JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.88.98.54

149.88.98.54 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 2%: ?

ISP	DataCamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-149-88-98-54.datapacket.com
Domain Name	datacamp.co.uk
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.88.98.54

Whois 149.88.98.54

IP Abuse Reports for 149.88.98.54:

This IP address has been reported a total of 16 times from 11 distinct sources. 149.88.98.54 was first reported on December 1st 2025, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 Mikrotik_rb4011	2026-07-26 19:16:39 (11 hours ago)	Port scanning	Port Scan Hacking
Anonymous	2026-05-20 04:09:06 (2 months ago)	Web attack	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-05-12 17:12:17 (2 months ago)	Excessive 404/403 errors	Brute-Force
🇩🇪 rh24	2026-05-08 19:05:41 (2 months ago)	(wordpress) Failed wordpress login from 149.88.98.54 (CA/Canada/unn-149-88-98-54.datapacket.com): ( ... show more (wordpress) Failed wordpress login from 149.88.98.54 (CA/Canada/unn-149-88-98-54.datapacket.com): (CF_ENABLE) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-04-19 08:38:43 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 149.88.98.54 (unn-149-88-98-54.datapacket.com): ... show more (mod_security) mod_security (id:210730) triggered by 149.88.98.54 (unn-149-88-98-54.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 19 04:38:38.200788 2026] [security2:error] [pid 2175248:tid 2175301] [client 149.88.98.54:55114] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|econpage.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "econpage.com"] [uri "/backups/site.sql"] [unique_id "aeSUjrTf86OnBSA7zzzOVQAAAJU"], referer: http://econpage.com/backups/site.sql show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Antinson	2026-04-03 19:32:00 (3 months ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇫🇷 dynamix	2026-04-03 16:13:58 (3 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 COMPLEX	2026-01-01 01:57:25 (6 months ago)	Unsolicited TCP traffic \| Action: DROP \| Port 5902	Brute-Force
🇺🇸 COMPLEX	2025-12-21 00:55:51 (7 months ago)	Unsolicited TCP traffic \| Action: DROP \| Port 5902	Brute-Force
Anonymous	2025-12-12 12:57:21 (7 months ago)	Blocked: Reason='Auto-block via DW'; Requests=0	Hacking
Anonymous	2025-12-07 22:49:11 (7 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-backdoors-attempts	Web App Attack
🇳🇿 Antinson	2025-12-07 20:05:32 (7 months ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-05 20:14:52 (7 months ago)	(mod_security) mod_security (id:240000) triggered by 149.88.98.54 (unn-149-88-98-54.datapacket.com): ... show more (mod_security) mod_security (id:240000) triggered by 149.88.98.54 (unn-149-88-98-54.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 15:14:48.964881 2025] [security2:error] [pid 18044:tid 18044] [client 149.88.98.54:60354] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.bigskyprints.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.bigskyprints.com"] [uri "/images/stories/themes.php"] [unique_id "aTM9OBk-2oVjidHDkWLaqQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-04 08:08:22 (7 months ago)	(mod_security) mod_security (id:240000) triggered by 149.88.98.54 (unn-149-88-98-54.datapacket.com): ... show more (mod_security) mod_security (id:240000) triggered by 149.88.98.54 (unn-149-88-98-54.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 03:08:16.856811 2025] [security2:error] [pid 14286:tid 14286] [client 149.88.98.54:53326] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|pbhomesinc.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "pbhomesinc.net"] [uri "/images/stories/themes.php"] [unique_id "aTFBcE6gq-ytTCddQiWc1wAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2025-12-02 23:05:11 (7 months ago)	340 requests with url.path /.well-known/acme-challenge/.php 306 requests with url.path /.well-k ... show more 340 requests with url.path /.well-known/acme-challenge/.php 306 requests with url.path /.well-known/pki-validation/*.php show less	Brute-Force Bad Web Bot

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 130.195.216.71

🇿🇲 102.220.158.165

🇫🇷 91.231.89.86

🇺🇸 66.132.172.36

🇺🇸 64.62.156.173

🇨🇦 52.139.36.144

🇨🇳 219.153.113.101

🇳🇱 195.178.110.137

🇩🇪 193.124.20.227

🇺🇸 172.202.117.177

🇺🇸 144.225.6.161

🇨🇦 144.217.146.128

🇨🇦 143.110.219.30

🇬🇧 139.59.183.75

🇻🇳 123.23.115.161

🇮🇳 122.177.244.101

🇹🇼 111.70.11.78

🇰🇪 105.27.148.94

🇧🇬 93.94.141.115

🇵🇱 83.168.110.23