JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 124.104.143.3

124.104.143.3 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 37%: ?

37%

ISP	IPG
Usage Type	Fixed Line ISP
ASN	AS9299
Domain Name	pldthome.com
Country	🇵🇭 Philippines
City	Marikina City, National Capital Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 124.104.143.3

Whois 124.104.143.3

IP Abuse Reports for 124.104.143.3:

This IP address has been reported a total of 53 times from 36 distinct sources. 124.104.143.3 was first reported on August 27th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 AbuseIPDB informer	2026-10-15 16:19:50 (1 week ago)	nfdump top talker: 124.104.143.3 \| first seen 2026-10-15 19:19:50 \| duration 0.256s \| flows=2 \| pack ... show more nfdump top talker: 124.104.143.3 \| first seen 2026-10-15 19:19:50 \| duration 0.256s \| flows=2 \| packets=2046 \| bytes=2717088 \| pps=7992 \| bps=84909000 \| bpp=1328 \| proto=udp show less	DDoS Attack Port Scan Exploited Host
Anonymous	2026-10-11 02:46:06 (1 week ago)	denied traffic to a honeypot network. destination port 22.	Port Scan Hacking
🇺🇸 鬼影233	2026-09-24 06:12:54 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
Anonymous	2026-09-23 04:49:21 (4 weeks ago)	56100/udp (1 or more attempts)	Port Scan
🇺🇸 鬼影233	2026-09-20 14:02:17 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-09-20 13:20:22 (1 month ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=51&topics%5B2%5D=49&topics%5B3%5D=64&topics%5B4%5D=38 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-09-20 05:00:40 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-14 10:35:57 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇧🇷 noconex	2026-09-13 14:04:02 (1 month ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 124.104.14 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 124.104.143.3 show less	Port Scan Brute-Force SSH
Anonymous	2026-09-11 14:32:11 (1 month ago)	suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan	Port Scan
🇦🇺 foobax	2026-09-09 23:48:26 (1 month ago)	closed the connection from port 58620	SSH Port Scan
Anonymous	2026-09-06 01:00:01 (1 month ago)	Blocked by os-abuseipdb; 6 hits, proto=tcp, ports=22,23	Port Scan Hacking Brute-Force
🇺🇸 鬼影233	2026-09-04 10:05:45 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-30 08:35:59 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 124.104.143.3 (124.104.143.3.pldt.net): 1 in th ... show more (mod_security) mod_security (id:210730) triggered by 124.104.143.3 (124.104.143.3.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 04:35:51.078069 2026] [security2:error] [pid 9780:tid 9780] [client 124.104.143.3:49798] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|med-engineering.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "med-engineering.com"] [uri "/sildenafil.com"] [unique_id "apPrZzaV97jjRYgyM8oGBQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-08-30 03:44:24 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a06:4880::19

🇧🇷 2804:3690:8001:b530:c0f8:1bee:96c7:67fe

🇮🇳 202.141.81.120

🇻🇪 201.249.89.102

🇿🇦 165.165.153.162

🇨🇳 124.220.110.27

🇨🇳 115.191.27.238

🇳🇱 94.154.43.149

🇸🇬 85.203.21.226

🇨🇳 14.127.162.150

🇺🇸 209.85.219.47

🇳🇱 195.178.110.228

🇬🇧 193.163.125.205

🇦🇷 186.128.41.244

🇭🇰 148.66.49.226

🇮🇳 117.201.24.183

🇯🇵 107.155.15.8

🇸🇬 101.47.158.56

🇰🇬 95.87.69.118

🇩🇪 69.5.169.228