JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.233.20.24

152.233.20.24 was found in our database!

This IP was reported 67 times. Confidence of Abuse is 57%: ?

57%

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-152-233-20-24.datapacket.com
Domain Name	datacamp.co.uk
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.233.20.24

Whois 152.233.20.24

IP Abuse Reports for 152.233.20.24:

This IP address has been reported a total of 67 times from 48 distinct sources. 152.233.20.24 was first reported on October 6th 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 enpepet	2026-07-27 07:20:12 (8 hours ago)	GENERAL: parametres: [url:uploadCustomIcon=] UA:Mozilla/5.0 (X11; Linux x86_64) sppb-rce-poc URL:/in ... show more GENERAL: parametres: [url:uploadCustomIcon=] UA:Mozilla/5.0 (X11; Linux x86_64) sppb-rce-poc URL:/index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon show less	Port Scan Hacking Brute-Force Bad Web Bot
🇩🇪 HandyTreff.de	2026-07-26 08:39:45 (1 day ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -37.476 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -37.476 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Sa show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-24 20:11:51 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 152.233.20.24 (unn-152-233-20-24.datapacket.com ... show more (mod_security) mod_security (id:210492) triggered by 152.233.20.24 (unn-152-233-20-24.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 16:11:43.734716 2026] [security2:error] [pid 598766:tid 598766] [client 152.233.20.24:50519] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "idetailingcreatives.com"] [uri "/.env"] [unique_id "amPG_65CDT-9xs04h3ejeAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 19:11:28 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 152.233.20.24 (unn-152-233-20-24.datapacket.com ... show more (mod_security) mod_security (id:210492) triggered by 152.233.20.24 (unn-152-233-20-24.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 15:11:21.513264 2026] [security2:error] [pid 1057029:tid 1057029] [client 152.233.20.24:59280] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ianadolphus.com"] [uri "/.env"] [unique_id "amO42ay0YFlmH40yUhAINQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 18:36:18 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 152.233.20.24 (unn-152-233-20-24.datapacket.com ... show more (mod_security) mod_security (id:210492) triggered by 152.233.20.24 (unn-152-233-20-24.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 14:36:14.238316 2026] [security2:error] [pid 1161361:tid 1161361] [client 152.233.20.24:51469] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "icesoft.blog"] [uri "/.env"] [unique_id "amOwnkMM0JKstRT_O3FRVgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 18:00:35 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 152.233.20.24 (unn-152-233-20-24.datapacket.com ... show more (mod_security) mod_security (id:210492) triggered by 152.233.20.24 (unn-152-233-20-24.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 14:00:30.952975 2026] [security2:error] [pid 137122:tid 137122] [client 152.233.20.24:60742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iclog.us"] [uri "/.env"] [unique_id "amOoPv37PsCtARUAqYTW_gAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 17:17:10 (2 days ago)	(mod_security) mod_security (id:949110) triggered by 152.233.20.24 (unn-152-233-20-24.datapacket.com ... show more (mod_security) mod_security (id:949110) triggered by 152.233.20.24 (unn-152-233-20-24.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 13:17:03.151494 2026] [security2:error] [pid 532738:tid 532738] [client 152.233.20.24:53375] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "i-dataph.com"] [uri "/.env"] [unique_id "amOeD7wsjRaVeU-j_8eckwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-24 16:40:01 (2 days ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 16:34:57 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 152.233.20.24 (unn-152-233-20-24.datapacket.com ... show more (mod_security) mod_security (id:210492) triggered by 152.233.20.24 (unn-152-233-20-24.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 12:34:51.097006 2026] [security2:error] [pid 447231:tid 447231] [client 152.233.20.24:55838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iconconstructors.com"] [uri "/.env"] [unique_id "amOUK09WYz1-5OnLSgRzmwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 14:43:31 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 152.233.20.24 (unn-152-233-20-24.datapacket.com ... show more (mod_security) mod_security (id:210492) triggered by 152.233.20.24 (unn-152-233-20-24.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 10:43:23.846376 2026] [security2:error] [pid 27574:tid 27574] [client 152.233.20.24:59599] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ifilemuseum.com"] [uri "/.env"] [unique_id "amN6Cy3TX5EZVfwT1veTDQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 14:23:12 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 152.233.20.24 (unn-152-233-20-24.datapacket.com ... show more (mod_security) mod_security (id:210492) triggered by 152.233.20.24 (unn-152-233-20-24.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 10:23:06.300385 2026] [security2:error] [pid 26961:tid 26988] [client 152.233.20.24:54190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "icbc-canada.com"] [uri "/.env"] [unique_id "amN1SrhKB0yKhz7bh3CFFgAAAJQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 14:07:56 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 152.233.20.24 (unn-152-233-20-24.datapacket.com ... show more (mod_security) mod_security (id:210492) triggered by 152.233.20.24 (unn-152-233-20-24.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 10:07:50.656287 2026] [security2:error] [pid 4124228:tid 4124228] [client 152.233.20.24:61620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iconbizpromo.com"] [uri "/.env"] [unique_id "amNxtktMox5Qpb1OLVWpKwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Balthasar Morpheus Jörmundur (JKweb Service)	2026-07-23 07:02:14 (4 days ago)	JKweb Security: Severe and dangerous web attack detected. Attacker permanently banned by Fail2Ban.	Port Scan Bad Web Bot Web App Attack
🇩🇪 MStarz	2026-07-20 15:47:00 (6 days ago)	Attempted to leverage vulnerability in old version of Page Builder CK (Unauthorized request).	Hacking
🇷🇺 DZBOT	2026-07-20 14:23:18 (1 week ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 194.39.227.117

🇧🇷 187.85.18.112

🇸🇬 172.253.84.209

🇻🇳 103.48.192.223

🇸🇬 103.13.206.100

🇺🇸 74.82.47.2

🇧🇪 34.22.206.231

🇺🇸 20.228.193.165

🇹🇷 5.181.85.100

🇨🇳 211.155.100.9

🇺🇸 205.210.31.105

🇺🇸 192.178.112.158

🇺🇸 172.202.118.67

🇷🇺 155.212.17.174

🇲🇦 102.98.215.191

🇫🇷 91.231.89.71

🇫🇷 91.231.89.11

🇳🇱 91.92.47.101

🇩🇰 89.150.152.42

🇻🇳 45.119.81.245