JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.88.28.129

149.88.28.129 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 41%: ?

41%

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-149-88-28-129.datapacket.com
Domain Name	datacamp.co.uk
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.88.28.129

Whois 149.88.28.129

IP Abuse Reports for 149.88.28.129:

This IP address has been reported a total of 20 times from 10 distinct sources. 149.88.28.129 was first reported on June 10th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 britishrock	2026-08-20 21:11:50 (5 days ago)	Automated Block: HACK in REFERER: order by	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-19 23:46:22 (6 days ago)	(mod_security) mod_security (id:218580) triggered by 149.88.28.129 (unn-149-88-28-129.datapacket.com ... show more (mod_security) mod_security (id:218580) triggered by 149.88.28.129 (unn-149-88-28-129.datapacket.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 19:46:14.278478 2026] [security2:error] [pid 29430:tid 29430] [client 149.88.28.129:19276] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\/\\\\[!+](?:[\\\\w\\\\s=_\\\\-()]+)?\\\\*\\\\/)" at ARGS:tid. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "76"] [id "218580"] [rev "1"] [msg "COMODO WAF: MySQL in-line comment detected.\|\|www.powerkiteforum.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.powerkiteforum.com"] [uri "/viewthread.php"] [unique_id "aoZARhSTR81yBoEVcw9MxQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 raph	2026-08-19 23:06:48 (6 days ago)	[SQL UNION SELECT] f2b match %{+Q}r for ^.haproxy\[[0-9]+\]: <HOST>:. (GET \|POST ).\?.(UNION%20\| ... show more [SQL UNION SELECT] f2b match %{+Q}r for ^.haproxy\[[0-9]+\]: <HOST>:. (GET \|POST ).\?.(UNION%20\|union%20\|SELECT%20\|select%20).* HTTP/1.1$ show less	SQL Injection
Anonymous	2026-08-18 22:00:11 (1 week ago)	\| Multiple SQL injection attempts from same source ip.(multiple servers)	Web App Attack Hacking SQL Injection
🇩🇪 raph	2026-08-18 21:23:32 (1 week ago)	[SQL UNION SELECT] f2b match %{+Q}r for ^.haproxy\[[0-9]+\]: <HOST>:. (GET \|POST ).\?.(UNION%20\| ... show more [SQL UNION SELECT] f2b match %{+Q}r for ^.haproxy\[[0-9]+\]: <HOST>:. (GET \|POST ).\?.(UNION%20\|union%20\|SELECT%20\|select%20).* HTTP/1.1$ show less	SQL Injection
🇮🇹 VHosting	2026-08-15 02:10:05 (1 week ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇺🇸 xmission.com	2026-08-11 17:31:38 (2 weeks ago)	Blocked by UFW (TCP on 48359) Source port: 48432 TTL: 51 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 48359) Source port: 48432 TTL: 51 Packet length: 60 TOS: 0x08 This report (for 149.88.28.129) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇿🇦 maximonline.co.za	2026-08-06 15:40:34 (2 weeks ago)	Brute Force IMAP AUTH Attack	Brute-Force
🇺🇸 xmission.com	2026-07-31 07:22:57 (3 weeks ago)	Blocked by UFW (TCP on 59558) Source port: 5558 TTL: 49 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 59558) Source port: 5558 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 149.88.28.129) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-23 18:57:58 (1 month ago)	Blocked by UFW (TCP on 59558) Source port: 58316 TTL: 49 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 59558) Source port: 58316 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 149.88.28.129) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-19 10:04:57 (1 month ago)	Blocked by UFW (TCP on 2313) Source port: 38488 TTL: 51 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 2313) Source port: 38488 TTL: 51 Packet length: 60 TOS: 0x08 This report (for 149.88.28.129) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 WeCloudit-Anti-Abuse	2026-07-18 07:16:05 (1 month ago)	HTTP flood against /retreat-corp on Apache webserver	Brute-Force
🇳🇱 WeCloudit-Anti-Abuse	2026-07-16 07:53:12 (1 month ago)	HTTP flood against /retreat-corp on Apache webserver	Brute-Force
🇺🇸 xmission.com	2026-07-01 17:30:19 (1 month ago)	Blocked by UFW (TCP on 24656) Source port: 58022 TTL: 50 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 24656) Source port: 58022 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 149.88.28.129) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇹 VHosting	2026-06-21 17:58:41 (2 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 203.170.192.251

🇱🇹 62.60.130.242

🇹🇼 35.221.173.161

🇨🇳 175.6.109.238

🇹🇼 172.68.87.191

🇩🇪 167.233.38.233

🇩🇪 167.94.146.33

🇹🇼 34.81.52.111

🇹🇼 34.80.34.43

🇦🇷 181.44.165.181

🇮🇶 138.124.158.150

🇫🇷 213.136.68.185

🇳🇱 188.42.132.21

🇳🇬 165.154.11.37

🇨🇳 121.27.240.212

🇨🇦 85.217.149.74

🇱🇹 62.60.130.201

🇹🇼 61.220.235.10

🇺🇸 34.73.78.172

🇰🇷 218.156.8.97