JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.88.102.42

149.88.102.42 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 16%: ?

16%

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-149-88-102-42.datapacket.com
Domain Name	datacamp.co.uk
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.88.102.42

Whois 149.88.102.42

IP Abuse Reports for 149.88.102.42:

This IP address has been reported a total of 24 times from 13 distinct sources. 149.88.102.42 was first reported on May 31st 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Bruce5051	2026-05-09 19:12:10 (1 month ago)	149.88.102.42 - - [09/May/2026:12:12:09 -0700] "GET /.env.local HTTP/2.0" 404 170 "-" "Mozilla/5.0 ( ... show more 149.88.102.42 - - [09/May/2026:12:12:09 -0700] "GET /.env.local HTTP/2.0" 404 170 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/123.0 Safari/537.36 Edg/123.0" ... show less	Hacking Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-09 13:31:34 (1 month ago)	(PERMBLOCK) 149.88.102.42 (DE/Germany/unn-149-88-102-42.datapacket.com) has had more than 4 temp blo ... show more (PERMBLOCK) 149.88.102.42 (DE/Germany/unn-149-88-102-42.datapacket.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
Anonymous	2026-05-09 12:05:45 (1 month ago)	(caddyscan) Scanner path probe from 149.88.102.42 (DE/Germany/unn-149-88-102-42.datapacket.com): 5 i ... show more (caddyscan) Scanner path probe from 149.88.102.42 (DE/Germany/unn-149-88-102-42.datapacket.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 149.88.102.42 - - [09/May/2026:12:05:23 +0000] "GET /.aws/credentials HTTP/1.1" [REDACTED] 200 2627 149.88.102.42 - - [09/May/2026:12:05:24 +0000] "GET /wp-config.php.bak HTTP/1.1" [REDACTED] 200 2627 149.88.102.42 - - [09/May/2026:12:05:40 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 149.88.102.42 - - [09/May/2026:12:05:41 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 149.88.102.42 - - [09/May/2026:12:05:41 +0000] "GET /.env.local HTTP/1.1" show less	Port Scan
Anonymous	2026-05-09 10:56:49 (1 month ago)	(caddyscan) Scanner path probe from 149.88.102.42 (DE/Germany/unn-149-88-102-42.datapacket.com): 5 i ... show more (caddyscan) Scanner path probe from 149.88.102.42 (DE/Germany/unn-149-88-102-42.datapacket.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 149.88.102.42 - - [09/May/2026:10:56:45 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 149.88.102.42 - - [09/May/2026:10:56:45 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 149.88.102.42 - - [09/May/2026:10:56:46 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 149.88.102.42 - - [09/May/2026:10:56:47 +0000] "GET /.aws/credentials HTTP/1.1" [REDACTED] 200 2627 149.88.102.42 - - [09/May/2026:10:56:47 +0000] "GET /wp-config.php.bak HTTP/1.1" show less	Port Scan
🇳🇱 e.fierstra	2026-05-09 10:53:15 (1 month ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
Anonymous	2026-05-09 10:07:29 (1 month ago)	(caddyscan) Scanner path probe from 149.88.102.42 (DE/Germany/unn-149-88-102-42.datapacket.com): 5 i ... show more (caddyscan) Scanner path probe from 149.88.102.42 (DE/Germany/unn-149-88-102-42.datapacket.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 149.88.102.42 - - [09/May/2026:10:04:28 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 149.88.102.42 - - [09/May/2026:10:07:26 +0000] "GET /.env.backup HTTP/1.1" [REDACTED] 200 2627 149.88.102.42 - - [09/May/2026:10:07:26 +0000] "GET /.aws/credentials HTTP/1.1" [REDACTED] 200 2627 149.88.102.42 - - [09/May/2026:10:07:26 +0000] "GET /.env.backup HTTP/1.1" [REDACTED] 200 2627 149.88.102.42 - - [09/May/2026:10:07:26 +0000] "GET /wp-config.php.bak HTTP/1.1" show less	Port Scan
Anonymous	2026-05-09 09:32:36 (1 month ago)	(caddyscan) Scanner path probe from 149.88.102.42 (DE/Germany/unn-149-88-102-42.datapacket.com): 5 i ... show more (caddyscan) Scanner path probe from 149.88.102.42 (DE/Germany/unn-149-88-102-42.datapacket.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 149.88.102.42 - - [09/May/2026:09:32:29 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 149.88.102.42 - - [09/May/2026:09:32:29 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 149.88.102.42 - - [09/May/2026:09:32:30 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 149.88.102.42 - - [09/May/2026:09:32:33 +0000] "GET /wp-config.php.bak HTTP/1.1" [REDACTED] 200 2627 149.88.102.42 - - [09/May/2026:09:32:34 +0000] "GET /.env.production HTTP/1.1" show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-02 23:57:33 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 149.88.102.42 (unn-149-88-102-42.datapacket.com ... show more (mod_security) mod_security (id:210492) triggered by 149.88.102.42 (unn-149-88-102-42.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 19:57:27.312985 2026] [security2:error] [pid 22889:tid 22889] [client 149.88.102.42:25439] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web233.dnchosting.com"] [uri "/.env.production.local"] [unique_id "afaPZ3_-E1G03nDQVjDA6AAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 creations.works	2025-12-16 00:34:30 (5 months ago)	Blocked by UFW on atums [43493/tcp] Source port: 49066 TTL: 59 Packet length: 60 TOS: 0x00 This rep ... show more Blocked by UFW on atums [43493/tcp] Source port: 49066 TTL: 59 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 marzzzello	2025-12-14 06:44:59 (5 months ago)	Ports: 14x 33101, 6x 50080	Port Scan
🇩🇪 marzzzello	2025-12-14 00:04:11 (5 months ago)	Ports: 14x 33101, 7x 22253	Port Scan
🇩🇪 marzzzello	2025-12-13 07:03:33 (5 months ago)	Ports: 15x 33101, 7x 50080	Port Scan
🇩🇪 Packets-Decreaser.NET	2025-09-05 19:42:24 (9 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-05-08 14:16:11 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇦🇺 Bay13	2025-05-08 13:32:20 (1 year ago)	f2b urlscanners	Port Scan Hacking Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 104.22.66.3

🇭🇰 223.197.178.95

🇯🇵 210.156.0.132

🇮🇩 182.6.46.156

🇺🇸 173.239.240.119

🇹🇭 171.6.9.89

🇨🇳 121.29.84.25

🇷🇺 94.180.250.11

🇷🇴 92.118.39.62

🇰🇭 36.37.211.116

🇮🇳 223.233.70.175

🇨🇳 202.105.98.252

🇳🇱 178.16.53.13

🇭🇰 172.253.6.22

🇨🇳 101.89.116.144

🇯🇴 86.108.23.237

🇺🇸 66.132.224.28

🇪🇸 46.253.45.10

🇳🇱 45.9.191.184

🇬🇧 35.203.211.80