JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.207.231.124

196.207.231.124 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 22%: ?

22%

ISP	SONATEL Societe Nationale Des Telecommunications Du Senegal
Usage Type	Fixed Line ISP
ASN	AS8346
Domain Name	sonatel.sn
Country	🇸🇳 Senegal
City	Dakar, Dakar

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.207.231.124

Whois 196.207.231.124

IP Abuse Reports for 196.207.231.124:

This IP address has been reported a total of 35 times from 18 distinct sources. 196.207.231.124 was first reported on January 16th 2025, and the most recent report was 52 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-25 06:44:18 (52 minutes ago)	(mod_security) mod_security (id:240335) triggered by 196.207.231.124 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 196.207.231.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 02:44:11.824058 2026] [security2:error] [pid 595368:tid 595368] [client 196.207.231.124:58065] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 196.207.231.124 (+1 hits since last alert)\|certifiedfarmersmarkets.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "certifiedfarmersmarkets.org"] [uri "/xmlrpc.php"] [unique_id "amRbOx1yy_tlyGi5WBDz5AAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-07-24 11:12:34 (20 hours ago)	(wordpress) Failed wordpress login from 196.207.231.124 (SN/Senegal/Dakar/Dakar/-)	Brute-Force
🇬🇧 anycast_ac	2026-05-30 21:52:17 (1 month ago)	[WebProtection] Scanner detected \| port:443 (5 requests) requestis	DDoS Attack
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 month ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇺🇸 kosada.com	2026-03-28 22:10:09 (3 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 xmission.com	2026-03-06 01:42:48 (4 months ago)	Blocked by UFW (TCP on 9101) Source port: 47329 TTL: 110 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9101) Source port: 47329 TTL: 110 Packet length: 52 TOS: 0x08 This report (for 196.207.231.124) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-03-04 23:59:08 (4 months ago)	Blocked by UFW (TCP on 9101) Source port: 47358 TTL: 110 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9101) Source port: 47358 TTL: 110 Packet length: 52 TOS: 0x08 This report (for 196.207.231.124) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 matt	2026-03-04 00:24:15 (4 months ago)	DDOS attack with query parameters attempting to overload WordPress site.	DDoS Attack
🇪🇸 el-brujo	2026-02-15 01:15:31 (5 months ago)	Cloudflare WAF: Request Path: /www.google.es/basededatos/backup2014.bak Request Query: Host: forum. ... show more Cloudflare WAF: Request Path: /www.google.es/basededatos/backup2014.bak Request Query: Host: forum.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Action: block Source: firewallManaged ASN Description: SONATEL SONATEL-AS Autonomous System Country: SN Method: GET Timestamp: 2026-02-15T01:15:31Z ruleId: c04705c7adee4ce3a763bd5e18135e0c. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇺🇸 xmission.com	2026-02-11 07:48:28 (5 months ago)	Blocked by UFW (TCP on 9101) Source port: 23142 TTL: 110 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9101) Source port: 23142 TTL: 110 Packet length: 52 TOS: 0x08 This report (for 196.207.231.124) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 gui-ying233	2026-02-10 00:08:02 (5 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-02-04 16:27:47 (5 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2026-01-21 01:43:11 (6 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 xmission.com	2026-01-10 09:14:28 (6 months ago)	Blocked by UFW (TCP on 9101) Source port: 9241 TTL: 109 Packet length: 52 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 9101) Source port: 9241 TTL: 109 Packet length: 52 TOS: 0x08 This report (for 196.207.231.124) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 polycoda	2026-01-03 11:08:13 (6 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 208.69.78.36

🇺🇦 176.122.109.206

🇮🇩 103.178.175.124

🇧🇪 34.76.215.162

🇩🇪 167.94.146.73

🇹🇭 165.154.232.165

🇺🇸 162.216.150.141

🇺🇸 162.216.150.9

🇺🇸 107.175.183.32

🇬🇧 35.203.210.196

🇧🇪 34.156.213.199

🇨🇴 191.88.165.1

🇺🇸 162.216.150.79

🇭🇰 139.198.113.29

🇩🇪 134.122.93.100

🇵🇹 95.94.205.12

🇬🇧 86.165.76.150

🇫🇷 85.217.140.41

🇮🇹 72.146.30.11

🇨🇳 60.16.200.13