JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 170.124.32.143

170.124.32.143 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 96%: ?

96%

ISP	Pharr-San Juan-Alamo ISD
Usage Type	Fixed Line ISP
ASN	AS6079
Domain Name	psjaisd.us
Country	🇺🇸 United States of America
City	Leesburg, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 170.124.32.143

Whois 170.124.32.143

IP Abuse Reports for 170.124.32.143:

This IP address has been reported a total of 32 times from 17 distinct sources. 170.124.32.143 was first reported on June 30th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 KIDOS	2026-07-06 12:19:41 (5 hours ago)	malicious activity	Web App Attack
🇨🇦 Mediashaker	2026-07-06 12:15:42 (5 hours ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 170.124.32.143 (US/Unite ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 170.124.32.143 (US/United States/-) show less	Port Scan
Anonymous	2026-07-06 11:53:59 (6 hours ago)	SQL Injection	SQL Injection
🇺🇸 TPI-Abuse	2026-07-06 10:27:48 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 170.124.32.143 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.124.32.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 06:27:32.294692 2026] [security2:error] [pid 29673:tid 29673] [client 170.124.32.143:44633] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fiyaplatform.com"] [uri "/.env.dev"] [unique_id "akuDFCfPGRpwtBOakGnZmAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 RidgeStar	2026-07-06 00:51:52 (17 hours ago)	2026-07-05T17:40:05-07:00: 69'"><script>alert(68752)</script>	Port Scan Hacking
🇺🇸 RidgeStar	2026-07-06 00:27:59 (17 hours ago)	2026-07-05T13:20:02-07:00: display'"><script>alert(68752)</script> 2026-07- ... show more 2026-07-05T13:20:02-07:00: display'"><script>alert(68752)</script> 2026-07-05T13:12:10-07:00: display'"><script>alert(68752)</script> 2026-07-05T13:09:37-07:00: printable'"><script>alert(68752)</script> show less	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-07-05 23:17:24 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 170.124.32.143 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.124.32.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 19:17:06.549766 2026] [security2:error] [pid 13701:tid 13701] [client 170.124.32.143:33321] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coffeewitheinstein.com"] [uri "/.env.dev.local"] [unique_id "akrl8lTqMXuYXDhrK4IQsgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-05 23:05:22 (18 hours ago)	Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=5	Hacking
🇺🇸 TPI-Abuse	2026-07-05 22:52:21 (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 170.124.32.143 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.124.32.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 18:52:00.398772 2026] [security2:error] [pid 18695:tid 18695] [client 170.124.32.143:48483] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "comments.barkdull.org"] [uri "/.env.prod"] [unique_id "akrgEHNkdxa7GdN-xp3L9gAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 22:37:05 (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 170.124.32.143 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.124.32.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 18:36:57.375152 2026] [security2:error] [pid 15544:tid 15544] [client 170.124.32.143:42771] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hanabritgermanshepherds.com"] [uri "/.env.prod.local"] [unique_id "akrcibRD6Q4badA_fnXrJwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 21:56:55 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 170.124.32.143 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.124.32.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 17:56:49.482586 2026] [security2:error] [pid 7964:tid 7964] [client 170.124.32.143:39899] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kingscruff.com"] [uri "/.env"] [unique_id "akrTId2pXw7kpdW3t77uUQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 21:20:39 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 170.124.32.143 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.124.32.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 17:20:30.470622 2026] [security2:error] [pid 13999:tid 14023] [client 170.124.32.143:34051] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "americanacademyofprojectmanagement.com"] [uri "/.env"] [unique_id "akrKntuR1F7DDVVtw0CdSwAAAFY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-05 21:12:02 (20 hours ago)	Trying to access config files	Web App Attack
🇩🇪 FeG Deutschland	2026-07-05 21:00:24 (21 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 20:54:56 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 170.124.32.143 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.124.32.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 16:54:44.546300 2026] [security2:error] [pid 1861:tid 1861] [client 170.124.32.143:41555] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "phuket-boatcharter.com"] [uri "/.env.dev.local"] [unique_id "akrElLJULvZvWQ7EQlHHNQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.191

🇫🇮 147.185.133.9

🇮🇳 103.38.182.49

🇩🇪 69.5.169.24

🇧🇪 34.140.199.109

🇺🇸 216.25.89.73

🇺🇸 205.210.31.81

🇨🇳 182.96.164.188

🇨🇦 172.217.44.17

🇳🇱 160.119.76.12

🇩🇪 151.243.150.222

🇮🇩 103.24.12.108

🇫🇷 91.231.89.204

🇫🇷 91.231.89.200

🇺🇸 66.240.192.82

🇺🇸 66.154.109.226

🇺🇸 37.140.223.150

🇧🇪 34.62.33.111

🇯🇵 20.46.121.148

🇺🇸 20.15.162.238