JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

24.31.229.122

Neutral Activity

Abuse confidence score ?

0% Low Risk

25 reports

14 reporters · latest 2 years ago

ISP	Charter Communications Inc
Usage Type	Fixed Line ISP
ASN	AS11427
Hostname(s)	syn-024-031-229-122.res.spectrum.com
Domain Name	charter.com
Country	🇺🇸 United States of America
City	Lenexa, Kansas

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

24.31.229.122 has been reported 25 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 24.31.229.122

Export CSV

This IP address has been reported a total of 25 times from 14 distinct sources. 24.31.229.122 was first reported on August 15th 2024, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Aetherweb Ark	2024-09-01 12:10:09 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 24.31.229.122 (US/United States/syn-024-031-229 ... show more (mod_security) mod_security (id:210492) triggered by 24.31.229.122 (US/United States/syn-024-031-229-122.res.spectrum.com): N in the last X secs show less	Web App Attack
🇮🇪 Jim Keir	2024-09-01 12:09:57 (2 years ago)	2024-09-01 12:09:56 24.31.229.122 File scanning, blocking 24.31.229.122 for 5 minutes	Web App Attack
🇺🇸 TPI-Abuse	2024-09-01 10:06:47 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 24.31.229.122 (syn-024-031-229-122.res.spectrum ... show more (mod_security) mod_security (id:210492) triggered by 24.31.229.122 (syn-024-031-229-122.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 01 06:06:41.552266 2024] [security2:error] [pid 606:tid 606] [client 24.31.229.122:60235] [client 24.31.229.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.northfortworthalliance.com"] [uri "/.env.local"] [unique_id "ZtQ8scyUJ8W6GqyIzrd2qgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-01 09:49:20 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 24.31.229.122 (syn-024-031-229-122.res.spectrum ... show more (mod_security) mod_security (id:210492) triggered by 24.31.229.122 (syn-024-031-229-122.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 01 05:49:15.342396 2024] [security2:error] [pid 7663:tid 7663] [client 24.31.229.122:30430] [client 24.31.229.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stonehillpolicies.myomni.us"] [uri "/.env.live"] [unique_id "ZtQ4mwoM98yCEZwOS9kI3QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-01 09:20:20 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 24.31.229.122 (syn-024-031-229-122.res.spectrum ... show more (mod_security) mod_security (id:210492) triggered by 24.31.229.122 (syn-024-031-229-122.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 01 05:20:16.934621 2024] [security2:error] [pid 19627:tid 19627] [client 24.31.229.122:36886] [client 24.31.229.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "needtoorder.com"] [uri "/.env.backup"] [unique_id "ZtQx0O1vA5ruGghQuUUjHgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-01 08:30:54 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 24.31.229.122 (syn-024-031-229-122.res.spectrum ... show more (mod_security) mod_security (id:210492) triggered by 24.31.229.122 (syn-024-031-229-122.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 01 04:30:47.024524 2024] [security2:error] [pid 14837:tid 14837] [client 24.31.229.122:61617] [client 24.31.229.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jwwsb.jaspercity.com"] [uri "/.env_1"] [unique_id "ZtQmN_EMZ3NEdXPce2jdfQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Ba-Yu	2024-08-30 14:00:59 (2 years ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇵🇱 nfsec.pl	2024-08-30 13:51:31 (2 years ago)	24.31.229.122 - - [30/Aug/2024:15:51:26 +0200] "GET /.env.prod.local HTTP/1.1" 404 30659 "http://nfs ... show more 24.31.229.122 - - [30/Aug/2024:15:51:26 +0200] "GET /.env.prod.local HTTP/1.1" 404 30659 "http://nfsec.pl/.env.prod.local" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 24.31.229.122 - - [30/Aug/2024:15:51:28 +0200] "GET /.env.production HTTP/1.1" 404 24771 "http://nfsec.pl/.env.production" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 24.31.229.122 - - [30/Aug/2024:15:51:28 +0200] "GET /.env.production.local HTTP/1.1" 404 24891 "http://nfsec.pl/.env.production.local" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 24.31.229.122 - - [30/Aug/2024:15:51:29 +0200] "GET /.env.local HTTP/1.1" 404 24596 "http://nfsec.pl/.env.local" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 24.31.229.122 - - [30/Aug/2024:15:51:30 +0200] "GE ... show less	Exploited Host Web App Attack
Anonymous	2024-08-22 01:03:12 (2 years ago)	24.31.229.122 - - [22/Aug/2024:03:03:07 +0200] "GET /index.php?IdFeed=13&Tag=Malware&Page=12 HTTP/1. ... show more 24.31.229.122 - - [22/Aug/2024:03:03:07 +0200] "GET /index.php?IdFeed=13&Tag=Malware&Page=12 HTTP/1.1" 482 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 24.31.229.122 - - [22/Aug/2024:03:03:08 +0200] "GET /index.php?IdFeed=13&IdFeed=%2527&Page=12&Tag=Malware HTTP/1.1" 482 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 24.31.229.122 - - [22/Aug/2024:03:03:08 +0200] "GET /index.php?IdFeed=13&IdFeed=&Page=12&Tag=Malware HTTP/1.1" 482 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 24.31.229.122 - - [22/Aug/2024:03:03:08 +0200] "GET /index.php?IdFeed=13&IdFeed=..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252Fetc%252Fpasswd&Page=12&Tag=Malware HTTP/1.1" 482 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 S ... show less	Web App Attack
🇫🇷 Sklurk	2024-08-21 21:12:06 (2 years ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2024-08-21 21:08:06 (2 years ago)	(mod_security) mod_security (id:210580) triggered by 24.31.229.122 (syn-024-031-229-122.res.spectrum ... show more (mod_security) mod_security (id:210580) triggered by 24.31.229.122 (syn-024-031-229-122.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 21 17:07:59.480619 2024] [security2:error] [pid 17250:tid 17250] [client 24.31.229.122:55134] [client 24.31.229.122] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "etc/passwd" at ARGS:id. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt\|\|www.oualierealty.com\|F\|2"] [data "Matched Data: etc/passwd found within ARGS:id: ../../../../../../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.oualierealty.com"] [uri "/index.php"] [unique_id "ZsZXL8KKzysnrNZL_z88xgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 aygabtu	2024-08-21 11:30:00 (2 years ago)	sql injection attack	SQL Injection
🇫🇷 Sklurk	2024-08-20 19:38:36 (2 years ago)	Web App Attack	Web App Attack
🇨🇦 JuicyJ	2024-08-19 13:56:49 (2 years ago)	Excessive crawling/scraping	Web App Attack
🇯🇵 HeliJP	2024-08-18 19:15:34 (2 years ago)	2024-08-18T05:17:52Z - Recognized attacks\bad behavior from IP address 24.31.229.122 on port 443\80 ... show more 2024-08-18T05:17:52Z - Recognized attacks\bad behavior from IP address 24.31.229.122 on port 443\80 (18 daily hits): Multiple URL Encoding Detected, Detects classic SQL injection probings 1/3, SQL Injection Attack: Common Injection Testing Detected show less	Hacking SQL Injection

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 49.207.246.97

🇫🇷 2400:cb00:1038:1000:1d45:f95d:b4c4:a58a

🇳🇱 193.176.31.249

🇬🇧 154.16.44.210

🇬🇧 154.16.44.27

🇻🇳 123.22.130.170

🇬🇧 88.215.1.201

🇬🇧 80.42.217.200

🇺🇸 74.7.241.23

🇧🇪 34.156.60.44

🇺🇸 34.44.142.114

🇸🇪 193.180.125.157

🇲🇽 189.217.130.86

🇷🇺 185.64.211.52

🇷🇺 176.97.105.13

🇬🇧 154.16.44.136

🇬🇧 154.16.44.122

🇹🇭 150.95.84.186

🇮🇳 103.88.76.27

🇰🇬 77.95.57.181