This IP address has been reported a total of
33
times from
28 distinct
sources.
161.118.249.244 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 8
reports;
Netherlands
with 8
reports;
United Kingdom of Great Britain and Northern Ireland
with 4
reports.
The most common categories in these recent reports were:
Web App Attack
23
times;
Brute-Force
13
times;
Bad Web Bot
12
times;
Hacking
7
times;
DDoS Attack
1
time;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: ...
show less
HTTP header is restricted by policy (/expect/). String match within "/content-encoding/ /proxy/ /loc ...
show moreHTTP header is restricted by policy (/expect/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_expect. (920450-197)
show less
(mod_security) mod_security (id:243420) triggered by 161.118.249.244 (-): 1 in the last 300 secs; Po ...
show more(mod_security) mod_security (id:243420) triggered by 161.118.249.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:49:26.052421 2026] [security2:error] [pid 30056:tid 30056] [client 161.118.249.244:63063] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Expect" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||jazziientertainment.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jazziientertainment.com"] [uri "/cgi-sys/ea-php70/index.php"] [unique_id "atwAlDRkw3dTxzMowKM8qgAAAAI"]
show less
(mod_security) mod_security (id:243420) triggered by 161.118.249.244 (-): 1 in the last 300 secs; Po ...
show more(mod_security) mod_security (id:243420) triggered by 161.118.249.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:14:10.305682 2026] [security2:error] [pid 25945:tid 25969] [client 161.118.249.244:55660] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Expect" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||adultbaja.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "adultbaja.com"] [uri "/cgi-sys/ea-php56/index2.php"] [unique_id "atv4UF4Qfj2ixs2bqnPFmQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
161.118.249.244 (SG/Singapore/-/Loyang/-/[redacted]), more than 70 Apache 403 hits
(mod_security) mod_security (id:243420) triggered by 161.118.249.244 (-): 1 in the last 300 secs; Po ...
show more(mod_security) mod_security (id:243420) triggered by 161.118.249.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 18:51:13.822807 2026] [security2:error] [pid 16224:tid 16224] [client 161.118.249.244:62355] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Expect" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||designlablra.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "designlablra.com"] [uri "/index.html"] [unique_id "atvk4BKrNIpcrBfALXwqMwAAAAk"]
show less
