JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 170.124.32.149

170.124.32.149 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 76%: ?

76%

ISP	Pharr-San Juan-Alamo ISD
Usage Type	Fixed Line ISP
ASN	AS6079
Domain Name	psjaisd.us
Country	🇺🇸 United States of America
City	Leesburg, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 170.124.32.149

Whois 170.124.32.149

IP Abuse Reports for 170.124.32.149:

This IP address has been reported a total of 29 times from 14 distinct sources. 170.124.32.149 was first reported on June 30th 2026, and the most recent report was 12 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇱 spd.co.il	2026-07-08 19:01:38 (12 minutes ago)	Web application attack detected	Hacking Web App Attack
🇵🇹 Information Security	2026-07-06 17:22:48 (2 days ago)	Web App Attack	Web App Attack
🇸🇪 KIDOS	2026-07-06 12:19:36 (2 days ago)	malicious activity	Web App Attack
🇫🇷 conseilgouz	2026-07-06 10:42:19 (2 days ago)	upe-12 : Block return, carriage return, ... characters=>/index.php?option=com_content'&view ... show more upe-12 : Block return, carriage return, ... characters=>/index.php?option=com_content'&view=*&id=43&catid=8(') show less	Hacking
Anonymous	2026-07-06 08:05:06 (2 days ago)	Web Clients HTTP URL JavaScript Function Cross-Site Scripting.	Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 07:37:28 (2 days ago)	(mod_security) mod_security (id:212620) triggered by 170.124.32.149 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:212620) triggered by 170.124.32.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 03:37:13.062041 2026] [security2:error] [pid 9383:tid 9383] [client 170.124.32.149:48231] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "3"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack\|\|hanabritgermanshepherds.com\|F\|2"] [data "Matched Data: <script found within REQUEST_URI: /index.php/component/content/article/index.php?option=com_content&view=article&id=23'\\x22><script>alert(68752)</script>&catid=2&itemid=116"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "hanabritgermanshepherds.com"] [uri "/index.php/component/content/article/index.php"] [unique_id "aktbKUV-bUWZ1HSgaDG-UwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 04:53:12 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 170.124.32.149 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.124.32.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 00:52:54.045760 2026] [security2:error] [pid 32533:tid 32533] [client 170.124.32.149:50775] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.caferutadelaseda.com"] [uri "/.env.production"] [unique_id "aks0plhGUhNFRqElatE4rAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 04:25:38 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 170.124.32.149 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.124.32.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 00:25:21.396710 2026] [security2:error] [pid 29432:tid 29432] [client 170.124.32.149:54403] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3905ccn.org"] [uri "/.env.prod"] [unique_id "aksuMVtKGtQoNvrchUj_UAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 RidgeStar	2026-07-06 00:40:04 (2 days ago)		Port Scan Hacking
🇺🇸 TPI-Abuse	2026-07-05 23:17:28 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 170.124.32.149 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.124.32.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 19:17:06.701964 2026] [security2:error] [pid 30754:tid 30754] [client 170.124.32.149:54239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coffeewitheinstein.com"] [uri "/.env.local"] [unique_id "akrl8jeJ9J-hnL15_SxGTAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 21:53:24 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 170.124.32.149 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.124.32.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 17:53:06.143420 2026] [security2:error] [pid 9931:tid 9931] [client 170.124.32.149:49449] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "verenacastle.com"] [uri "/.env"] [unique_id "akrSQiMyoqtX6XtqvN7CGgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 21:20:37 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 170.124.32.149 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.124.32.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 17:20:30.280902 2026] [security2:error] [pid 7753:tid 7847] [client 170.124.32.149:35899] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "americanacademyofprojectmanagement.com"] [uri "/.env.prod.local"] [unique_id "akrKnrGAlwivjaT3KbVWEAAAAgQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 RidgeStar	2026-07-05 21:02:22 (2 days ago)	2026-07-05T13:11:02-07:00: 1283'"><script>alert(68752)</script>	Port Scan Hacking
🇩🇪 FeG Deutschland	2026-07-05 20:29:24 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 20:25:22 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 170.124.32.149 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.124.32.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 16:25:02.821235 2026] [security2:error] [pid 8237:tid 8237] [client 170.124.32.149:53657] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.christineohlman.net"] [uri "/.env.dev"] [unique_id "akq9nn9QsUxSQK7dEsUfYAAAACw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 176.53.159.198

🇨🇳 116.179.37.241

🇨🇳 115.192.250.114

🇮🇩 103.16.117.30

🇪🇸 91.142.222.105

🇨🇳 60.191.125.35

🇱🇹 45.227.254.170

🇳🇱 45.148.10.157

🇺🇸 2607:f8b0:4001:c79::128

🇺🇸 2602:80d:1007::30

🇦🇷 181.174.142.69

🇨🇳 175.30.48.104

🇺🇸 152.32.150.26

🇺🇸 150.107.38.251

🇨🇳 116.179.37.230

🇹🇷 94.154.43.46

🇺🇸 66.132.195.93

🇳🇱 45.148.10.152

🇰🇷 220.80.224.223

🇲🇦 154.146.238.122