JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.249.48.121

94.249.48.121 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 12%: ?

12%

ISP	Jordan Telecom Group (Orange)
Usage Type	Fixed Line ISP
ASN	AS8376
Hostname(s)	94.249.x.121.go.com.jo
Domain Name	go.com.jo
Country	🇯🇴 Jordan
City	Zarqa, Zarqa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.249.48.121

Whois 94.249.48.121

IP Abuse Reports for 94.249.48.121:

This IP address has been reported a total of 16 times from 14 distinct sources. 94.249.48.121 was first reported on July 2nd 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-23 20:38:00 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 94.249.48.121 (94.249.x.121.go.com.jo): 1 in th ... show more (mod_security) mod_security (id:210350) triggered by 94.249.48.121 (94.249.x.121.go.com.jo): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 16:37:53.261703 2026] [security2:error] [pid 25872:tid 25872] [client 94.249.48.121:25263] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|cbcfargo.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cbcfargo.com"] [uri "/resources/promise/true_joy.pdf"] [unique_id "atvFoX9pHKrQECC0yh-dkAAAAAw"], referer: https://cbcfargo.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-17 11:09:29 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-15 14:56:57 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 klaus_ph	2026-08-09 23:19:33 (2 months ago)	94.249.48.121 - - [09/Aug/2026:01:35:16 +0200] "GET /lka/Record/c0283825/Email?lng=sl HTTP/1.1" 200 ... show more 94.249.48.121 - - [09/Aug/2026:01:35:16 +0200] "GET /lka/Record/c0283825/Email?lng=sl HTTP/1.1" 200 10289 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.53 Safari/537.36" ... show less	Bad Web Bot
🇺🇸 kosada.com	2026-07-28 23:02:05 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇨🇦 Anymous	2026-07-20 17:33:07 (3 months ago)	SYN Flood	DDoS Attack
🇫🇷 carpes0708	2026-07-20 01:20:49 (3 months ago)		Port Scan Web App Attack
🇷🇺 russian-kurort.ru	2026-07-19 21:31:00 (3 months ago)	SYN flood	DDoS Attack Hacking
🇩🇪 Admins@FBN	2026-07-19 21:22:07 (3 months ago)	FW-PortScan: Traffic Blocked srcport=44057 dstport=80	Port Scan
🇺🇸 kosada.com	2026-07-06 20:22:43 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-07-04 12:57:54 (3 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇩🇪 ghostwarriors	2026-04-07 06:22:51 (6 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-18 00:32:33 (11 months ago)	scanning http requests from known botnet	Web App Attack
🇩🇪 FeG Deutschland	2025-10-02 08:08:09 (1 year ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇺🇸 hostseries	2025-10-01 09:16:50 (1 year ago)	Trigger: LF_DISTATTACK	Brute-Force

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2602:80d:1006::60

🇧🇷 186.239.41.74

🇹🇯 185.121.0.254

🇳🇮 161.0.55.134

🇻🇳 160.250.246.219

🇻🇳 160.22.106.87

🇰🇪 102.0.13.212

🇺🇦 91.203.60.139

🇫🇷 45.95.174.62

🇮🇳 216.10.242.215

🇪🇬 197.134.248.163

🇬🇧 192.248.150.180

🇳🇱 185.136.15.13

🇮🇳 182.237.13.208

🇭🇰 168.76.131.178

🇺🇸 159.65.99.44

🇺🇸 157.230.218.106

🇩🇪 157.230.19.72

🇯🇵 157.7.133.168

🇩🇪 156.236.31.85