JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.70.116.152

180.70.116.152

Recent Activity

34 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

SK Broadband Co Ltd

Usage Type

Fixed Line ISP

ASN

AS9318

Domain Name

skbroadband.com

Country

🇰🇷 Korea (the Republic of)

City

Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 180.70.116.152:

This IP address has been reported a total of 34 times from 23 distinct sources. 180.70.116.152 was first reported on August 26th 2026, and the most recent report was 24 minutes ago. In the last 60 days, the top reporter locations were: United States of America with 11 reports; Germany with 8 reports; Finland with 3 reports. The most common categories in these recent reports were: Web App Attack 30 times; Brute-Force 13 times; Bad Web Bot 11 times; Port Scan 5 times; Hacking 5 times; Other 7 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 voormedia	2026-08-30 21:34:07 (24 minutes ago)	Accessed trap at '/.git/config'	Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 21:10:49 (47 minutes ago)	(mod_security) mod_security (id:210492) triggered by 180.70.116.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 180.70.116.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 17:10:45.235100 2026] [security2:error] [pid 24374:tid 24374] [client 180.70.116.152:56722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.market.nationalenq.com"] [uri "/.git/config"] [unique_id "apScVSa8nj5gQT5k0-3nFAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 paissangroup	2026-08-30 20:48:09 (1 hour ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 20:19:29 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 180.70.116.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 180.70.116.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 16:19:23.299577 2026] [security2:error] [pid 26838:tid 26838] [client 180.70.116.152:42142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "internationalconnect.herecometheplanes.com"] [uri "/.git/config"] [unique_id "apSQS_n24DKVj5zN16BjWAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 ddw	2026-08-30 19:57:54 (2 hours ago)	ModSecurity detection - Rules: 930130(Restricted File Access Attempt)	Web App Attack
Anonymous	2026-08-30 19:50:02 (2 hours ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 19:43:26 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 180.70.116.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 180.70.116.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 15:43:20.072522 2026] [security2:error] [pid 31384:tid 31384] [client 180.70.116.152:58734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.auto.fletcherdouglas.com"] [uri "/.git/config"] [unique_id "apSH2KeUT0Dz1Qjl-Zpd6AAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 18:51:54 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 180.70.116.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 180.70.116.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 14:51:48.231090 2026] [security2:error] [pid 7371:tid 7371] [client 180.70.116.152:56720] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blackballprojects.com"] [uri "/.git/config"] [unique_id "apR7xM8kWC4BSL-p70LhAAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 inlink.ltd	2026-08-30 18:37:38 (3 hours ago)	dot file probe	Web App Attack
🇫🇮 YF	2026-08-30 18:30:39 (3 hours ago)	Git config exposure probe	Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 18:14:38 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 180.70.116.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 180.70.116.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 14:14:34.016669 2026] [security2:error] [pid 13251:tid 13251] [client 180.70.116.152:37800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kittysalterations.com"] [uri "/.git/config"] [unique_id "apRzCjiYtrpiwnLwOIfregAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 17:19:07 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 180.70.116.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 180.70.116.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 13:19:02.278242 2026] [security2:error] [pid 2610:tid 2610] [client 180.70.116.152:56834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "karyaenigma.com"] [uri "/.git/config"] [unique_id "apRmBmGlPohEb45ya042YAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MPL	2026-08-30 16:05:36 (5 hours ago)	tcp ports: 80,443 (12 or more attempts)	Port Scan
🇮🇹 mediarama.com	2026-08-30 15:07:02 (6 hours ago)	Banned by Fail2Ban	Web App Attack
🇩🇪 Admins@FBN	2026-08-30 12:47:13 (9 hours ago)	FW-PortScan: Traffic Blocked srcport=57390 dstport=443	Port Scan

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.133.24.124

🇺🇸 172.236.102.250

🇺🇸 172.203.212.25

🇵🇰 154.80.43.143

🇺🇸 147.185.132.83

🇺🇸 136.118.79.234

🇺🇸 52.71.216.196

🇧🇩 2400:cb00:1237:1000:ee50:3748:7cb4:b4e

🇨🇿 2400:cb00:31:1000:6141:c9fe:e85:e273

🇭🇰 191.124.7.154

🇻🇳 180.93.237.138

🇧🇷 179.189.85.66

🇷🇺 176.57.220.240

🇨🇳 175.175.235.48

🇸🇬 114.119.154.200

🇨🇦 85.217.149.54

🇺🇸 34.148.214.190

🇨🇦 20.48.250.41

🇺🇸 2607:f8b0:4001:c03::12d

🇩🇪 2400:cb00:1041:1000:a1b4:d6a7:f5f9:c57f