JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.239.8.241

185.239.8.241 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 31%: ?

31%

ISP	Digicom SHPK
Usage Type	Fixed Line ISP
ASN	AS198279
Hostname(s)	ip-185-239-8-241.digicom-al.net
Domain Name	host.io
Country	🇦🇱 Albania
City	Librazhd, Elbasan County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.239.8.241

Whois 185.239.8.241

IP Abuse Reports for 185.239.8.241:

This IP address has been reported a total of 17 times from 12 distinct sources. 185.239.8.241 was first reported on July 28th 2025, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-18 15:34:09 (16 hours ago)	(mod_security) mod_security (id:210350) triggered by 185.239.8.241 (ip-185-239-8-241.digicom-al.net) ... show more (mod_security) mod_security (id:210350) triggered by 185.239.8.241 (ip-185-239-8-241.digicom-al.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 11:34:03.135471 2026] [security2:error] [pid 17554:tid 17554] [client 185.239.8.241:53888] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|title23.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "title23.com"] [uri "/"] [unique_id "aq1Z6-gnwFbgn7zbTFlMDwAAAAg"], referer: https://domainseochecker.store/dir/ethical-seo-backlinks-214133 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-09-03 17:41:40 (2 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-30 18:00:12 (2 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 pixelmemory.us	2026-08-26 03:21:29 (3 weeks ago)	2026-08-26T03:16:33 185.239.8.241 GET /Photos/Outdoors/2005-07-10%20Renaissance%20Faire/raw/IMG_9265 ... show more 2026-08-26T03:16:33 185.239.8.241 GET /Photos/Outdoors/2005-07-10%20Renaissance%20Faire/raw/IMG_9265.CR2 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 ... show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-20 15:01:12 (4 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇨🇦 polycoda	2026-08-20 13:46:14 (4 weeks ago)	AutoBlock: 📡 Port 22 Scan (Non Decay-Based)	Port Scan SSH
🇺🇸 kosada.com	2026-08-14 04:40:43 (1 month ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇩🇪 LRob	2026-08-06 16:07:55 (1 month ago)	CrowdSec: REPEAT OFFENDER (previously banned, came back) - distributed L7 HTTP flood on WordPress 'T ... show more CrowdSec: REPEAT OFFENDER (previously banned, came back) - distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS \| req: /calendrier-2/action~agenda/cat_ids~138,147,139,140/tag_ids~452,449,343,577,584,383/request_format~json/ \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 show less	DDoS Attack Web App Attack
🇩🇪 LRob	2026-08-04 16:25:29 (1 month ago)	CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_forma ... show more CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS \| req: /calendrier-2/action~agenda/time_limit~1764370800/cat_ids~133,140/tag_ids~655,474,538,681,445,223/request_format~json/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 show less	DDoS Attack Web App Attack
🇺🇸 kosada.com	2026-07-31 18:24:06 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 filstal.org	2026-07-28 00:07:09 (1 month ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1866.237 Safari/537.36 show less	Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-07-16 20:00:14 (2 months ago)	HTTP flood against /retreat-corp on Apache webserver	Brute-Force
🇸🇬 mypatricks	2026-06-30 07:58:24 (2 months ago)	185.239.8.241 \| Port: 13693 \| DNS: ip-185-239-8-241.digicom-al.net 2026-06-30T15:58:23+08:00 Europe/ ... show more 185.239.8.241 \| Port: 13693 \| DNS: ip-185-239-8-241.digicom-al.net 2026-06-30T15:58:23+08:00 Europe/Tirane \| IPs res erved list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 HTTP/1.1 443 GET \| URL: /ms/?9aea8afefed8c9eb9d=432 \| Ref: https://xxxxxx/ms?9aea8afefed8c9eb9d=432 \| Country: AL/Albania/+01:00 IP City: Hotolisht Windows a13ba019ce49ed25-MXP/Milan, Italy 1 hits/0 secs Browser 1 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇮🇩 hermawan	2026-03-14 08:52:00 (6 months ago)	03/14/2026-15:50:56.720785 [Drop] [] [1:9200003:0] Coba - reject apa masuk matomo appears 430 tim ... show more 03/14/2026-15:50:56.720785 [Drop] [] [1:9200003:0] Coba - reject apa masuk matomo appears 430 times match dipake google crawler 66-249-73-193 JA4 hash brazil [**] [Classification: (null)] [Priority: 3] {TCP} 185.239.8.241:58318 -> 103.166.156.58:443 ... show less	Email Spam Hacking
🇳🇱 exxos	2025-08-01 08:10:01 (1 year ago)	HTTP1.x attacks	DDoS Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 49.43.113.10

🇧🇷 152.243.48.40

🇮🇩 114.5.84.99

🇨🇳 111.59.127.60

🇮🇩 103.93.160.210

🇺🇸 35.237.216.35

🇧🇦 31.223.141.94

🇯🇵 8.211.159.236

🇫🇷 217.113.194.94

🇩🇪 213.209.159.208

🇧🇪 207.175.204.252

🇮🇳 175.101.99.77

🇺🇸 162.216.149.201

🇮🇳 106.222.215.53

🇩🇪 82.165.27.186

🇧🇪 35.240.81.64

🇧🇪 35.233.8.37

🇳🇱 34.91.0.68

🇧🇪 34.78.76.86

🇺🇸 3.151.116.231