JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 124.156.147.98

124.156.147.98 was found in our database!

This IP was reported 56 times. Confidence of Abuse is 70%: ?

70%

ISP	Asia Pacific Network Information Centre
Usage Type	Data Center/Web Hosting/Transit
ASN	AS132203
Domain Name	apnic.net
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 124.156.147.98

Whois 124.156.147.98

IP Abuse Reports for 124.156.147.98:

This IP address has been reported a total of 56 times from 39 distinct sources. 124.156.147.98 was first reported on February 1st 2021, and the most recent report was 56 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 MAGIC	2026-07-08 02:00:18 (56 minutes ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 paulshipley.com.au	2026-07-06 14:06:33 (1 day ago)	iaki.com.au:443 124.156.147.98 - - [07/Jul/2026:00:06:30 +1000] "GET /ip HTTP/1.1" 404 62983 "-" "Mo ... show more iaki.com.au:443 124.156.147.98 - - [07/Jul/2026:00:06:30 +1000] "GET /ip HTTP/1.1" 404 62983 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 nodepile	2026-07-05 19:49:13 (2 days ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇫🇷 Sklurk	2026-07-04 06:02:40 (3 days ago)	Web App Attack	Web App Attack
🇸🇪 KIDOS	2026-07-01 00:16:01 (1 week ago)	IIS malicious activity: sql_injection_attempt	Web App Attack
🇺🇸 jcbriar	2026-06-29 15:59:39 (1 week ago)	Searching for vulnerable scripts	Hacking Web App Attack
🇦🇺 afleventoffice.com.au	2026-06-28 07:12:54 (1 week ago)	GET /ip HTTP/1.1	Web App Attack
🇺🇸 nodepile	2026-06-26 09:08:09 (1 week ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/fr ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/frontend/Smartwave/porto/en_US/js-translation.json ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 kosada.com	2026-06-25 17:33:34 (1 week ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2026-06-21 00:53:04 (2 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇵🇱 sefinek.net	2026-06-15 18:51:38 (3 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: /ip \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 CrystalMaker	2026-06-13 19:29:49 (3 weeks ago)	Vulnerability scan - GET /ip	Hacking
🇦🇺 afleventoffice.com.au	2026-06-08 11:46:27 (4 weeks ago)	GET /ip HTTP/1.1	Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 17:51:07 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 124.156.147.98 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 124.156.147.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 13:51:02.206265 2026] [security2:error] [pid 27563:tid 27563] [client 124.156.147.98:47960] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ozkanturker.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ozkanturker.com"] [uri "/makaleler/tezgah/Thumbs.db"] [unique_id "aiWvhuTfW8nYaURTFqAh7AAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 johnkarlhill	2026-06-07 17:30:06 (1 month ago)	WebKnight blocked malicious web request on johnkarlhill.com	Brute-Force SSH

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2a09:bac1:6540:8::277:67

🇬🇧 216.226.76.30

🇰🇷 211.216.165.219

🇩🇴 206.85.14.46

🇧🇷 205.210.31.142

🇺🇸 195.184.76.247

🇺🇸 185.98.169.83

🇧🇷 177.197.206.89

🇳🇱 160.119.71.133

🇫🇷 45.85.249.53

🇰🇿 37.99.39.159

🇷🇺 37.77.150.241

🇬🇧 35.203.211.142

🇮🇩 202.154.45.39

🇧🇷 200.219.11.123

🇩🇪 194.88.98.113

🇧🇷 190.115.84.25

🇺🇸 162.216.149.53

🇫🇮 147.185.133.112

🇵🇭 122.53.106.124