JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.88.98.24

149.88.98.24 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 28%: ?

28%

ISP	DataCamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-149-88-98-24.datapacket.com
Domain Name	datacamp.co.uk
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.88.98.24

Whois 149.88.98.24

IP Abuse Reports for 149.88.98.24:

This IP address has been reported a total of 30 times from 23 distinct sources. 149.88.98.24 was first reported on December 1st 2025, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 maxasp.net	2026-09-17 07:13:06 (14 hours ago)	F5 Connection Limit to alp-ssl1.maximtech.com	DDoS Attack
🇺🇸 sargetun	2026-09-17 03:35:04 (17 hours ago)	Honeypot: VNC probe on port 5900 at 2026-09-17 03:32:27.023724. Automated report from VPS honeypot.	Port Scan
🇺🇸 wristhulk	2026-09-17 03:32:58 (17 hours ago)	Honeypot: VNC brute-force on OpenCanary honeypot (port 5900). Password not in common list (custom wo ... show more Honeypot: VNC brute-force on OpenCanary honeypot (port 5900). Password not in common list (custom wordlist). show less	Brute-Force
🇺🇸 drewf.ink	2026-09-17 03:29:47 (18 hours ago)	[03:29] Attempted VNC authentication via legacy RFB 003.003 - challenge=88392004acbf204bb48240b04351 ... show more [03:29] Attempted VNC authentication via legacy RFB 003.003 - challenge=88392004acbf204bb48240b043519942 response=c7f2093b8c7e68df5b80d35c2694821e show less	Hacking Brute-Force
🇺🇸 wristhulk	2026-09-11 11:37:14 (6 days ago)	Honeypot: VNC brute-force on OpenCanary honeypot (port 5900). Password not in common list (custom wo ... show more Honeypot: VNC brute-force on OpenCanary honeypot (port 5900). Password not in common list (custom wordlist). show less	Brute-Force
🇺🇸 drewf.ink	2026-09-11 11:34:22 (6 days ago)	[11:34] Attempted VNC authentication (DES challenge-response)	Hacking Brute-Force
🇨🇦 1gz	2026-07-19 03:11:18 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: CHALLENGE Protocol: HTTP/2 (GET met ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: /script.js UA: Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/150.0.7871.113 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-06-27 10:45:18 (2 months ago)	Automated report (2026-06-27T06:45:18-04:00). Scraper detected.	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-24 23:47:08 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 149.88.98.24 (unn-149-88-98-24.datapacket.com): ... show more (mod_security) mod_security (id:210730) triggered by 149.88.98.24 (unn-149-88-98-24.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 19:47:03.694828 2026] [security2:error] [pid 19127:tid 19127] [client 149.88.98.24:51728] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|chatgptfrance.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "chatgptfrance.net"] [uri "/backupdb.sql"] [unique_id "ajxsdw3kvNu1CjpaCGi1PQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 SMARTNET	2026-05-27 06:03:53 (3 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: e316b406-db2c-400a-bc37-dfbfcc0acc61	DDoS Attack
🇺🇸 RAP	2026-05-24 19:55:50 (3 months ago)	2026-05-24 19:55:50 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 Charlesiv	2026-05-20 00:02:51 (3 months ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: BLOCK ASN: 212238 (Datacamp Limited ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: BLOCK ASN: 212238 (Datacamp Limited) Protocol: HTTP/1.1 (GET method) Endpoint: /hubs/sections/2 Query: ?count=6&includeExternalMetadata=1&includeMyMixes=1&includeAnniversaryReleases=1&excludeElements=Similar,Mood&includeLibraryPlaylists=1&includeStations=1&includeStationDirectories=1&excludeFields=summary&includeFields=thumbBlurHash&X-Plex-Device-Name=Android Timestamp: 2026-05-19T22:36:03Z Ray ID: 9fe6940ceba17114 UA: TREBLE/2.1 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-12 11:19:46 (4 months ago)	(mod_security) mod_security (id:240000) triggered by 149.88.98.24 (unn-149-88-98-24.datapacket.com): ... show more (mod_security) mod_security (id:240000) triggered by 149.88.98.24 (unn-149-88-98-24.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 07:19:41.549287 2026] [security2:error] [pid 30420:tid 30420] [client 149.88.98.24:39634] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|teamwakimphotography.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "teamwakimphotography.com"] [uri "/images/stories/themes.php"] [unique_id "agMMzVqb5qtCgsHDLr_T3QAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-05-09 04:15:18 (4 months ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇬🇧 consul.to	2026-05-09 01:15:10 (4 months ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇪 197.232.56.34

🇺🇸 195.184.76.104

🇦🇱 172.216.14.246

🇨🇳 112.52.27.96

🇺🇸 98.48.31.103

🇲🇩 80.96.59.105

🇨🇳 60.26.3.33

🇳🇱 213.206.207.162

🇳🇱 193.47.62.69

🇺🇸 144.172.105.41

🇨🇳 124.64.200.152

🇺🇸 20.127.185.37

🇩🇪 2602:80d:1005::17

🇧🇷 205.210.31.192

🇮🇹 84.33.242.226

🇳🇱 45.148.10.157

🇧🇷 201.139.186.238

🇨🇴 186.169.112.127

🇫🇷 152.228.213.32

🇩🇪 47.254.144.24