AbuseIPDB » 179.124.196.72
179.124.196.72 was found in our database!
This IP was reported 10 times. Confidence of
Abuse
is 12% : ?
ISP
DUNET LTDA
Usage Type
Fixed Line ISP
ASN
AS262539
Domain Name
dunet.com.br
Country
๐ง๐ท
Brazil
City
Sombrio, Santa Catarina
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 179.124.196.72 :
This IP address has been reported a total of
10
times from
10 distinct
sources.
179.124.196.72 was first reported on
May 28th 2025 , and the most recent report was
5 hours ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐บ๐ธ
TPI-Abuse
2026-07-13 00:47:50
(5 hours ago)
(mod_security) mod_security (id:225170) triggered by 179.124.196.72 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 179.124.196.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 20:47:44.023126 2026] [security2:error] [pid 30588:tid 30588] [client 179.124.196.72:42244] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||losbarbarosdelnorte.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "losbarbarosdelnorte.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alQ1sObJKp9XPbGj6lB8AQAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
SMARTNET
2026-05-27 06:03:53
(1 month ago)
Aisuru(Mirai variant) DDoS | Incident ID: e316b406-db2c-400a-bc37-dfbfcc0acc61
DDoS Attack
๐บ๐ธ
kosada.com
2026-04-15 19:32:15
(2 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
๐บ๐ธ
quilla
2026-03-28 23:35:00
(3 months ago)
Botnet infected device observed in honeypot (Vector: TCP HANDSHAKE ATTACK)
DDoS Attack
Anonymous
2025-11-23 06:35:04
(7 months ago)
scanning http requests from known botnet
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-11 17:38:27
(8 months ago)
[Wed Nov 12 00:36:58.388328 2025] [security2:error] [pid 396153:tid 139670918784704] [client 179.124 ...
show more
[Wed Nov 12 00:36:58.388328 2025] [security2:error] [pid 396153:tid 139670918784704] [client 179.124.196.72:41826] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "WOW64" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: WOW64 found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Safari/537.36 request_line = GET /index.php/profil/meteorologi/list-all-categories/3939-klimatologi/prakiraan-klimatologi/prakiraan-indeks-presipitasi-terstandarisasi-spi/prakiraan-indeks-presipitasi-terstandarisasi-spi-di-jawa-timur/prakiraan-indeks-presipitasi-terstandarisasi-spi-3-bulanan-di-jawa-timur/prakiraan-indeks-presipitasi-terstandarisasi-s..."] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/meteorologi/list-all-cate
...
show less
Hacking
Web App Attack
๐ช๐ธ
Global Cyber Police
2025-07-28 09:59:18
(11 months ago)
Malicious bot activity detected: Hitting honeypot page. Part of massive botnet.
DDoS Attack
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
MAGIC
2025-06-18 14:07:49
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
๐ฉ๐ช
botreporter
2025-06-10 03:58:23
(1 year ago)
botnet ignoring robots.txt
Bad Web Bot
๐ซ๐ท
bigorre.org
2025-05-28 03:06:46
(1 year ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: