JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.236.124.194

Neutral Activity

Abuse confidence score ?

0% Low Risk

161 reports

115 reporters · latest 4 months ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

104.236.124.194 has been reported 161 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 104.236.124.194

Export CSV

This IP address has been reported a total of 161 times from 115 distinct sources. 104.236.124.194 was first reported on October 5th 2024, and the most recent report was 4 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-25 16:33:03 (4 months ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇨🇴 adalbertoreyes.org	2026-05-19 18:21:29 (4 months ago)	CategoryBruteForce WebPage	Brute-Force
🇸🇪 donarev419	2026-05-19 01:08:22 (4 months ago)	Connection to port 443 with data transfer. Data preview:	Port Scan Hacking
🇺🇸 octageeks.com	2026-05-18 04:07:41 (4 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇧🇪 voormedia	2026-05-17 19:44:53 (4 months ago)	Accessed trap at '/.git/config'	Web App Attack
Anonymous	2026-05-17 19:30:59 (4 months ago)	(caddyscan) Scanner path probe from 104.236.124.194 (US/United States/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 104.236.124.194 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 404 219 104.236.124.194 - - [17/May/2026:19:25:09 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 404 234 104.236.124.194 - - [17/May/2026:19:29:31 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 404 220 104.236.124.194 - - [17/May/2026:19:29:54 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 404 223 104.236.124.194 - - [17/May/2026:19:30:06 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 104.236.124.194 - - [17/May/2026:19:30:56 +0000] "GET /.git/config HTTP/1.1" show less	Port Scan
Anonymous	2026-05-17 19:14:53 (4 months ago)	104.236.124.194 - - [18/May/2026:03:14:52 +0800] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5. ... show more 104.236.124.194 - - [18/May/2026:03:14:52 +0800] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (SymbianOS 9.4; Series60/5.0 NokiaN97-1/10.0.012; Profile/MIDP-2.1 Configuration/CLDC-1.1; en-us) AppleWebKit/525 (KHTML, like Gecko) WicKed/7.1.12344" ... show less	Bad Web Bot Web App Attack
🇩🇪 Kreapptivo	2026-05-17 19:12:18 (4 months ago)	[17/May/2026:21:12:14 +0200] Web-Request: "GET /.git/config", User-Agent: "Mozilla/5.0 (X11; Linux x ... show more [17/May/2026:21:12:14 +0200] Web-Request: "GET /.git/config", User-Agent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.75 Safari/537.36" show less	Bad Web Bot Web App Attack
Anonymous	2026-05-17 19:01:28 (4 months ago)	File repository snooping: 104.236.124.194 - - [17/May/2026:20:01:28 +0100] "GET /.git/config HTTP/1 ... show more File repository snooping: 104.236.124.194 - - [17/May/2026:20:01:28 +0100] "GET /.git/config HTTP/1.1" 404 234 "-" "FeedFetcher-Google; ( http://www.google.com/feedfetcher.html)" show less	Hacking Web App Attack
Anonymous	2026-05-17 18:50:04 (4 months ago)	Automatic report - Vulnerability scan /.git/config	Web App Attack
🇮🇹 A000Z	2026-05-17 18:39:16 (4 months ago)	Fail2Ban: 104.236.124.194 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Opera/9. ... show more Fail2Ban: 104.236.124.194 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Opera/9.80 (S60; SymbOS; Opera Mobi/499; U; ru) Presto/2.4.18 Version/10.00 show less	Bad Web Bot
Anonymous	2026-05-17 17:52:58 (4 months ago)	Attempted access to sensitive endpoint (/.git/config) detected. Automated scan or unauthorized probi ... show more Attempted access to sensitive endpoint (/.git/config) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇩🇪 ghostwarriors	2026-05-17 15:20:08 (4 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-05-17 14:55:33 (4 months ago)	[SunMay1716:55:29.1151532026][security2:error][pid3975133:tid3975230][client104.236.124.194:0]ModSec ... show more [SunMay1716:55:29.1151532026][security2:error][pid3975133:tid3975230][client104.236.124.194:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mail.modularss.com\"][uri\"/.git/config\"][unique_id\"agnW4QogwakjyboSp6GQAgAAAMo\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-05-17 14:55:01 (4 months ago)	Malicious activity detected	Hacking Web App Attack

Showing 1 to 15 of 161 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2a0c:b641:b0:a1a1:21c4::1

🇬🇧 200.138.46.211

🇬🇧 86.38.187.229

🇺🇸 71.27.86.44

🇺🇸 45.79.114.248

🇺🇸 20.163.12.245

🇷🇺 212.16.203.78

🇺🇸 199.19.225.232

🇬🇧 194.50.235.157

🇯🇵 160.251.101.169

🇦🇷 148.227.69.122

🇺🇸 136.144.42.191

🇮🇳 122.168.197.138

🇺🇸 103.143.231.24

🇨🇦 85.217.149.72

🇩🇪 49.12.19.102

🇺🇸 35.211.205.202

🇯🇵 34.97.43.25

🇺🇸 2603:80a0:3440:28:217e:c288:5729:adb7

🇨🇳 139.170.73.163