JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.88.25.228

149.88.25.228 was found in our database!

This IP was reported 57 times. Confidence of Abuse is 37%: ?

37%

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-149-88-25-228.datapacket.com
Domain Name	datacamp.co.uk
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.88.25.228

Whois 149.88.25.228

IP Abuse Reports for 149.88.25.228:

This IP address has been reported a total of 57 times from 35 distinct sources. 149.88.25.228 was first reported on September 11th 2024, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-06-24 21:04:48 (5 days ago)	149.88.25.228 - - [25/Jun/2026:00:04:47 +0300] "GET /administrator/wp-login.php HTTP/1.1" 404 3305 " ... show more 149.88.25.228 - - [25/Jun/2026:00:04:47 +0300] "GET /administrator/wp-login.php HTTP/1.1" 404 3305 "-" "Wget/1.21.4" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-24 16:41:33 (6 days ago)	149.88.25.228 - - [24/Jun/2026:19:41:32 +0300] "POST /xmlrpc.php HTTP/1.1" 404 3296 "-" "curl/7.88.1 ... show more 149.88.25.228 - - [24/Jun/2026:19:41:32 +0300] "POST /xmlrpc.php HTTP/1.1" 404 3296 "-" "curl/7.88.1" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-23 21:06:35 (6 days ago)	149.88.25.228 - - [24/Jun/2026:00:06:34 +0300] "POST /xmlrpc.php HTTP/1.1" 404 3298 "-" "curl/8.6.0" ... show more 149.88.25.228 - - [24/Jun/2026:00:06:34 +0300] "POST /xmlrpc.php HTTP/1.1" 404 3298 "-" "curl/8.6.0" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-23 17:48:59 (6 days ago)	149.88.25.228 - - [23/Jun/2026:20:48:55 +0300] "GET /wp-login.php HTTP/1.1" 404 3297 "-" "Wget/1.21. ... show more 149.88.25.228 - - [23/Jun/2026:20:48:55 +0300] "GET /wp-login.php HTTP/1.1" 404 3297 "-" "Wget/1.21.4" 149.88.25.228 - - [23/Jun/2026:20:48:57 +0300] "GET /wp-admin/ HTTP/1.1" 404 3297 "-" "Wget/1.21.4" ... show less	Web App Attack
🇳🇱 vibegamesnl	2026-06-16 12:00:00 (2 weeks ago)	Credential stuffing attack observed. Multiple malicious login attempts using usernames/passwords ass ... show more Credential stuffing attack observed. Multiple malicious login attempts using usernames/passwords associated with known data breaches. 728 attempts recorded. show less	Brute-Force
🇺🇸 threatintelligence_bvc	2026-06-16 00:19:01 (2 weeks ago)		Brute-Force
🇧🇪 Saec	2026-06-12 00:30:11 (2 weeks ago)	Jarvis auto-ban: CF honeypot path /wp-login.php (1× on saec.me)	Port Scan Web App Attack
Anonymous	2026-05-29 23:04:31 (1 month ago)	Credential Stuffing attacks against Microsoft 365	Brute-Force
🇦🇺 oncord	2026-05-27 08:18:07 (1 month ago)	Form spam	Web Spam
Anonymous	2026-05-25 23:27:27 (1 month ago)	Credential Stuffing attacks against Microsoft 365	Brute-Force
🇮🇩 sockominfo	2026-05-21 11:00:41 (1 month ago)	Zimbra: Login failures from malicious IP: 149.88.25.228. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 149.88.25.228. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-21 10:00:40 (1 month ago)	Zimbra: Login failures from malicious IP: 149.88.25.228. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 149.88.25.228. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-21 09:00:12 (1 month ago)	Zimbra: Login failures from malicious IP: 149.88.25.228. Threat Score: 5.8/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 149.88.25.228. Threat Score: 5.8/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇺🇸 threatintelligence_bvc	2026-05-17 06:57:25 (1 month ago)		Brute-Force
🇺🇸 threatintelligence_bvc	2026-05-15 06:58:16 (1 month ago)		Brute-Force

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 207.191.160.29

🇺🇸 172.236.117.243

🇳🇱 128.90.141.18

🇧🇷 201.6.226.126

🇲🇽 187.170.65.227

🇧🇷 177.75.110.242

🇦🇪 83.110.102.221

🇺🇦 79.143.45.75

🇺🇸 52.44.250.30

🇺🇸 45.61.184.21

🇺🇸 20.98.128.111

🇬🇧 2.57.17.77

🇳🇱 193.39.208.26

🇺🇸 152.32.149.19

🇫🇷 91.231.89.245

🇳🇱 45.148.10.152

🇬🇧 74.0.32.178

🇮🇩 49.0.24.107

🇩🇪 43.165.3.187

🇧🇷 189.50.142.78