JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 124.198.132.104

124.198.132.104 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 20%: ?

20%

ISP	1337 Services GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210558
Domain Name	as210558.net
Country	🇺🇸 United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 124.198.132.104

Whois 124.198.132.104

IP Abuse Reports for 124.198.132.104:

This IP address has been reported a total of 20 times from 12 distinct sources. 124.198.132.104 was first reported on May 20th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 alferez	2026-05-23 04:59:03 (1 month ago)	Searching random mail account login	Email Spam
Anonymous	2026-05-17 19:36:42 (1 month ago)	Authentication failure	Brute-Force
🇮🇩 aaKenshin	2026-05-17 14:33:20 (1 month ago)	Suspicious activity detected from IP 124.198.132.104 based on mailserver logs. Sample logs: 2026-05- ... show more Suspicious activity detected from IP 124.198.132.104 based on mailserver logs. Sample logs: 2026-05-17 22:25:10,758 INFO [ImapServer-720] [ip=172.16.0.182;oip=124.198.132.104;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=759;] imap - LOGIN elapsed=110 (NIO) 2026-05-17 22:33:15,947 INFO [ImapServer-720] [ip=172.16.0.182;cid=763;oip=124.198.132.104;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;] imap - ID elapsed=0 (NIO) 2026-05-17 22:33:15,949 INFO [ImapServer-720] [ip=172.16.0.182;oip=124.198.132.104;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=763;] imap - authentication failed for [] (LDAP error: - unable to ldap authenticate: invalid credentials) 2026-05-17 22:33:15,949 INFO [ImapServer-720] [ip=172.16.0.182;oip=124.198.132.104;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=763;] account - Error occurred during authentication: authentication failed for []. Reason: LDAP error: - unable to ldap a show less	Brute-Force
🇪🇸 el-brujo	2026-05-12 04:55:20 (1 month ago)	Cloudflare WAF: Request Path: /login/ Request Query: ?login_only=1 Host: foro.elhacker.net:2087 user ... show more Cloudflare WAF: Request Path: /login/ Request Query: ?login_only=1 Host: foro.elhacker.net:2087 userAgent: python-requests/2.33.1 Action: block Source: firewallManaged ASN Description: 1337 Services GmbH Country: US Method: POST Timestamp: 2026-05-12T04:55:20Z ruleId: 8e361ee4328f4a3caf6caf3e664ed6fe. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇮🇩 sockominfo	2026-05-11 11:00:50 (1 month ago)	Suspicious user agent detected Python/3.12 aiohttp/3.13.5. Threat Score: 3.7/10 (LOW). Confidence: 3 ... show more Suspicious user agent detected Python/3.12 aiohttp/3.13.5. Threat Score: 3.7/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-11 10:00:49 (1 month ago)	Suspicious user agent detected Python/3.12 aiohttp/3.13.5. Threat Score: 3.8/10 (LOW). Confidence: 3 ... show more Suspicious user agent detected Python/3.12 aiohttp/3.13.5. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-11 09:00:12 (1 month ago)	Suspicious user agent detected Python/3.12 aiohttp/3.13.5. Threat Score: 0/10 (INFORMATIONAL). Repor ... show more Suspicious user agent detected Python/3.12 aiohttp/3.13.5. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇪🇸 el-brujo	2026-05-04 15:30:01 (1 month ago)	Cloudflare WAF: Request Path: / Request Query: Host: foro.elhacker.net:2086 userAgent: python-reque ... show more Cloudflare WAF: Request Path: / Request Query: Host: foro.elhacker.net:2086 userAgent: python-requests/2.33.1 Action: block Source: firewallManaged ASN Description: 1337 Services GmbH Country: US Method: GET Timestamp: 2026-05-04T15:30:01Z ruleId: 8e361ee4328f4a3caf6caf3e664ed6fe. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇹🇷 baku.hosting	2026-05-03 11:37:30 (1 month ago)	CSF Auto Report: (cpanel) Failed cPanel login from 124.198.132.104 (US/United States/-): 4 in the la ... show more CSF Auto Report: (cpanel) Failed cPanel login from 124.198.132.104 (US/United States/-): 4 in the last 3600 secs show less	Brute-Force Web App Attack
🇨🇦 1gz	2026-03-08 17:58:22 (3 months ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: //wp-config.php UA: Go-http-client/1.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 saudetski	2026-03-03 02:08:09 (3 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-03-02 01:27:05 (3 months ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
Anonymous	2026-03-02 01:05:10 (3 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇺🇸 Cyber Crusader	2025-05-31 13:37:48 (1 year ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇺🇸 Allan Hitchmoth	2025-05-30 09:59:00 (1 year ago)	124.198.132.104-124.198.132.112 - Persistent login attempts.	Hacking Brute-Force

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.223.183.182

🇨🇦 216.26.250.221

🇦🇺 203.219.208.30

🇬🇧 195.206.182.214

🇷🇺 188.233.74.197

🇧🇷 177.7.30.146

🇰🇷 175.213.137.209

🇧🇼 168.167.228.123

🇹🇭 159.192.132.36

🇳🇵 118.91.162.146

🇨🇳 112.49.138.247

🇨🇦 104.207.60.160

🇺🇸 65.49.1.18

🇮🇩 43.157.224.34

🇧🇷 20.226.3.20

🇺🇸 20.163.15.206

🇰🇷 220.124.253.58

🇺🇸 216.218.206.75

🇳🇱 195.178.110.232

🇸🇻 190.242.162.99