JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.88.22.172

149.88.22.172 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 25%: ?

25%

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-149-88-22-172.datapacket.com
Domain Name	datacamp.co.uk
Country	🇲🇽 Mexico
City	Santiago de Queretaro, Queretaro

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.88.22.172

Whois 149.88.22.172

IP Abuse Reports for 149.88.22.172:

This IP address has been reported a total of 22 times from 20 distinct sources. 149.88.22.172 was first reported on December 20th 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 sbajic	2026-07-08 15:09:05 (2 weeks ago)	Jul 8 17:09:03 eos pure-ftpd[930655]: ([email protected]) [WARNING] Authentication failed for user [a ... show more Jul 8 17:09:03 eos pure-ftpd[930655]: ([email protected]) [WARNING] Authentication failed for user [admin] Jul 8 17:09:04 eos pure-ftpd[930657]: ([email protected]) [WARNING] Authentication failed for user [info] Jul 8 17:09:04 eos pure-ftpd[930659]: ([email protected]) [WARNING] Authentication failed for user [info_claudesign] ... show less	FTP Brute-Force
🇮🇹 VHosting	2026-07-08 14:35:04 (2 weeks ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 xmission.com	2026-06-19 22:35:56 (1 month ago)	Blocked by UFW (TCP on 51413) Source port: 44079 TTL: 50 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 51413) Source port: 44079 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 149.88.22.172) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-16 17:00:11 (1 month ago)	\| Multiple SQL injection attempts from same source ip.(multiple servers)	Web App Attack Hacking SQL Injection
Anonymous	2026-06-15 14:06:08 (1 month ago)	Try to connect to Port_Scan_51820_stealth	Port Scan
🇮🇩 xveil	2026-05-29 19:53:51 (1 month ago)	2026-05-30T02:53:47.342937 mail-honeypot postfix/submission/smtpd[28096]: warning: unknown[149.88.22 ... show more 2026-05-30T02:53:47.342937 mail-honeypot postfix/submission/smtpd[28096]: warning: unknown[149.88.22.172]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇺🇸 bigscoots.com	2026-05-29 19:07:36 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 149.88.22.172 (MX/Mexico/unn-149-88-22-172.datapacket.com): 5 ... show more (smtpauth) Failed SMTP AUTH login from 149.88.22.172 (MX/Mexico/unn-149-88-22-172.datapacket.com): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-05-29 14:47:03 dovecot_plain authenticator failed for H=([192.168.1.4]) [149.88.22.172]:56755: 535 Incorrect authentication data ([email protected]) 2026-05-29 14:47:10 dovecot_login authenticator failed for H=([192.168.1.4]) [149.88.22.172]:56755: 535 Incorrect authentication data ([email protected]) 2026-05-29 14:47:37 dovecot_plain authenticator failed for H=([192.168.1.4]) [149.88.22.172]:57310: 535 Incorrect authentication data ([email protected]) 2026-05-29 14:47:40 dovecot_login authenticator failed for H=([192.168.1.4]) [149.88.22.172]:57310: 535 Incorrect authentication data ([email protected]) 2026-05-29 15:07:33 dovecot_plain authenticator failed for H=([192.168.1.4]) [149.88.22.172]:38620: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇨🇭 4server	2026-04-12 13:51:47 (3 months ago)	[SunApr1215:51:44.3895932026][security2:error][pid1622130:tid1622223][client149.88.22.172:0]ModSecur ... show more [SunApr1215:51:44.3895932026][security2:error][pid1622130:tid1622223][client149.88.22.172:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"342\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.endlesspoolsticino.ch.81-17-25-250.cpanel.site\"][uri\"/.env\"][unique_id\"adujcEelCyw-8oX_8px23gAAAFI\"] show less	Hacking Web App Attack
🇩🇪 4server	2026-04-12 13:03:37 (3 months ago)	[SunApr1215:03:32.2603182026][security2:error][pid3325951:tid3325996][client149.88.22.172:0]ModSecur ... show more [SunApr1215:03:32.2603182026][security2:error][pid3325951:tid3325996][client149.88.22.172:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"195\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"www.allegraravizza.it.136-243-54-122.cpanel.site\"][uri\"/.env\"][unique_id\"aduYJFVsVil6VIx2OK9abAAAAIs\"] show less	Port Scan Brute-Force Web App Attack
🇷🇺 DZBOT	2026-03-19 00:57:33 (4 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇨🇳 ThreatBook.io	2026-01-29 22:11:45 (5 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/149.88.22.172 2026-01-29 ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/149.88.22.172 2026-01-29 06:33:46 / show less	Web App Attack
🇺🇸 xmission.com	2025-10-20 05:22:40 (9 months ago)	Blocked by UFW (TCP on 51413) Source port: 55964 TTL: 116 Packet length: 52 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 51413) Source port: 55964 TTL: 116 Packet length: 52 TOS: 0x00 This report (for 149.88.22.172) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 Largnet SOC	2025-04-19 19:08:12 (1 year ago)	149.88.22.172 triggered Icarus honeypot on port 3306. Check us out on github.	Port Scan Hacking
Anonymous	2024-06-18 06:24:00 (2 years ago)	Hacking activities	Hacking SQL Injection
🇧🇷 diego	2024-06-18 04:47:42 (2 years ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇴 186.120.179.222

🇺🇸 165.154.235.9

🇺🇸 162.216.149.157

🇳🇱 91.92.40.29

🇫🇷 85.204.70.100

🇺🇸 73.172.8.81

🇳🇱 45.148.10.152

🇩🇪 45.80.164.203

🇬🇧 35.203.211.196

🇺🇸 20.65.194.96

🇹🇼 221.120.73.25

🇨🇳 183.215.74.5

🇮🇹 172.213.8.106

🇺🇸 167.99.122.132

🇺🇸 162.216.150.226

🇺🇸 107.167.34.125

🇺🇸 104.232.79.58

🇷🇺 86.62.14.78

🇺🇸 74.82.47.23

🇸🇬 2404:6800:4003:c1a::126