JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 124.198.132.207

124.198.132.207 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 53%: ?

53%

ISP	1337 Services GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210558
Hostname(s)	124.198.132.207.powered.by.rdp.sh
Domain Name	as210558.net
Country	🇺🇸 United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 124.198.132.207

Whois 124.198.132.207

IP Abuse Reports for 124.198.132.207:

This IP address has been reported a total of 23 times from 14 distinct sources. 124.198.132.207 was first reported on June 11th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 wupinyin	2026-06-12 18:08:30 (2 weeks ago)	CrowdSec ban: ET DROP Spamhaus DROP Listed Traffic Inbound group 26	Port Scan Hacking
🇸🇬 securejdprop	2026-06-12 18:03:14 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 26). Ip 124.198.132.207 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-06-12 18:03:13.167948091 +0000 UTC show less	Hacking Web App Attack
🇺🇸 MPL	2026-06-12 17:58:31 (2 weeks ago)	tcp/80 (18 or more attempts)	Port Scan
🇺🇸 MPL	2026-06-12 17:49:44 (2 weeks ago)	tcp/80 (33 or more attempts)	Port Scan
🇺🇸 Axel	2026-06-12 13:40:04 (2 weeks ago)	Blocked by UFW on LAXHH [80/tcp] \| SPT: 51595 \| TTL: 244 \| LEN: 40 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on LAXHH [80/tcp] \| SPT: 51595 \| TTL: 244 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-12 08:16:08 (2 weeks ago)	Blocked by UFW (TCP on 80) Source port: 50005 TTL: 240 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 50005 TTL: 240 Packet length: 40 TOS: 0x08 This report (for 124.198.132.207) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇸🇬 securejdprop	2026-06-12 08:06:52 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 26). Ip 124.198.132.207 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-06-12 08:06:50.904191216 +0000 UTC show less	Hacking Web App Attack
🇳🇱 tmiland	2026-06-12 05:17:00 (2 weeks ago)	(nginx_404) Dot directory Honeypot Trap 124.198.132.207 (US/United States/124.198.132.207.powered.by ... show more (nginx_404) Dot directory Honeypot Trap 124.198.132.207 (US/United States/124.198.132.207.powered.by.rdp.sh): 2 in the last 3600 secs; IP: 124.198.132.207; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 124.198.132.207 - - [12/Jun/2026:07:16:54 +0200] "GET /.env HTTP/1.1" 404 2992 "-" "python-requests/2.32.3" 124.198.132.207 - - [12/Jun/2026:07:16:55 +0200] "GET /.env.example HTTP/1.1" 404 2992 "-" "python-requests/2.32.3" show less	Brute-Force
🇺🇸 nyt	2026-06-12 04:57:19 (2 weeks ago)	Sensitive File Probe	Web App Attack
🇫🇮 oh.mg	2026-06-12 04:43:56 (2 weeks ago)	[Fri Jun 12 06:43:55.162865 2026] [security2:error] [pid 2636521:tid 2636524] [client 124.198.132.20 ... show more [Fri Jun 12 06:43:55.162865 2026] [security2:error] [pid 2636521:tid 2636524] [client 124.198.132.207:57513] [client 124.198.132.207] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "95.216.72.247"] [uri "/.env"] [unique_id "aiuOiyc-dKond-QnDCHl_gAAAME"] [Fri Jun 12 06:43:55.403048 2026] [security2:error] [pid 2636521:tid 2636523] [client 124.198.132.207:57615] [client 124.198.132.207] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.10.0-dev" ... show less	Web App Attack Bad Web Bot
🇮🇩 penjaga BRIN	2026-06-12 04:34:11 (2 weeks ago)	Suspicious malicious activity	Hacking
🇺🇸 LotPhantom	2026-06-12 02:46:40 (2 weeks ago)	124.198.132.207 - - [12/Jun/2026:02:45:40 +0000] "GET /.env HTTP/1.1" 404 146 "-" "python-requests/2 ... show more 124.198.132.207 - - [12/Jun/2026:02:45:40 +0000] "GET /.env HTTP/1.1" 404 146 "-" "python-requests/2.32.3" "0" ... show less	Web App Attack
🇺🇸 Starburst SysOp Team	2026-06-12 02:25:34 (2 weeks ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-iad5-2)	Hacking Bad Web Bot
🇫🇮 inlink.ltd	2026-06-12 02:12:39 (2 weeks ago)	dot file probe	Web App Attack
🇸🇬 securejdprop	2026-06-12 01:35:08 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 26). Ip 124.198.132.207 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-06-12 01:35:07.468924447 +0000 UTC show less	Hacking Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇪 213.111.190.84

🇺🇸 200.10.45.84

🇮🇳 182.71.135.110

🇭🇰 103.56.114.222

🇷🇴 92.118.39.77

🇷🇴 80.94.92.55

🇭🇰 43.129.168.36

🇻🇳 14.177.234.24

🇺🇸 3.134.82.204

🇧🇷 189.56.195.78

🇹🇷 185.153.231.44

🇧🇷 179.185.18.67

🇹🇭 118.194.251.17

🇨🇦 85.217.149.25

🇵🇱 31.41.84.98

🇯🇵 20.210.155.85

🇭🇰 20.205.96.99

🇺🇸 20.65.194.80

🇬🇧 193.163.125.238

🇹🇼 114.45.55.135