JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 169.150.201.24

169.150.201.24 was found in our database!

This IP was reported 180 times. Confidence of Abuse is 73%: ?

73%

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-169-150-201-24.datapacket.com
Domain Name	datacamp.co.uk
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 169.150.201.24

Whois 169.150.201.24

IP Abuse Reports for 169.150.201.24:

This IP address has been reported a total of 180 times from 137 distinct sources. 169.150.201.24 was first reported on January 14th 2023, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 grassau.com	2026-06-01 02:26:55 (5 days ago)	Port Scan detected from 169.150.201.24 (DE/Germany/Hesse/Frankfurt am Main/unn-169-150-201-24.data ... show more Port Scan detected from 169.150.201.24 (DE/Germany/Hesse/Frankfurt am Main/unn-169-150-201-24.datapacket.com). show less	Port Scan
🇩🇪 4server	2026-06-01 00:17:11 (5 days ago)	[MonJun0102:17:07.9967122026][security2:error][pid1903986:tid1904054][client169.150.201.24:0]ModSecu ... show more [MonJun0102:17:07.9967122026][security2:error][pid1903986:tid1904054][client169.150.201.24:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"specialfood.ch\"][uri\"/\"][unique_id\"ahzPg8Yl-e2TiZYV9qR8PwAAAFQ\"]\,referer:https://specialfood.ch show less	Port Scan Brute-Force Web App Attack
🇦🇺 MAGIC	2026-06-01 00:14:57 (5 days ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 Terrier	2026-05-31 20:00:04 (5 days ago)	Blocked for HTTP vulnerability scanning (excessive 40x)	Web App Attack
🇫🇮 YF	2026-05-30 21:03:18 (6 days ago)	WordPress content enumeration	Web App Attack
🇩🇪 keep_out	2026-05-30 18:47:38 (6 days ago)	nginx-444 from fail2ban ...	Web App Attack
🇺🇸 wteiken	2026-05-30 17:22:52 (6 days ago)	2026-05-30T13:22:49.497590-04:00 nostromo.teiken.net kernel: [423195.762782] syn_limit:IN=en-wan OUT ... show more 2026-05-30T13:22:49.497590-04:00 nostromo.teiken.net kernel: [423195.762782] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=169.150.201.24 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x20 TTL=56 ID=57936 DF PROTO=TCP SPT=54706 DPT=443 WINDOW=64320 RES=0x00 SYN URGP=0 2026-05-30T13:22:49.497990-04:00 nostromo.teiken.net kernel: [423195.763107] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=169.150.201.24 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x20 TTL=56 ID=26608 DF PROTO=TCP SPT=54708 DPT=443 WINDOW=64320 RES=0x00 SYN URGP=0 2026-05-30T13:22:50.517589-04:00 nostromo.teiken.net kernel: [423196.783337] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=169.150.201.24 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x20 TTL=56 ID=26609 DF PROTO=TCP SPT=54708 DPT=443 WINDOW=64320 RES=0x00 SYN URGP=0 2026-05-30T13:22:50.517869-04:00 nostromo.teiken.net kernel: [423196.783944] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2: ... show less	Port Scan
🇨🇭 4server	2026-05-30 16:42:44 (6 days ago)	[SatMay3018:42:38.4717312026][security2:error][pid3427728:tid3428365][client169.150.201.24:0]ModSecu ... show more [SatMay3018:42:38.4717312026][security2:error][pid3427728:tid3428365][client169.150.201.24:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"shadowdrummer.com\"][uri\"/\"][unique_id\"ahsTfu-JW0Sw23t1_DpDgQAAARA\"]\,referer:https://shadowdrummer.com show less	Hacking Web App Attack
🇩🇪 4server	2026-05-30 09:47:08 (1 week ago)	[SatMay3011:47:02.7634672026][security2:error][pid3600654:tid3600766][client169.150.201.24:0]ModSecu ... show more [SatMay3011:47:02.7634672026][security2:error][pid3600654:tid3600766][client169.150.201.24:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"ecosuber.com\"][uri\"/wp-json/oembed/1.0/embed\"][unique_id\"ahqyFmzfDVbA24JSlOaStwAAAQU\"]\,referer:https://ecosuber.com show less	Port Scan Brute-Force Web App Attack
🇪🇸 librebit	2026-05-29 03:52:24 (1 week ago)	RDWeb scan	Web App Attack
🇬🇧 gaztronics	2026-05-28 05:34:32 (1 week ago)	2026-05-28T05:34:27.764153 liberator auth[1188169]: pam_unix(dovecot:auth): authentication failure; ... show more 2026-05-28T05:34:27.764153 liberator auth[1188169]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=169.150.201.24 ... show less	Brute-Force
🇫🇮 notelseit	2026-05-28 05:24:56 (1 week ago)	2026-05-28T07:24:49.047669+02:00 mail postfix/smtps/smtpd[2976143]: warning: unknown[169.150.201.24] ... show more 2026-05-28T07:24:49.047669+02:00 mail postfix/smtps/smtpd[2976143]: warning: unknown[169.150.201.24]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-05-28T07:24:49.158795+02:00 mail postfix/smtps/smtpd[2976143]: disconnect from unknown[169.150.201.24] ehlo=1 auth=0/1 quit=1 commands=2/3 2026-05-28T07:24:56.012090+02:00 mail postfix/submission/smtpd[2976144]: warning: unknown[169.150.201.24]: SASL LOGIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force Email Spam
🇩🇪 Ariazonaa	2026-05-27 16:43:24 (1 week ago)	Fail2Ban host=fra01-core jail=sshd failures=5. Login abuse observed. sample=2026-05-27T16:43:20.0850 ... show more Fail2Ban host=fra01-core jail=sshd failures=5. Login abuse observed. sample=2026-05-27T16:43:20.085025+00:00 fra01-core sshd-session[748740]: Connection from 169.150.201.24 port 59008 on 88.218.226.14 port 22 rdomain "" 2026-05-27T16:43:20.085093+00:00 fra01-core sshd-session[748740]: kex_exchange_identification: Connection closed by remote host 2026-05-27T16:43:21.089689+00:00 fra01-core sshd-session[748780]: Connection from 169.150.201.24 port 59010 on 88.218.226.14 port 22 rdomain "" 2026-05-27T16:43:21.089746+00:00 fra01-core sshd-session[748780]: kex_exchange_ident show less	Brute-Force SSH
🇪🇸 librebit	2026-05-18 16:25:37 (2 weeks ago)	RDWeb scan	Web App Attack
🇩🇪 Admins@FBN	2026-05-18 16:14:47 (2 weeks ago)	VPN Logon Failed: AAA user authentication Rejected user = <burzan>	Brute-Force Exploited Host

Showing 1 to 15 of 180 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇶 185.166.25.150

🇿🇦 172.253.244.218

🇺🇸 20.51.234.233

🇬🇧 185.216.145.181

🇨🇳 182.138.158.52

🇫🇮 147.185.133.125

🇨🇳 113.24.130.67

🇻🇳 103.138.113.149

🇮🇩 103.84.146.1

🇸🇪 83.250.171.64

🇳🇱 45.148.10.147

🇩🇪 5.75.225.42

🇨🇱 190.3.179.217

🇻🇳 171.251.236.40

🇮🇳 125.23.183.142

🇩🇪 104.28.151.2

🇱🇹 62.60.130.234

🇺🇸 4.246.117.137

🇨🇳 221.234.36.123

🇳🇱 185.224.128.16