JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

220.149.84.24

Recent Activity

Abuse confidence score ?

100% Critical

65 reports

22 reporters · latest 2 days ago

ISP	Soongsil University
Usage Type	Fixed Line ISP
ASN	AS9318
Domain Name	ssu.ac.kr
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 220.149.84.24

Export CSV

This IP address has been reported a total of 65 times from 22 distinct sources. 220.149.84.24 was first reported on August 24th 2026, and the most recent report was 2 days ago. In the last 60 days, the top reporter locations were: Germany with 21 reports; France with 16 reports; Hungary with 12 reports. The most common categories in these recent reports were: Web App Attack 47 times; SQL Injection 20 times; Hacking 15 times; Bad Web Bot 12 times; Exploited Host 12 times; Other 6 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-10-13 14:09:05 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 26	Exploited Host Web App Attack
🇫🇷 security.rdmc.fr	2026-10-13 08:00:09 (2 days ago)	SQL Injection Attempt	SQL Injection Web App Attack
🇩🇪 4server	2026-10-12 11:00:12 (3 days ago)	[MonOct1213:00:08.8459182026][security2:error][pid3722480:tid3722521][client220.149.84.24:0]ModSecur ... show more [MonOct1213:00:08.8459182026][security2:error][pid3722480:tid3722521][client220.149.84.24:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\(\?:select\\|grant\\|delete\\|insert\\|drop\\|alter\\|replace\\|truncate\\|update\\|create\\|rename\\|describe\)[[:space:]] [a-z\\|0-9\\|\\\\\\\\\\\|\\|\\\\\\\\\,] [[:space:]] \(\?:from\\|into\\|table\\|database\\|index\\|view\)[[:space:]] [a-z\\|0-9\\|\\\\\\\\\\\|\\|\\\\\\\\\,]\\|\\\\\\\\\'\\|union.\select.\from\)\"atARGS:id.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"2417\"][id\"390025\"][rev\"1\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:X-ChangerSQLInjectionVulnerability\"][severity\"CRITICAL\"][hostname\"www.farmaciaferrari.ch\"][uri\"/it/index.php\"][unique_id\"asy9uCVPtY-SkQmr56IWrgAAAAM\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-10-12 08:25:12 (3 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇨🇦 Anytech	2026-10-11 14:26:36 (4 days ago)	Blocked by Conn-Monitor: http-bad-user-agent	Web App Attack Bad Web Bot
Anonymous	2026-10-11 04:48:25 (4 days ago)	Web application attack detected.	Web App Attack
🇫🇷 conseilgouz	2026-10-11 02:34:05 (4 days ago)	joe-12 : Block return, carriage return, ... characters=>/index.php?option=com_content&view=artic ... show more joe-12 : Block return, carriage return, ... characters=>/index.php?option=com_content&view=article&id=1044%3Ala-version-joomla-162-est-disponible&catid=29%3Aversions-16x&Itemid=%27(') show less	Hacking
Anonymous	2026-10-11 02:12:13 (4 days ago)	Intrusion Detect. SQL injection attempts with URL.	Hacking SQL Injection Web App Attack
🇨🇦 polycoda	2026-10-11 01:27:39 (4 days ago)	AutoBlock: 💉 SQL Injection Attempt (Non Decay-Based)	Hacking Web App Attack
🇩🇪 4server	2026-10-11 00:42:50 (4 days ago)	[SunOct1102:42:46.8669332026][security2:error][pid1734285:tid1734431][client220.149.84.24:0]ModSecur ... show more [SunOct1102:42:46.8669332026][security2:error][pid1734285:tid1734431][client220.149.84.24:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\(\?:select\\|grant\\|delete\\|insert\\|drop\\|alter\\|replace\\|truncate\\|update\\|create\\|rename\\|describe\)[[:space:]] [a-z\\|0-9\\|\\\\\\\\\\\|\\|\\\\\\\\\,] [[:space:]] \(\?:from\\|into\\|table\\|database\\|index\\|view\)[[:space:]] [a-z\\|0-9\\|\\\\\\\\\\\|\\|\\\\\\\\\,]\\|\\\\\\\\\'\\|union.\select.\from\)\"atARGS:id.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"2417\"][id\"390025\"][rev\"1\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:X-ChangerSQLInjectionVulnerability\"][severity\"CRITICAL\"][hostname\"www.farmaciaferrari.ch\"][uri\"/it/index.php\"][unique_id\"asrbhj51bNtMlrubdmyQYAAAAUw\"] show less	Port Scan Brute-Force Web App Attack
🇮🇩 penjaga BRIN	2026-10-10 23:33:16 (5 days ago)	SQL injection attempt	SQL Injection
🇫🇷 claude CALVET	2026-10-10 23:11:15 (5 days ago)	gee-12 : Block return, carriage return, ... characters=>/index.php?view=article&id=14%3Atest-2&a ... show more gee-12 : Block return, carriage return, ... characters=>/index.php?view=article&id=14%3Atest-2&catid=%27(') show less	Hacking
🇩🇪 FeG Deutschland	2026-10-10 15:02:45 (5 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇫🇷 security.rdmc.fr	2026-10-10 11:41:50 (5 days ago)	SQL Injection Attempt	SQL Injection Web App Attack
🇨🇦 Anytech	2026-10-10 05:07:36 (5 days ago)	Blocked by Conn-Monitor: http-bad-user-agent	Web App Attack Bad Web Bot

Showing 1 to 15 of 65 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 77.91.65.41

🇸🇬 47.128.112.3

🇵🇰 39.34.104.37

🇬🇧 35.203.211.109

🇬🇧 200.138.46.247

🇦🇷 186.60.31.164

🇭🇰 119.28.46.114

🇳🇱 109.160.32.134

🇯🇵 34.84.187.223

🇨🇳 203.57.238.39

🇩🇴 186.7.229.117

🇺🇸 147.224.209.17

🇳🇱 109.160.32.32

🇨🇳 106.12.127.250

🇫🇷 78.192.21.78

🇨🇱 34.176.233.225

🇨🇱 34.176.17.163

🇺🇸 20.118.242.81

🇺🇸 207.90.244.13

🇰🇷 175.194.74.92