AbuseIPDB » 107.167.18.124
107.167.18.124
This IP was reported 9 times. Confidence of
Abuse
is 22% : ?
ISP
Sharktech
Usage Type
Data Center/Web Hosting/Transit
ASN
AS46844
Hostname(s)
customer.sharktech.net
Domain Name
sharktech.net
Country
🇺🇸
United States of America
City
Los Angeles, California
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 107.167.18.124 :
This IP address has been reported a total of
9
times from
7 distinct
sources.
107.167.18.124 was first reported on
April 4th 2026 , and the most recent report was
4 weeks ago
Old Reports:
The most recent abuse report for this IP address is from
4 weeks ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-07-03 21:06:05
(4 weeks ago)
Trying to access config files
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 09:26:09
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 107.167.18.124 (customer.sharktech.net): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 107.167.18.124 (customer.sharktech.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 05:26:04.018133 2026] [security2:error] [pid 11332:tid 11332] [client 107.167.18.124:8910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dentsville398.org"] [uri "/.env.staging"] [unique_id "akeALHIg3TsdVLHmN_q_QwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 05:08:20
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 107.167.18.124 (customer.sharktech.net): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 107.167.18.124 (customer.sharktech.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 01:08:15.842146 2026] [security2:error] [pid 5308:tid 5308] [client 107.167.18.124:6686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danzadance.org"] [uri "/.env.local"] [unique_id "akdDv6PdAW4XVjVAO2LajAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 14:53:39
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 107.167.18.124 (customer.sharktech.net): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 107.167.18.124 (customer.sharktech.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 10:53:33.313605 2026] [security2:error] [pid 19357:tid 19357] [client 107.167.18.124:58152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "circleway.org"] [uri "/wp-config.php.old"] [unique_id "akZ7bY8cKOMSkY4DW5kFJgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
Shaik Sai Meera
2026-07-02 09:10:12
(4 weeks ago)
IM360 WAF: Hidden file access
Brute-Force
🇫🇷
Octopuce
2026-07-01 00:57:21
(1 month ago)
Aggressive web search of vulnerable pages: /wp-config.php /docker-compose.yml /docker-compose.overri ...
show more
Aggressive web search of vulnerable pages: /wp-config.php /docker-compose.yml /docker-compose.override.yml /config.yml /config/database.yml ...
show less
Web App Attack
🇦🇺
LiftUp Hosting
2026-06-04 14:40:35
(1 month ago)
Honeypot hit: HTTP/1.1 request on 2375
GET /version
User-Agent: python-requests/2.32.5
Accept: */*
...
show more
Honeypot hit: HTTP/1.1 request on 2375
GET /version
User-Agent: python-requests/2.32.5
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd; 2375 [1] TCP
show less
Hacking
Bad Web Bot
🇩🇪
NxtGenIT
2026-06-04 10:49:05
(1 month ago)
Redishoneypot Honeypot hit, Action: INFO SERVER
IoT Targeted
🇫🇷
Duggy_Tuxy🧱
2026-04-04 11:47:40
(3 months ago)
[HP01-SRV01-FR] Blocked by SysWarden Firewall (Port Scan / Probing Port 502)
Port Scan
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: