JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.224.61.74

139.224.61.74 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 0%: ?

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.224.61.74

Whois 139.224.61.74

IP Abuse Reports for 139.224.61.74:

This IP address has been reported a total of 29 times from 8 distinct sources. 139.224.61.74 was first reported on September 1st 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 yun yan	2024-10-05 03:42:47 (1 year ago)	scan: HTTP database file Scanning	Port Scan
🇺🇸 TPI-Abuse	2024-09-10 00:14:20 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 139.224.61.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 139.224.61.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 09 20:14:15.034293 2024] [security2:error] [pid 25292:tid 25292] [client 139.224.61.74:51343] [client 139.224.61.74] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.vankesselporsche.com\|F\|2"] [data ".vankesselporsche.com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vankesselporsche.com"] [uri "/www.vankesselporsche.com.sql"] [unique_id "Zt-PV6tB1Eo_FKGh25NjVwAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-09 23:13:00 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 139.224.61.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 139.224.61.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 09 19:12:56.295636 2024] [security2:error] [pid 16805:tid 16805] [client 139.224.61.74:60445] [client 139.224.61.74] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.rockwaychiropractic.com\|F\|2"] [data ".rockwaychiropractic.com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.rockwaychiropractic.com"] [uri "/www.rockwaychiropractic.com.sql"] [unique_id "Zt-A-LrGeXZjGdbSD32tFAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-09 19:43:40 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 139.224.61.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 139.224.61.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 09 15:43:36.493816 2024] [security2:error] [pid 12111:tid 12111] [client 139.224.61.74:57226] [client 139.224.61.74] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.garon.us\|F\|2"] [data ".garon.us.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.garon.us"] [uri "/www.garon.us.sql"] [unique_id "Zt9P6Ib8B-EMhbuJgmonxAAAADE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-09 00:06:39 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 139.224.61.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 139.224.61.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 08 20:06:34.039401 2024] [security2:error] [pid 29021:tid 29021] [client 139.224.61.74:53732] [client 139.224.61.74] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.alaskadreamspublishing.com\|F\|2"] [data ".alaskadreamspublishing.com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.alaskadreamspublishing.com"] [uri "/www.alaskadreamspublishing.com.sql"] [unique_id "Zt48CsYpQrNXvCsP5EQwBgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Mr-Money	2024-09-07 20:10:36 (2 years ago)	139.224.61.74 - - [07/Sep/2024:22:10:35 +0200] "HEAD /website.zip HTTP/1.1" 404 124 "-" "Mozilla/4.0 ... show more 139.224.61.74 - - [07/Sep/2024:22:10:35 +0200] "HEAD /website.zip HTTP/1.1" 404 124 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2024-09-07 14:01:48 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 139.224.61.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 139.224.61.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 07 10:01:42.810769 2024] [security2:error] [pid 99552:tid 99552] [client 139.224.61.74:60198] [client 139.224.61.74] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.spores101.com\|F\|2"] [data ".spores101.com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.spores101.com"] [uri "/www.spores101.com.sql"] [unique_id "ZtxcxmFzSVRfqPMmHzEr2gAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-06 22:21:11 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 139.224.61.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 139.224.61.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 06 18:21:05.126414 2024] [security2:error] [pid 18441:tid 18441] [client 139.224.61.74:51207] [client 139.224.61.74] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.quakeprediction.com\|F\|2"] [data ".quakeprediction.com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.quakeprediction.com"] [uri "/www.quakeprediction.com.sql"] [unique_id "ZtuAUS1LoJgZ20Lo6tUjDQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-06 12:28:53 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 139.224.61.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 139.224.61.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 06 08:28:46.869532 2024] [security2:error] [pid 1498:tid 1498] [client 139.224.61.74:53825] [client 139.224.61.74] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.kreweofblackbeardsrevenge.com\|F\|2"] [data ".kreweofblackbeardsrevenge.com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.kreweofblackbeardsrevenge.com"] [uri "/www.kreweofblackbeardsrevenge.com.sql"] [unique_id "Ztr1fq7VpgYPYLuUMobvygAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-06 01:20:21 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 139.224.61.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 139.224.61.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 05 21:20:13.645692 2024] [security2:error] [pid 21156:tid 21156] [client 139.224.61.74:57103] [client 139.224.61.74] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.nnlwest.org\|F\|2"] [data ".nnlwest.org.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nnlwest.org"] [uri "/www.nnlwest.org.sql"] [unique_id "ZtpYzSrWLDRgnpcp_AiizQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2024-09-05 18:01:10 (2 years ago)	Request Overload (226)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-09-05 09:32:00 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 139.224.61.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 139.224.61.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 05 05:31:56.115239 2024] [security2:error] [pid 14517:tid 14517] [client 139.224.61.74:59330] [client 139.224.61.74] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.businessvaluationapp.com\|F\|2"] [data ".businessvaluationapp.com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.businessvaluationapp.com"] [uri "/www.businessvaluationapp.com.sql"] [unique_id "Ztl6jGW0ovYLmdnucOmqNwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-04 20:39:41 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 139.224.61.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 139.224.61.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 04 16:39:35.196958 2024] [security2:error] [pid 2888386:tid 2888386] [client 139.224.61.74:55381] [client 139.224.61.74] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.ronniescedarinn.com\|F\|2"] [data ".ronniescedarinn.com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.ronniescedarinn.com"] [uri "/www.ronniescedarinn.com.sql"] [unique_id "ZtjFh2xNGLTpmo_n70v4dgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-09-04 11:40:54 (2 years ago)	Account archive download attempts	Hacking Brute-Force
🇨🇦 polycoda	2024-09-04 11:14:57 (2 years ago)	📄 Probes for tons of inexistent files and PHP scripts	Hacking Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.55

🇺🇸 48.214.147.201

🇻🇳 203.167.15.64

🇳🇱 195.178.110.15

🇦🇷 181.46.9.102

🇺🇦 176.103.2.218

🇫🇮 147.185.133.123

🇫🇷 91.231.89.74

🇨🇦 89.251.0.128

🇱🇹 62.60.130.253

🇳🇱 45.148.10.119

🇳🇱 185.93.89.35

🇸🇬 103.134.154.235

🇳🇬 102.89.47.121

🇧🇬 46.10.201.90

🇨🇻 41.221.207.152

🇯🇵 35.200.9.106

🇮🇷 31.47.55.133

🇲🇾 203.121.40.210

🇺🇸 148.153.56.174