JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 176.28.247.120

176.28.247.120

Recent Activity

3 reports found in our database

3% ▲ ▲ ▲ Caution

Abuse confidence score ?

ISP

Jordanian mobile phone services Ltd

Usage Type

Mobile ISP

ASN

AS48832

Domain Name

zain.com

Country

🇯🇴 Jordan

City

Amman, Amman

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 176.28.247.120:

This IP address has been reported a total of 3 times from 3 distinct sources. 176.28.247.120 was first reported on March 8th 2026, and the most recent report was 3 days ago. In the last 60 days, the only reporter location was: Germany with 1 report. The only category in these recent reports was: Bad Web Bot 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 pltcldvlpr	2026-08-31 05:57:36 (3 days ago)	Bogus Useragent: 176.28.247.120 - - [31/Aug/2026:07:57:35 +0200] "GET /protocol?id=hh_20_103&paragra ... show more Bogus Useragent: 176.28.247.120 - - [31/Aug/2026:07:57:35 +0200] "GET /protocol?id=hh_20_103&paragraph=6123258&seq=1655 HTTP/1.1" 444 0 "-" "Opera/8.30.(Windows NT 4.0; dv-MV) Presto/2.9.167 Version/10.00" asn=48832 org="Linkdotnet-Jordan" country=JO ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-01 10:12:03 (3 months ago)	(mod_security) mod_security (id:240335) triggered by 176.28.247.120 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 176.28.247.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 06:12:00.178138 2026] [security2:error] [pid 24520:tid 24520] [client 176.28.247.120:7932] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 176.28.247.120 (+1 hits since last alert)\|superlamb.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "superlamb.com"] [uri "/xmlrpc.php"] [unique_id "ah1a8NqsfNGx4MCO8Arx8wAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-03-08 20:03:04 (5 months ago)	block ruleset SQL-Injections with typical fingerprints FD77349DE692F8D05B4EE282DE6A5198C42AB90F	SQL Injection

Showing 1 to 3 of 3 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 103.167.17.216

🇸🇬 97.74.87.152

🇷🇺 91.122.198.214

🇮🇱 79.177.147.76

🇺🇸 54.189.86.217

🇺🇸 195.184.76.174

🇧🇷 191.243.30.16

🇦🇷 168.196.32.110

🇨🇳 163.125.189.227

🇨🇳 117.57.163.179

🇵🇰 116.71.136.125

🇨🇳 112.86.225.59

🇧🇦 92.36.178.225

🇸🇬 43.156.33.17

🇺🇸 40.80.203.218

🇫🇷 37.187.240.88

🇺🇸 18.97.5.124

🇺🇸 13.111.125.18

🇺🇸 209.38.64.240

🇩🇪 194.187.176.45