AbuseIPDB » 79.124.8.241

79.124.8.241 was found in our database!

This IP was reported 356 times. Confidence of Abuse is 14%: ?

14%

ISP	ColocationX Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS208046
Domain Name	colocationx.com
Country	Netherlands
City	Kerkrade, Limburg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 79.124.8.241

Whois 79.124.8.241

IP Abuse Reports for 79.124.8.241:

This IP address has been reported a total of 356 times from 100 distinct sources. 79.124.8.241 was first reported on September 30th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
bad-ip-hunter	2023-12-28 16:04:00 (1 year ago)	Brute force attacks using multiple known accounts via client-less web vpn	Brute-Force SSH
RLDD	2023-12-28 12:40:28 (1 year ago)	WP probing -pra	Web App Attack
Anonymous	2023-12-28 08:05:57 (1 year ago)	Exploit Attempt	Hacking
niceshops.com	2023-12-27 19:16:15 (1 year ago)	Web Attack multi (Dec 23 20:16:14 Matching rules: Detect possible SQL injection - Too many SQL keyw ... show moreWeb Attack multi (Dec 23 20:16:14 Matching rules: Detect possible SQL injection - Too many SQL keywords (more than 3 times),Detect possible SQL injection - E.g. Select * from ) show less	SQL Injection Brute-Force Bad Web Bot Web App Attack
FeG Deutschland	2023-12-27 10:27:33 (1 year ago)	Looking for CMS/PHP/SQL vulnerablilities	Exploited Host Web App Attack
niceshops.com	2023-12-26 20:18:32 (1 year ago)	Web Attack multi (Dec 23 21:18:31 Matching rules: Detect possible SQL injection - E.g. CHR(72) )	SQL Injection Brute-Force Bad Web Bot Web App Attack
oncord	2023-12-26 04:26:27 (1 year ago)	Form spam	Web Spam
niceshops.com	2023-12-25 16:41:06 (1 year ago)	Web Attack multi (Dec 23 17:41:05 Matching rules: Detect possible SQL injection - Too many SQL keyw ... show moreWeb Attack multi (Dec 23 17:41:05 Matching rules: Detect possible SQL injection - Too many SQL keywords (more than 3 times),Detect possible SQL injection - E.g. Sleep(5),Detect possible SQL injection - E.g. Select * from ) show less	SQL Injection Brute-Force Bad Web Bot Web App Attack
FeG Deutschland	2023-12-25 15:06:02 (1 year ago)	Looking for CMS/PHP/SQL vulnerablilities	Exploited Host Web App Attack
TPI-Abuse	2023-12-23 13:33:12 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 79.124.8.241 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 79.124.8.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 23 08:33:05.601930 2023] [security2:error] [pid 24787] [client 79.124.8.241:34704] [client 79.124.8.241] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|doctorbalog.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "doctorbalog.com"] [uri "/backup2021.sql"] [unique_id "ZYbhkZLjV_BDxdoaUVG6zQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2023-12-23 10:43:22 (1 year ago)	RDP brute force attack.	Port Scan Brute-Force
TPI-Abuse	2023-12-23 09:51:35 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 79.124.8.241 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 79.124.8.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 23 04:51:32.825329 2023] [security2:error] [pid 1103] [client 79.124.8.241:52814] [client 79.124.8.241] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|namefinder.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "namefinder.com"] [uri "/export.sql"] [unique_id "ZYatpNEnm5PRiObO2n4psAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
FeG Deutschland	2023-12-22 14:21:06 (1 year ago)	Looking for CMS/PHP/SQL vulnerablilities	Exploited Host Web App Attack
MAGIC	2023-12-22 06:02:24 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
ozisp.com.au	2023-12-21 10:39:25 (1 year ago)	BG_dagroup_<33>1703155163 [1:2522114:5380] ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic ... show moreBG_dagroup_<33>1703155163 [1:2522114:5380] ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic group 115 [Classification: Misc Attack] [Priority: 2] {TCP} 79.124.8.241:46266 show less	Open Proxy