JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

124.198.132.167

Neutral Activity

Abuse confidence score ?

0% Low Risk

24 reports

14 reporters · latest 8 months ago

ISP	1337 Services GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210558
Domain Name	as210558.net
Country	🇺🇸 United States of America
City	New York City, New York

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

124.198.132.167 has been reported 24 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 124.198.132.167

Export CSV

This IP address has been reported a total of 24 times from 14 distinct sources. 124.198.132.167 was first reported on January 22nd 2026, and the most recent report was 8 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 Burayot	2026-02-15 10:50:20 (8 months ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 124.198.132.167 (US/United States/-) ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 124.198.132.167 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 07:19:59 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 124.198.132.167 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 124.198.132.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 02:19:53.802171 2026] [security2:error] [pid 21802:tid 21802] [client 124.198.132.167:50608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "esendeniz.net"] [uri "/.env.production"] [unique_id "aZFzmbuSBhPDkz0AG98gNQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 04:35:26 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 124.198.132.167 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 124.198.132.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 23:35:09.811231 2026] [security2:error] [pid 3629:tid 3629] [client 124.198.132.167:39822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "freightmotivity.com"] [uri "/.env"] [unique_id "aZFM_cerAUlMUmplorkvBAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 02:34:06 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 124.198.132.167 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 124.198.132.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 21:33:48.758285 2026] [security2:error] [pid 25702:tid 25702] [client 124.198.132.167:40144] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|scc1.us\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "scc1.us"] [uri "/gsrv1/storage/logs/laravel.log"] [unique_id "aZEwjHSoeMURpSuTLv-s0gAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-14 22:21:39 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 124.198.132.167 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 124.198.132.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 17:21:24.360530 2026] [security2:error] [pid 32300:tid 32300] [client 124.198.132.167:37884] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "humans2humans.org"] [uri "/.env"] [unique_id "aZD1ZKAtK3brACkJnlC8vwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-02-13 05:58:18 (8 months ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 124.198.132.167 (US/United States/-) ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 124.198.132.167 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
🇫🇮 kumiko	2026-02-12 07:49:50 (8 months ago)	[2026-02-12 09:49:50] Probing for dotfiles "GET /.env HTTP/1.1" 301	Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-02-12 07:38:16 (8 months ago)	LF_APACHE_403: 124.198.132.167 (US/United States/-), more than 20 Apache 403 hits in the last 3600 s ... show more LF_APACHE_403: 124.198.132.167 (US/United States/-), more than 20 Apache 403 hits in the last 3600 secs show less	Web App Attack
🇩🇪 MusicLibrary	2026-02-12 06:36:12 (8 months ago)	Attempted access to sensitive configuration files (.env, .git, etc.)	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-12 05:41:18 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 124.198.132.167 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 124.198.132.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 00:41:03.053658 2026] [security2:error] [pid 7017:tid 7093] [client 124.198.132.167:43978] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "maritimeclinic.net"] [uri "/.env"] [unique_id "aY1n70FMDYtwVb6qd-XDfAAAAQA"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-02-12 02:10:25 (8 months ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 124.198.132.167 (US/United States/-) ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 124.198.132.167 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
Anonymous	2026-02-12 01:31:02 (8 months ago)	Bot / scanning and/or hacking attempts: GET /index.php HTTP/1.1, GET /.env HTTP/1.1, GET /login HTTP ... show more Bot / scanning and/or hacking attempts: GET /index.php HTTP/1.1, GET /.env HTTP/1.1, GET /login HTTP/1.1, GET /.env.old HTTP/1.1, GET / HTTP/1.1, GET /.env.bak HTTP/1.1, GET /storage/ HTTP/1.1, GET /composer.json HTTP/1.1, GET /storage/logs/laravel.log HTTP/1.1, GET /_ignition/health-check HTTP/1.1, GET /artisan HTTP/1.1, GET /storage/app/public/ HTTP/1.1, GET /admin/.env HTTP/1.1 show less	Hacking Web App Attack
🇧🇪 madeit	2026-02-11 19:24:41 (8 months ago)		Web App Attack
Anonymous	2026-02-07 14:29:08 (8 months ago)	Aggressive web scan	Web App Attack
🇬🇧 rori.rapidtravelgroup.com	2026-02-06 16:04:57 (8 months ago)	Fail2Ban+ban+on+nginx-botsearch	Brute-Force Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.118.173.234

🇪🇬 197.35.175.104

🇨🇦 143.105.199.103

🇧🇷 129.121.48.164

🇰🇷 112.220.250.20

🇨🇳 111.45.2.8

🇿🇦 102.209.22.205

🇳🇱 95.85.226.199

🇷🇺 91.234.172.140

🇺🇸 73.93.207.215

🇨🇦 50.6.241.208

🇺🇸 34.75.162.180

🇺🇸 20.119.106.5

🇹🇷 2.27.91.173

🇮🇳 223.227.86.123

🇲🇽 189.203.163.10

🇵🇾 181.126.206.26

🇭🇰 152.32.168.34

🇫🇷 146.70.194.220

🇺🇸 136.67.92.197