JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.59.248.79

5.59.248.79 was found in our database!

This IP was reported 61 times. Confidence of Abuse is 100%: ?

100%

ISP	C1V ISP
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212271
Hostname(s)	it-pom-server.powered-by.c1vhosting.it
Domain Name	c1vhosting.it
Country	🇮🇹 Italy
City	Pomezia, Lazio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.59.248.79

Whois 5.59.248.79

IP Abuse Reports for 5.59.248.79:

This IP address has been reported a total of 61 times from 48 distinct sources. 5.59.248.79 was first reported on July 11th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 CoreTech srl	2026-07-12 23:35:23 (9 hours ago)	ntopng alert: blacklisted_client_contact	Hacking
🇫🇷 SpaceHost-Server	2026-07-12 22:31:04 (10 hours ago)		Brute-Force Web App Attack
🇬🇧 WebNiraj	2026-07-12 08:39:47 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 5.59.248.79 (IT/Italy/it-pom-server.powered-by. ... show more (mod_security) mod_security (id:949110) triggered by 5.59.248.79 (IT/Italy/it-pom-server.powered-by.c1vhosting.it): 5 in the last 3600 secs [SIGMA] show less	Brute-Force
🇩🇪 macrob	2026-07-12 08:05:36 (1 day ago)	2026/07/12 08:05:33 [error] 2962511#2962511: 369682793 access forbidden by rule, client: 5.59.248.7 ... show more 2026/07/12 08:05:33 [error] 2962511#2962511: 369682793 access forbidden by rule, client: 5.59.248.79, server: binixo.ph, request: "GET /.env.old HTTP/1.1", host: "binixo.ph" 2026/07/12 08:05:33 [error] 2962511#2962511: 369682794 access forbidden by rule, client: 5.59.248.79, server: binixo.ph, request: "GET /.env.backup HTTP/1.1", host: "binixo.ph" 2026/07/12 08:05:34 [error] 2962507#2962507: 369682856 access forbidden by rule, client: 5.59.248.79, server: binixo.ph, request: "GET /.env.staging HTTP/1.1", host: "binixo.ph" ... show less	Web App Attack
🇫🇷 BelleFashion	2026-07-12 06:38:00 (1 day ago)		DDoS Attack Web App Attack
🇺🇸 TPI-Abuse	2026-07-12 04:32:47 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 5.59.248.79 (it-pom-server.powered-by.c1vhostin ... show more (mod_security) mod_security (id:210492) triggered by 5.59.248.79 (it-pom-server.powered-by.c1vhosting.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 00:32:40.495266 2026] [security2:error] [pid 9606:tid 9621] [client 5.59.248.79:64043] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jd-web-designs.com"] [uri "/.env"] [unique_id "alMY6Bk-n2VE8TbPWbmL9AAAAMw"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 sockominfo	2026-07-12 03:00:32 (1 day ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Email Spam
🇫🇷 Phenix Info	2026-07-12 02:22:20 (1 day ago)	SmallGuard.fr/Prestashop Massive 403	Web App Attack
🇩🇪 LRob	2026-07-12 01:56:15 (1 day ago)	CrowdSec: crowdsecurity/http-sensitive-files \| req: ["/api/.env","/.env.local","/.env","/.env.prod", ... show more CrowdSec: crowdsecurity/http-sensitive-files \| req: ["/api/.env","/.env.local","/.env","/.env.prod","/public/.env"] \| UA: ["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36","Mozilla/5.0 (Windows NT 10.0; Win64; x64) Ap show less	Hacking
🇮🇩 Burayot	2026-07-12 01:37:55 (1 day ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 5.59.248.79 (IT/Italy/it-pom-server. ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 5.59.248.79 (IT/Italy/it-pom-server.powered-by.c1vhosting.it): 2 in the last 3600 secs show less	Web App Attack
Anonymous	2026-07-12 00:52:39 (1 day ago)	Blocked by ModSec and CSF	Port Scan
🇳🇿 Tripwire	2026-07-12 00:18:23 (1 day ago)	Scanning for exploits - /.env.local	Web App Attack
🇺🇸 mw	2026-07-12 00:00:45 (1 day ago)	GET /.env.production HTTP/1.1	Web App Attack
🇧🇪 voormedia	2026-07-11 23:32:38 (1 day ago)	Accessed trap at '/.env'	Web App Attack
🇺🇸 TPI-Abuse	2026-07-11 23:17:08 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 5.59.248.79 (it-pom-server.powered-by.c1vhostin ... show more (mod_security) mod_security (id:210492) triggered by 5.59.248.79 (it-pom-server.powered-by.c1vhosting.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 19:17:02.577617 2026] [security2:error] [pid 10154:tid 10154] [client 5.59.248.79:51611] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thegoldentether.com"] [uri "/.env.old"] [unique_id "alLO7gGzlMF5lEctAPTmkwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 61 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:470:2cc:1:75b3:8bde:f822:10b2

192.168.50.66

🇲🇽 189.146.59.77

🇺🇸 162.158.90.131

🇸🇬 103.250.10.18

🇳🇱 91.92.40.24

🇫🇷 85.217.140.40

🇺🇸 74.209.100.246

🇺🇸 20.169.105.44

🇨🇦 16.174.27.238

🇰🇷 14.46.106.190

🇮🇳 223.230.3.124

🇺🇸 216.226.77.10

🇦🇴 193.163.125.184

🇺🇸 172.245.11.105

🇹🇭 125.25.230.202

🇳🇱 91.92.40.48

🇫🇷 85.217.140.29

🇨🇴 69.6.234.27

🇩🇪 64.226.84.247