AbuseIPDB » 218.95.39.17
218.95.39.17
This IP was reported 12 times. Confidence of
Abuse
is 0% : ?
ISP
CHINANET jiangxi province network
Usage Type
Data Center/Web Hosting/Transit
ASN
AS139201
Domain Name
online.jx.cn
Country
🇨🇳
China
City
Nanchang, Jiangxi
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 218.95.39.17 :
This IP address has been reported a total of
12
times from
10 distinct
sources.
218.95.39.17 was first reported on
November 5th 2024 , and the most recent report was
1 year ago
Old Reports:
The most recent abuse report for this IP address is from
1 year ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
Packets-Decreaser.NET
2024-12-22 23:00:51
(1 year ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
Spamectomy_Doctor_USA
2024-12-20 02:32:39
(1 year ago)
email spam phishing spoofing
Phishing
Email Spam
🇺🇸
TPI-Abuse
2024-12-19 23:06:37
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 218.95.39.17 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 218.95.39.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 19 18:06:33.331656 2024] [security2:error] [pid 21465:tid 21474] [client 218.95.39.17:45559] [client 218.95.39.17] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||batonrougegazette.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "batonrougegazette.com"] [uri "/uncategorized/travis-kelce-smitten-over-patriots-fans-treatment-of-taylor-swift/>giftmshop.com"] [unique_id "Z2Sm-TXWQuJf1tS_05d9qAAAAEU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-12-17 06:05:08
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-12-16 23:02:51
(1 year ago)
Detected Hacking, SQL Injection or general Web App Attack
Web App Attack
2024-12-16 09:43:28
(1 year ago)
apache exploit attempt
Hacking
SQL Injection
🇩🇪
Packets-Decreaser.NET
2024-12-15 23:28:40
(1 year ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇩🇪
nyuuzyou
2024-12-14 10:50:45
(1 year ago)
Intensive scraping: /web?s=%D0%BE%D0%BE%D0%BE%20Sedelnikovo&country=tg-tg&scraper=yep. User-Agent: M ...
show more
Intensive scraping: /web?s=%D0%BE%D0%BE%D0%BE%20Sedelnikovo&country=tg-tg&scraper=yep. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68.
show less
Bad Web Bot
🇪🇸
el-brujo
2024-12-13 20:33:14
(1 year ago)
Cloudflare WAF: Request Path: / Request Query: Host: elhacker.net:443 userAgent: BlackBerry7100i/4. ...
show more
Cloudflare WAF: Request Path: / Request Query: Host: elhacker.net:443 userAgent: BlackBerry7100i/4.1.0 Profile/MIDP-2.0 Configuration/CLDC-1.1 VendorID/103 Action: block Source: l7ddos ASN Description: CHINANET-JIANGXI-JIUJIANG-IDC Jiangxi Jiujiang IDC Country: CN Method: GET Timestamp: 2024-12-13T20:33:14Z ruleId: d2f010cce02c49e69ae930990ffb6088. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇩🇪
Packets-Decreaser.NET
2024-11-17 23:31:02
(1 year ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
2024-11-17 21:46:09
(1 year ago)
Web App Attack
2024-11-05 16:31:41
(1 year ago)
DDoS Attack
Showing 1 to
12
of 12 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: