JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 147.124.219.239

147.124.219.239 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 81%: ?

81%

ISP	Majestic Hosting Solutions, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396073
Hostname(s)	abracanabra.com
Domain Name	spinservers.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 147.124.219.239

Whois 147.124.219.239

IP Abuse Reports for 147.124.219.239:

This IP address has been reported a total of 30 times from 16 distinct sources. 147.124.219.239 was first reported on June 24th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 iNetWorker	2026-09-19 16:57:19 (1 hour ago)	trolling for resource vulnerabilities	Web App Attack
🇺🇸 kosada.com	2026-09-19 15:30:42 (2 hours ago)	Repeated exploit attempts, for example: / 0x%5B%5D=androxgh0st (HTTP/1.1 port 443)	Web App Attack
🇺🇸 TPI-Abuse	2026-09-19 12:49:45 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 147.124.219.239 (abracanabra.com): 1 in the las ... show more (mod_security) mod_security (id:210492) triggered by 147.124.219.239 (abracanabra.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 08:49:41.710945 2026] [security2:error] [pid 11725:tid 11725] [client 147.124.219.239:52280] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.mypensees.com"] [uri "/.env"] [unique_id "aq6E5U0qBeXVAy5tfAi9twAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-09-19 11:31:31 (6 hours ago)	Multiple WAF Violations	Web App Attack
🇧🇾 lns.bz	2026-09-19 10:26:57 (7 hours ago)	.env scanning [BY]	Web App Attack
🇩🇪 LRob	2026-09-19 10:21:53 (7 hours ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.env \| 2026-09-19 10:21 UTC show less	Hacking Web App Attack
🇨🇦 Anytech	2026-09-19 10:13:22 (7 hours ago)	Blocked by Conn-Monitor: env-probing	Web App Attack Hacking
🇩🇪 louis77	2026-09-19 09:16:37 (8 hours ago)	Sensitive file access attempt - Path: /.env, Method: GET, UA: Mozilla/5.0 (X11; Linux x86_64) AppleW ... show more Sensitive file access attempt - Path: /.env, Method: GET, UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 show less	Web App Attack Hacking
Anonymous	2026-09-19 07:45:01 (10 hours ago)	suspicious request in access.log	Web App Attack
🇯🇵 ki3	2026-09-19 06:37:33 (11 hours ago)	Fail2Ban: Web App Attacks and Forum Spam 147.124.219.239 1789799853.0(JST)	Web Spam Bad Web Bot Web App Attack
🇫🇮 paissangroup	2026-09-19 05:57:43 (12 hours ago)	Multiple WAF Violations	Web App Attack
🇮🇹 CoreTech srl	2026-09-19 05:48:57 (12 hours ago)	cloudlinux2 fail2ban: 2026-09-19 07:43:46,196 fail2ban.actions [1813]: NOTICE [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-09-19 07:43:46,196 fail2ban.actions [1813]: NOTICE [plesk-modsecurity] Unban 14.139.234.53cloudlinux2 fail2ban: 2026-09-19 07:44:30,986 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 147.124.219.239 - 2026-09-19 07:44:30cloudlinux2 fail2ban: 2026-09-19 07:44:30,996 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 147.124.219.239 - 2026-09-19 07:44:30cloudlinux2 fail2ban: 2026-09-19 07:45:57,541 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 160.178.210.207 - 2026-09-19 07:45:57cloudlinux2 fail2ban: 2026-09-19 07:45:55,930 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 160.178.210.207 - 2026-09-19 07:45:55cloudlinux2 fail2ban: 2026-09-19 07:46:39,767 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 160.178.210.207 - 2026-09-19 07:46:39cloudlinux2 fail2ban: 2026-09-19 07:46:40,401 fail2ban.actions [1813]: NOTICE [plesk-modsecurity] Ban 160.178.210.207cloudlinux2 fail2ban: 2026-09 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-19 04:53:29 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 147.124.219.239 (abracanabra.com): 1 in the las ... show more (mod_security) mod_security (id:210492) triggered by 147.124.219.239 (abracanabra.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 00:53:23.005312 2026] [security2:error] [pid 27255:tid 27255] [client 147.124.219.239:39642] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.zezel.com"] [uri "/.env"] [unique_id "aq4VQ2gRNPYmO9LNDyqj-wAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-09-19 04:39:27 (13 hours ago)	[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 147.124.219.239 - - [19/Sep/2026:06:39:08 +0200] "GET /.env HTTP/1.1" 301 6309 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇭🇺 bcsaba	2026-09-19 04:39:25 (13 hours ago)	Probing for .env file: 147.124.219.239 - - [19/Sep/2026:06:39:17 +0200] "GET /.env HTTP/1.1" 403 548 ... show more Probing for .env file: 147.124.219.239 - - [19/Sep/2026:06:39:17 +0200] "GET /.env HTTP/1.1" 403 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.186.135.8

🇮🇩 163.7.11.126

🇮🇩 103.31.250.251

🇷🇴 92.118.39.77

🇩🇪 82.139.195.145

🇦🇺 50.6.54.173

🇺🇸 23.29.118.81

🇪🇪 5.188.16.97

🇮🇳 202.164.42.142

🇦🇷 181.46.69.215

🇧🇷 179.189.150.142

🇳🇱 176.65.148.244

🇺🇸 147.185.132.41

🇰🇷 125.138.175.113

🇹🇼 35.185.128.237

🇺🇸 209.50.160.86

🇹🇳 196.239.172.190

🇧🇭 193.188.123.16

🇨🇴 186.148.179.65

🇩🇪 167.94.146.57