JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 124.217.116.242

124.217.116.242 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 51%: ?

51%

ISP	HOME_DSL
Usage Type	Fixed Line ISP
ASN	AS9299
Domain Name	pldthome.com
Country	🇵🇭 Philippines
City	Davao, Davao Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 124.217.116.242

Whois 124.217.116.242

IP Abuse Reports for 124.217.116.242:

This IP address has been reported a total of 9 times from 9 distinct sources. 124.217.116.242 was first reported on August 2nd 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Lee Daniel	2026-09-23 09:08:37 (1 hour ago)	124.217.116.242 - - [23/Sep/2026:05:08:37 -0400] "GET /.env HTTP/1.1" 403 6319 "-" "Mozilla/5.0 (Lin ... show more 124.217.116.242 - - [23/Sep/2026:05:08:37 -0400] "GET /.env HTTP/1.1" 403 6319 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇵🇱 nakordoni.eu	2026-09-23 07:00:08 (4 hours ago)	Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matc ... show more Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matches. ISP: HOME_DSL (PH), Usage: Fixed Line ISP. Prior AbuseIPDB score at ban time: 43/100. show less	Bad Web Bot Web App Attack
🇳🇱 informedclearly.com	2026-09-23 06:09:54 (4 hours ago)	WAF_BAN reason=ENV_PROBE rule=ENV_PATH hits=1 path=/.env? ua=Mozilla/5.0 (Linux; Android 10; K) Appl ... show more WAF_BAN reason=ENV_PROBE rule=ENV_PATH hits=1 path=/.env? ua=Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36 show less	Hacking
🇦🇺 paulshipley.com.au	2026-09-23 05:43:09 (5 hours ago)	[Wed Sep 23 15:43:08.677978 2026] [security2:error] [pid 343836] [client 124.217.116.242:13968] [cli ... show more [Wed Sep 23 15:43:08.677978 2026] [security2:error] [pid 343836] [client 124.217.116.242:13968] [client 124.217.116.242] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.id.au"] [uri "/.env"] [unique_id "arNm7HUNdcA5rzAhAvfwkQAAAAE"] ... show less	Web App Attack
Anonymous	2026-09-23 03:47:33 (7 hours ago)	[23/Sep/2026:06:47:31 +0300] 179013525132.420445 124.217.116.242 16014 148.251.76.218 443 [23/Sep/20 ... show more [23/Sep/2026:06:47:31 +0300] 179013525132.420445 124.217.116.242 16014 148.251.76.218 443 [23/Sep/2026:06:47:32 +0300] 179013525252.515818 124.217.116.242 17008 148.251.76.218 80 show less	Web App Attack
🇪🇸 el-brujo	2026-09-23 03:15:54 (7 hours ago)	Cloudflare WAF: Request Path: /.env Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 ( ... show more Cloudflare WAF: Request Path: /.env Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36 Action: block Source: firewallCustom ASN Description: Philippine Long Distance Telephone Company Country: PH Method: GET Timestamp: 2026-09-23T03:15:54Z ruleId: 6b2d48d0415e4adb9f099d85f54d1de6. Report generated by Cloudflare-WAF-to-AbuseIPDB. show less	Hacking SQL Injection Web App Attack
🇵🇱 nfsec.pl	2026-09-23 02:59:29 (8 hours ago)	124.217.116.242 - - [23/Sep/2026:02:59:19 +0000] "POST /graphql HTTP/2.0" 404 25581 "-" "Mozilla/5.0 ... show more 124.217.116.242 - - [23/Sep/2026:02:59:19 +0000] "POST /graphql HTTP/2.0" 404 25581 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" 124.217.116.242 - - [23/Sep/2026:02:59:21 +0000] "POST /api/graphql HTTP/2.0" 404 25657 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" 124.217.116.242 - - [23/Sep/2026:02:59:25 +0000] "GET /catalogsearch/advanced/result/?price%5Bfrom%5D=1&price%5Bto%5D= HTTP/2.0" 404 25664 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" 124.217.116.242 - - [23/Sep/2026:02:59:26 +0000] "GET /rest/V1/search?searchCriteria[requestName]=advanced_search_container&searchCriteria[pageSize]=10&searchCriteria[currentPage]=1&searchCriteria[filterGroups][0][filters][0][field]=price.from&searchCriteria[filterGroups][0][filters][0][value]=2&searchCriteria[filterGroups][0][filter ... show less	Web App Attack Exploited Host
🇨🇦 Anytech	2026-09-23 02:54:58 (8 hours ago)	Blocked by Conn-Monitor: env-probing	Web App Attack Hacking
🇺🇸 kosada.com	2026-08-02 03:14:53 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 152.42.221.231

🇳🇱 94.154.35.25

🇨🇭 84.17.53.39

🇺🇸 35.185.221.241

🇧🇷 200.236.252.41

🇺🇸 195.184.76.117

🇮🇷 185.172.214.65

🇨🇦 85.217.149.34

🇦🇪 47.91.125.252

🇸🇬 47.79.200.147

🇳🇱 45.148.10.157

🇨🇴 38.210.185.179

🇮🇹 23.222.236.25

🇮🇹 23.222.236.20

🇻🇳 14.225.206.187

🇺🇦 217.66.96.9

🇺🇸 195.184.76.164

🇺🇸 195.184.76.76

🇩🇪 195.7.6.55

🇧🇷 168.205.241.162