.com), 5 distributed smtpauth attacks on acco ... show more 149.50.220.178 (FR/France/unn-149-50-220-178.datapacket.com), 5 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
🇮🇹 VHosting	2026-02-26 12:19:34 (3 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇹🇷 rtbh.com.tr	2026-02-15 20:11:35 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-02-13 20:11:35 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 TPI-Abuse	2025-11-29 11:57:38 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 149.50.220.178 (unn-149-50-220-178.datapacket.c ... show more (mod_security) mod_security (id:210492) triggered by 149.50.220.178 (unn-149-50-220-178.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 29 06:57:32.688364 2025] [security2:error] [pid 4976:tid 4976] [client 149.50.220.178:22373] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clcmillvale.com"] [uri "/.env"] [unique_id "aSrfrI7BVcvnNPa9Z9MFlQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-29 09:33:58 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 149.50.220.178 (unn-149-50-220-178.datapacket.c ... show more (mod_security) mod_security (id:210492) triggered by 149.50.220.178 (unn-149-50-220-178.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 29 04:33:52.337854 2025] [security2:error] [pid 508668:tid 508668] [client 149.50.220.178:44908] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aeongames.com"] [uri "/.env"] [unique_id "aSq-AIuOP3qFxSw47ps55wAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-29 09:17:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 149.50.220.178 (unn-149-50-220-178.datapacket.c ... show more (mod_security) mod_security (id:210492) triggered by 149.50.220.178 (unn-149-50-220-178.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 29 04:17:26.057062 2025] [security2:error] [pid 9235:tid 9320] [client 149.50.220.178:54369] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chelseyrae.com"] [uri "/.env"] [unique_id "aSq6Jh5238C5cqXifQZ6ZQAAANE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2025-11-29 08:49:18 (6 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇶🇦 2600:1900:4260:40e::121

🇺🇸 216.25.89.103

🇳🇱 91.221.190.152

🇪🇸 31.24.155.180

🇰🇷 211.223.107.86

🇮🇩 202.10.40.201

🇲🇽 177.232.91.182

🇺🇸 172.70.206.81

🇩🇪 165.154.138.151

🇯🇵 153.120.23.154

🇮🇩 103.85.66.217

🇺🇸 71.6.233.211

🇫🇮 46.62.131.178

🇺🇸 45.79.177.104

🇧🇷 205.210.31.177

🇳🇱 204.76.203.214

🇺🇸 162.216.150.242

🇰🇷 112.214.17.61

🇸🇬 104.43.52.173

🇮🇳 45.123.217.22