JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

124.198.132.59

Neutral Activity

Abuse confidence score ?

0% Low Risk

25 reports

14 reporters · latest 3 months ago

ISP	1337 Services GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210558
Hostname(s)	124.198.132.59.powered.by.rdp.sh
Domain Name	as210558.net
Country	🇺🇸 United States of America
City	New York City, New York

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

124.198.132.59 has been reported 25 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 124.198.132.59

Export CSV

This IP address has been reported a total of 25 times from 14 distinct sources. 124.198.132.59 was first reported on July 8th 2025, and the most recent report was 3 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 David Koswari	2026-06-29 05:35:00 (3 months ago)	REQ_BLOCKED_SECURITY	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇳🇱 Site.eu	2026-06-26 23:26:02 (4 months ago)	Excessive 404/403 errors	Brute-Force
🇳🇱 Site.eu	2026-06-22 20:45:14 (4 months ago)	Excessive 404/403 errors	Brute-Force
🇫🇷 Octopuce	2026-06-22 20:18:36 (4 months ago)	Aggressive web search of vulnerable pages: /wp-content/themes/haha.php /wp-content/themes/theme/abou ... show more Aggressive web search of vulnerable pages: /wp-content/themes/haha.php /wp-content/themes/theme/about.php /wp-content/plugins/plugin/index.php ... show less	Web App Attack
🇳🇿 Antinson	2026-06-19 13:49:34 (4 months ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇧🇪 cmbplf	2026-06-12 01:42:52 (4 months ago)	50 requests with url.path /indoxploit.php	Brute-Force Bad Web Bot
🇳🇱 Site.eu	2026-06-11 21:50:16 (4 months ago)	Excessive 404/403 errors	Brute-Force
Anonymous	2026-06-11 18:26:08 (4 months ago)	124.198.132.59 - - [11/Jun/2026:20:25:35 +0200] "GET /wp-content/index.php?x=ooo HTTP/1.1" 404 1944 ... show more 124.198.132.59 - - [11/Jun/2026:20:25:35 +0200] "GET /wp-content/index.php?x=ooo HTTP/1.1" 404 1944 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 124.198.132.59 - - [11/Jun/2026:20:25:35 +0200] "GET /wp-content/index.php?x=ooo HTTP/1.1" 404 617 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 124.198.132.59 - - [11/Jun/2026:20:25:39 +0200] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 1944 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 124.198.132.59 - - [11/Jun/2026:20:25:39 +0200] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 617 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chr ... show less	Brute-Force Web App Attack
Anonymous	2026-06-11 17:58:08 (4 months ago)	(mod_security) mod_security triggered on hostname [redacted] 124.198.132.59 (US/United States/124.19 ... show more (mod_security) mod_security triggered on hostname [redacted] 124.198.132.59 (US/United States/124.198.132.59.powered.by.rdp.sh) show less	SQL Injection
🇳🇱 Site.eu	2026-06-05 05:49:36 (4 months ago)	Excessive 404/403 errors	Brute-Force
🇩🇪 ecs.ge	2026-06-03 07:11:02 (4 months ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇩🇪 ecs.ge	2026-06-02 05:23:31 (4 months ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇳🇱 CryptoYakari	2025-09-25 02:55:50 (1 year ago)	124.198.132.59 - - [25/Sep/2025:05:55:40 +0300] "GET /madspot.php HTTP/1.0" 404 530 "-" "Mozilla/5.0 ... show more 124.198.132.59 - - [25/Sep/2025:05:55:40 +0300] "GET /madspot.php HTTP/1.0" 404 530 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 124.198.132.59 - - [25/Sep/2025:05:55:41 +0300] "GET /mad.php HTTP/1.0" 404 530 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 124.198.132.59 - - [25/Sep/2025:05:55:42 +0300] "GET /wp-admin/js/widgets/about.php7 HTTP/1.0" 404 3514 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 124.198.132.59 - - [25/Sep/2025:05:55:44 +0300] "GET /wp-admin/js/widgets/admin.php HTTP/1.0" 404 3514 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 124.198.132.59 - - [25/Sep/2025:05:55:48 +0300] "GET /Njima.php HTTP/1.0" 404 530 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/ ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-11 21:31:30 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 124.198.132.59 (124.198.132.59.powered.by.rdp.s ... show more (mod_security) mod_security (id:210492) triggered by 124.198.132.59 (124.198.132.59.powered.by.rdp.sh): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 11 17:31:26.203814 2025] [security2:error] [pid 28577:tid 28577] [client 124.198.132.59:63665] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pist.org.tr"] [uri "/.env"] [unique_id "aHGCrvTWV0X12143B90vCQAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 CryptoYakari	2025-07-11 21:28:25 (1 year ago)	124.198.132.59 - - [12/Jul/2025:00:28:22 +0300] "GET /a.php HTTP/1.0" 404 4091 "-" "Mozilla/5.0 (Win ... show more 124.198.132.59 - - [12/Jul/2025:00:28:22 +0300] "GET /a.php HTTP/1.0" 404 4091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 124.198.132.59 - - [12/Jul/2025:00:28:22 +0300] "GET /z.php HTTP/1.0" 404 526 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 124.198.132.59 - - [12/Jul/2025:00:28:22 +0300] "GET /e.php HTTP/1.0" 404 526 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 124.198.132.59 - - [12/Jul/2025:00:28:22 +0300] "GET /r.php HTTP/1.0" 404 526 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 124.198.132.59 - - [12/Jul/2025:00:28:22 +0300] "GET /t.php HTTP/1.0" 404 526 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 185.216.145.176

🇰🇷 101.33.66.34

🇳🇱 86.38.187.77

🇸🇪 52.114.227.0

🇹🇼 210.68.105.68

🇷🇼 196.216.81.126

🇺🇸 195.184.76.5

🇳🇱 195.178.110.101

🇪🇸 192.144.2.211

🇧🇬 185.255.212.178

🇭🇰 154.92.19.226

🇭🇰 141.193.153.146

🇧🇷 131.100.242.102

🇧🇪 104.155.8.98

🇮🇳 103.217.83.95

🇷🇺 94.241.219.13

🇮🇳 59.97.21.114

🇺🇸 20.221.74.227

🇺🇸 20.169.84.217

🇩🇪 8.209.78.193