JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.88.20.212

149.88.20.212 was found in our database!

This IP was reported 104 times. Confidence of Abuse is 100%: ?

100%

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-149-88-20-212.datapacket.com
Domain Name	datacamp.co.uk
Country	🇵🇹 Portugal
City	Lisbon, Lisbon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.88.20.212

Whois 149.88.20.212

IP Abuse Reports for 149.88.20.212:

This IP address has been reported a total of 104 times from 81 distinct sources. 149.88.20.212 was first reported on March 23rd 2024, and the most recent report was 9 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-18 05:16:57 (9 minutes ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇫🇷 sthoyer.de	2026-06-18 04:47:09 (39 minutes ago)	149.88.20.212 - - [18/Jun/2026:06:47:00 +0200] "GET /.git/config HTTP/1.1" 302 794 "-" "Mozilla/5.0 ... show more 149.88.20.212 - - [18/Jun/2026:06:47:00 +0200] "GET /.git/config HTTP/1.1" 302 794 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 149.88.20.212 - - [18/Jun/2026:06:47:02 +0200] "GET /.DS_Store HTTP/1.1" 302 495 "-" "python-requests/2.32.5" 149.88.20.212 - - [18/Jun/2026:06:47:08 +0200] "GET /whm HTTP/1.1" 302 495 "-" "python-requests/2.32.5" ... show less	Web App Attack
🇷🇺 Mga Admin	2026-06-18 04:10:05 (1 hour ago)	149.88.20.212 - - [18/Jun/2026:11:10:05 +0700] "POST / HTTP/1.1" 404 838 "-" "python-requests/2.32.5 ... show more 149.88.20.212 - - [18/Jun/2026:11:10:05 +0700] "POST / HTTP/1.1" 404 838 "-" "python-requests/2.32.5" ... show less	Web App Attack
Anonymous	2026-06-18 04:04:37 (1 hour ago)	Aggressive web scan	Web App Attack
🇧🇷 Francisco Carlos	2026-06-18 01:04:19 (4 hours ago)	Honeypot captured 1 automated attack/scan requests (JR Save Tech). Types: git-leak. Sample: GET /.gi ... show more Honeypot captured 1 automated attack/scan requests (JR Save Tech). Types: git-leak. Sample: GET /.git/config show less	Bad Web Bot Web App Attack
🇳🇿 Antinson	2026-06-17 23:21:08 (6 hours ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇩🇪 Robbie	2026-06-17 18:12:39 (11 hours ago)	Jun 17 18:12:38 Ubuntu-2204-jammy-amd64-base sshd[1777944]: Connection closed by 149.88.20.212 port ... show more Jun 17 18:12:38 Ubuntu-2204-jammy-amd64-base sshd[1777944]: Connection closed by 149.88.20.212 port 35350 [preauth] ... show less	Brute-Force SSH
🇸🇪 vaia.cloud	2026-06-17 05:09:01 (1 day ago)	trying wp-login.php/xmlrpc.php 32 times in 1 minutes	Brute-Force Web App Attack
🇫🇷 ✨	2026-06-17 02:01:23 (1 day ago)	Domain : ns6.ormag.net Rule : env 2026-06-17 01:59:19 *hidden-privacy* GET /.env - 80 - 149.88.2 ... show more Domain : ns6.ormag.net Rule : env 2026-06-17 01:59:19 *hidden-privacy* GET /.env - 80 - 149.88.20.212 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36 - *hidden-privacy* 301 0 0 368 213 181 - - show less	Hacking SQL Injection
🇺🇸 paulo.apoloni	2026-06-16 20:13:11 (1 day ago)	149.88.20.212 - - [16/Jun/2026:17:12:22 -0300] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (W ... show more 149.88.20.212 - - [16/Jun/2026:17:12:22 -0300] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 149.88.20.212 - - [16/Jun/2026:17:12:42 -0300] "GET /.DS_Store HTTP/1.1" 444 0 "-" "python-requests/2.32.5" 149.88.20.212 - - [16/Jun/2026:17:13:09 -0300] "POST /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:106.0) Gecko/20100101 Firefox/106.0" 149.88.20.212 - - [16/Jun/2026:17:13:10 -0300] "POST /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:106.0) Gecko/20100101 Firefox/106.0" 149.88.20.212 - - [16/Jun/2026:17:13:11 -0300] "POST /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0" ... show less	Bad Web Bot Web App Attack
🇩🇪 hbrks	2026-06-16 15:02:11 (1 day ago)	200 attack(s) detected, such as these: {"event":"web_block","ip":"149.88.20.212","host":"185.207.107 ... show more 200 attack(s) detected, such as these: {"event":"web_block","ip":"149.88.20.212","host":"185.207.107.155","request":"GET / HTTP/1.1","user_agent":"","reason":"Status-503","timestamp":"2026-06-16T15:02:11 00:00","logentry":"185.207.107.155 149.88.20.212 - - [16/Jun/2026:15:02:11 0000] \"GET / HTTP/1.1\" 503 592 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36\" \"-\""} * Report Details : https://p4u.xyz/S2YLYP0BE0H/1 IP Details *: https://p4u.xyz/S2YLYP0BE0H/2 show less	Web Spam Hacking Bad Web Bot
🇫🇷 ELYAZ	2026-06-16 09:28:22 (1 day ago)	(y3) Failed access -byebye- from 149.88.20.212 (PT/Portugal/unn-149-88-20-212.datapacket.com): (CF_ ... show more (y3) Failed access -byebye- from 149.88.20.212 (PT/Portugal/unn-149-88-20-212.datapacket.com): (CF_ENABLE) show less	Hacking
Anonymous	2026-06-16 01:16:56 (2 days ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇩🇪 updown.io	2026-06-15 23:28:27 (2 days ago)	{"level":"info","ts":1781566031.8904693,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1781566031.8904693,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"149.88.20.212","remote_port":"55393","client_ip":"149.88.20.212","proto":"HTTP/1.1","method":"GET","host":"status-www.lhp-creation.fr","uri":"/.git/config","headers":{"Connection":["keep-alive"],"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"],"Accept-Encoding":[""],"Accept":["/*"]}},"bytes_read":0,"user_id":"","duration":0.000093478,"size":0,"status":308,"resp_headers":{"Content-Type":[],"Server":["Caddy"],"Connection":["close"],"Location":["https://status-www.lhp-creation.fr/.git/config"]}} {"level":"info","ts":1781566032.4814284,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"149.88.20.212","remote_port":"55442","client_ip":"149.88.20.212","proto":"HTTP/1.1","method":"GET","host":"status-www.lhp-creation.fr","uri":"/","headers":{"User-Agent":["Moz ... show less	DDoS Attack Web App Attack
🇩🇪 Céline	2026-06-13 22:44:17 (4 days ago)	Shield Guard: AbuseIPDB: 100% (très malveillant) \| Scanner: python-requests (+20) \| RFI/LFI dans 'PO ... show more Shield Guard: AbuseIPDB: 100% (très malveillant) \| Scanner: python-requests (+20) \| RFI/LFI dans 'POST:0' show less	Web App Attack SQL Injection

Showing 1 to 15 of 104 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 120.34.139.229

🇷🇴 80.94.92.171

🇮🇶 185.166.25.150

🇲🇾 182.63.119.53

🇧🇾 93.84.78.108

🇰🇬 92.62.74.41

🇵🇱 83.4.17.73

🇱🇹 45.227.254.170

🇳🇱 34.6.220.254

🇸🇪 31.59.160.12

🇵🇱 178.219.100.208

🇸🇬 114.119.129.163

🇨🇳 101.65.170.215

🇮🇷 5.22.115.221

🇨🇳 180.153.236.134

🇺🇸 162.216.150.124

🇮🇳 119.161.96.78

🇮🇩 103.142.210.49

🇸🇬 101.47.156.21

🇳🇱 91.92.40.8