JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 124.198.132.124

124.198.132.124 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 0%: ?

ISP	1337 Services GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210558
Domain Name	as210558.net
Country	🇺🇸 United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 124.198.132.124

Whois 124.198.132.124

IP Abuse Reports for 124.198.132.124:

This IP address has been reported a total of 15 times from 15 distinct sources. 124.198.132.124 was first reported on October 5th 2025, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-11-22 20:48:47 (7 months ago)	(smtpauth) Failed SMTP AUTH login from 124.198.132.124 (US/United States/-): 1 in the last 3600 secs ... show more (smtpauth) Failed SMTP AUTH login from 124.198.132.124 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2025-11-22 12:48:40 plain authenticator failed for ([124.198.132.124]) [124.198.132.124]: 535 Incorrect authentication data ([email protected]) show less	Brute-Force
🇩🇪 netclix.gr	2025-11-22 13:26:59 (7 months ago)	(mysaslmatch) Failed SASL login from 124.198.132.124 (US/United States/-): 2 in the last 4600 secs; ... show more (mysaslmatch) Failed SASL login from 124.198.132.124 (US/United States/-): 2 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: Nov 22 15:26:54 anak postfix/smtpd[2584093]: warning: unknown[124.198.132.124]: SASL PLAIN authentication failed: authentication failure Nov 22 15:26:54 anak postfix/smtpd[2584093]: warning: unknown[124.198.132.124]: SASL LOGIN authentication failed: authentication failure show less	Port Scan
🇫🇷 dynamix	2025-11-22 01:30:37 (7 months ago)	Multiple WAF Violations	Web App Attack
🇨🇿 jaj.cz	2025-11-21 21:00:57 (7 months ago)	Nov 21 22:00:44 mail postfix/smtpd[1454828]: warning: unknown[124.198.132.124]: SASL PLAIN authentic ... show more Nov 21 22:00:44 mail postfix/smtpd[1454828]: warning: unknown[124.198.132.124]: SASL PLAIN authentication failed: Nov 21 22:00:50 mail postfix/smtpd[1454828]: warning: unknown[124.198.132.124]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 21 22:00:57 mail postfix/smtpd[1456232]: warning: unknown[124.198.132.124]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... show less	Brute-Force
🇫🇷 dwmp	2025-11-21 17:04:04 (7 months ago)	Nov 21 18:04:03 webcore postfix/smtpd[2017321]: warning: unknown[124.198.132.124]: SASL CRAM-MD5 aut ... show more Nov 21 18:04:03 webcore postfix/smtpd[2017321]: warning: unknown[124.198.132.124]: SASL CRAM-MD5 authentication failed: authentication failure Nov 21 18:04:03 webcore postfix/smtpd[2017321]: warning: unknown[124.198.132.124]: SASL PLAIN authentication failed: authentication failure Nov 21 18:04:04 webcore postfix/smtpd[2017321]: warning: unknown[124.198.132.124]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇺🇸 agenciahypelab.com.br	2025-11-21 02:16:40 (7 months ago)	WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER	Brute-Force SSH
🇨🇿 lp	2025-11-21 01:21:39 (7 months ago)	Email account brute force: 2 attempts were recorded from 124.198.132.124 2025-11-21T00:49:26+01:00 w ... show more Email account brute force: 2 attempts were recorded from 124.198.132.124 2025-11-21T00:49:26+01:00 warning: unknown[124.198.132.124]: SASL PLAIN authentication failed: authentication failure, [email protected] 2025-11-21T00:49:26+01:00 warning: unknown[124.198.132.124]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇺🇸 TPI-Abuse	2025-11-20 18:53:40 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 124.198.132.124 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 124.198.132.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 20 13:53:34.360173 2025] [security2:error] [pid 24773:tid 24773] [client 124.198.132.124:52992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mitchellamazing.com"] [uri "/.env"] [unique_id "aR9jrvuIxRIBY963eQewYQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-07 18:25:28 (7 months ago)	Infected user bad webscan	Exploited Host
🇳🇿 reddog	2025-10-20 03:34:00 (8 months ago)	word fence	Port Scan Hacking
🇬🇧 Aetherweb Ark	2025-10-07 01:01:19 (8 months ago)	(mod_security) mod_security (id:949110) triggered by 124.198.132.124 (US/United States/-): N in the ... show more (mod_security) mod_security (id:949110) triggered by 124.198.132.124 (US/United States/-): N in the last X secs show less	Web App Attack
🇮🇱 Dolphi	2025-10-07 00:30:03 (8 months ago)	Excessive POST /xmlrpc.php requests	Brute-Force Web App Attack
🇳🇿 Tripwire	2025-10-06 11:43:05 (8 months ago)	Login script scanning - /administrator/manifests/files/joomla.xml	Web App Attack
🇧🇪 cmbplf	2025-10-05 02:21:40 (8 months ago)	24.902 POST requests with url.path /wp-login.php 17.529 requests with url.path /xmlrpc.php	Brute-Force Bad Web Bot
🇮🇹 VHosting	2025-10-05 01:25:04 (8 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 193.36.224.26

🇺🇸 193.36.224.239

🇺🇸 193.36.224.233

🇨🇳 120.236.49.131

🇸🇬 47.79.15.2

🇧🇷 205.210.31.170

🇺🇸 193.36.224.228

🇺🇸 193.36.224.227

🇺🇸 193.36.224.223

🇮🇩 163.227.52.50

🇺🇸 109.105.210.54

🇰🇿 95.56.225.118

🇹🇷 88.236.123.190

🇮🇪 54.195.157.184

🇳🇱 45.148.10.151

🇳🇱 45.148.10.141

🇺🇸 216.25.89.80

🇺🇸 209.126.84.176

🇺🇸 193.36.224.215

🇺🇸 193.36.224.207