AbuseIPDB » 124.220.72.104

124.220.72.104 was found in our database!

This IP was reported 67 times. Confidence of Abuse is 32%: ?

32%

ISP	Tencent cloud computing (Beijing) Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45090
Domain Name	tencent.com
Country	China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 124.220.72.104

Whois 124.220.72.104

IP Abuse Reports for 124.220.72.104:

This IP address has been reported a total of 67 times from 34 distinct sources. 124.220.72.104 was first reported on November 10th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
ThreatBook.io	2025-04-23 22:27:35 (2 months ago)	ThreatBook Intelligence: IDC,Exploit more details on https://threatbook.io/ip/124.220.72.104 2 ... show moreThreatBook Intelligence: IDC,Exploit more details on https://threatbook.io/ip/124.220.72.104 2025-04-23 02:57:20 /sql.rar 2025-04-23 02:57:23 /website.rar 2025-04-23 02:57:22 /web.rar 2025-04-23 02:57:21 /wwwroot.rar 2025-04-23 02:57:23 /upload.rar 2025-04-23 02:57:19 /case.sf-dsc.com.rar 2025-04-23 02:57:19 /casesf-dsccom.rar 2025-04-23 02:57:20 /wz.rar 2025-04-23 02:57:21 /index.rar 2025-04-23 02:57:22 /old.rar show less	Web App Attack
ThreatBook.io	2025-04-22 22:25:15 (2 months ago)	ThreatBook Intelligence: IDC,Exploit more details on https://threatbook.io/ip/124.220.72.104 2 ... show moreThreatBook Intelligence: IDC,Exploit more details on https://threatbook.io/ip/124.220.72.104 2025-04-22 16:33:41 /wwwroot.rar 2025-04-22 16:33:40 /sql.rar 2025-04-22 16:33:42 /old.rar 2025-04-22 16:33:42 /index.rar 2025-04-22 16:33:42 /web.rar 2025-04-22 16:33:40 /wz.rar 2025-04-22 16:33:39 /120.24.75.27.rar 2025-04-22 16:33:40 /120247527.rar 2025-04-22 16:33:43 /upload.rar 2025-04-22 16:33:43 /website.rar show less	Web App Attack
mnsf	2025-04-14 18:05:22 (2 months ago)	Too many Status 50X (12)	Brute-Force Web App Attack
rtbh.com.tr	2025-04-09 20:06:00 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
WebServ	2025-04-02 19:12:24 (3 months ago)	2025-04-02T19:12:00.667961+00:00 new-vm kernel: [1373434.341129] [UFW BLOCK] IN=eth0 OUT= MAC=c6:1a: ... show more2025-04-02T19:12:00.667961+00:00 new-vm kernel: [1373434.341129] [UFW BLOCK] IN=eth0 OUT= MAC=c6:1a:30:11:c3:71:fe:00:00:00:01:01:08:00 SRC=124.220.72.104 DST=178.62.105.126 LEN=52 TOS=0x00 PREC=0x00 TTL=106 ID=29667 DF PROTO=TCP SPT=56827 DPT=8081 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 2025-04-02T19:12:00.669041+00:00 new-vm kernel: [1373434.342225] [UFW BLOCK] IN=eth0 OUT= MAC=c6:1a:30:11:c3:71:fe:00:00:00:01:01:08:00 SRC=124.220.72.104 DST=178.62.105.126 LEN=52 TOS=0x00 PREC=0x00 TTL=106 ID=29668 DF PROTO=TCP SPT=56829 DPT=8085 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 2025-04-02T19:12:03.668803+00:00 new-vm kernel: [1373437.341943] [UFW BLOCK] IN=eth0 OUT= MAC=c6:1a:30:11:c3:71:fe:00:00:00:01:01:08:00 SRC=124.220.72.104 DST=178.62.105.126 LEN=52 TOS=0x00 PREC=0x00 TTL=106 ID=29670 DF PROTO=TCP SPT=56827 DPT=8081 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 2025-04-02T19:12:03.669082+00:00 new-vm kernel: [1373437.342218] [UFW BLOCK] IN=eth0 OUT= MAC=c6:1a:30:11:c3:71:fe:00:00:00:01:01: ... show less	Brute-Force
drewf.ink	2025-04-02 08:05:35 (3 months ago)	[08:05] Port scanning. Port(s) scanned: TCP/8088	Port Scan
ThreatBook.io	2025-03-17 22:36:22 (3 months ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/124.220.72.104<br / ... show moreThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/124.220.72.104 2025-03-17 01:05:10 / show less	Web App Attack
cmbplf	2025-02-19 06:01:43 (4 months ago)	4.815 HEAD requests in 1 hour (1w1d2h)	Brute-Force Bad Web Bot
paulshipley.com.au	2025-02-09 07:22:07 (5 months ago)	stkildashule.org.au:443 124.220.72.104 - - [09/Feb/2025:18:22:01 +1100] "HEAD /www.stkildashule.org. ... show morestkildashule.org.au:443 124.220.72.104 - - [09/Feb/2025:18:22:01 +1100] "HEAD /www.stkildashule.org.au.rar HTTP/1.1" 404 3744 "-" "python-requests/2.31.0" stkildashule.org.au:443 124.220.72.104 - - [09/Feb/2025:18:22:02 +1100] "HEAD /wwwstkildashuleorgau.rar HTTP/1.1" 404 619 "-" "python-requests/2.31.0" stkildashule.org.au:443 124.220.72.104 - - [09/Feb/2025:18:22:02 +1100] "HEAD /wz.rar HTTP/1.1" 404 619 "-" "python-requests/2.31.0" stkildashule.org.au:443 124.220.72.104 - - [09/Feb/2025:18:22:03 +1100] "HEAD /sql.rar HTTP/1.1" 404 619 "-" "python-requests/2.31.0" stkildashule.org.au:443 124.220.72.104 - - [09/Feb/2025:18:22:03 +1100] "HEAD /wwwroot.rar HTTP/1.1" 404 619 "-" "python-requests/2.31.0" stkildashule.org.au:443 124.220.72.104 - - [09/Feb/2025:18:22:04 +1100] "HEAD /index.rar HTTP/1.1" 404 619 "-" "python-requests/2.31.0" stkildashule.org.au:443 124.220.72.104 - - [09/Feb/2025:18:22:04 +1100] "HEAD /old.rar HTTP/1.1" 404 619 "-" "python-requests/2.31.0" stkildashule.org.au ... show less	Web App Attack
paulshipley.com.au	2025-02-09 05:21:04 (5 months ago)	stkildashule.org.au:443 124.220.72.104 - - [09/Feb/2025:16:20:57 +1100] "HEAD /kildashule.org.au.rar ... show morestkildashule.org.au:443 124.220.72.104 - - [09/Feb/2025:16:20:57 +1100] "HEAD /kildashule.org.au.rar HTTP/1.1" 404 3740 "-" "python-requests/2.31.0" stkildashule.org.au:443 124.220.72.104 - - [09/Feb/2025:16:20:58 +1100] "HEAD /kildashuleorgau.rar HTTP/1.1" 404 615 "-" "python-requests/2.31.0" stkildashule.org.au:443 124.220.72.104 - - [09/Feb/2025:16:20:59 +1100] "HEAD /wz.rar HTTP/1.1" 404 615 "-" "python-requests/2.31.0" stkildashule.org.au:443 124.220.72.104 - - [09/Feb/2025:16:20:59 +1100] "HEAD /sql.rar HTTP/1.1" 404 615 "-" "python-requests/2.31.0" stkildashule.org.au:443 124.220.72.104 - - [09/Feb/2025:16:21:00 +1100] "HEAD /wwwroot.rar HTTP/1.1" 404 615 "-" "python-requests/2.31.0" stkildashule.org.au:443 124.220.72.104 - - [09/Feb/2025:16:21:01 +1100] "HEAD /index.rar HTTP/1.1" 404 615 "-" "python-requests/2.31.0" stkildashule.org.au:443 124.220.72.104 - - [09/Feb/2025:16:21:01 +1100] "HEAD /old.rar HTTP/1.1" 404 615 "-" "python-requests/2.31.0" stkildashule.org.au:443 124.22 ... show less	Web App Attack
robotstxt	2025-02-07 22:51:08 (5 months ago)	124.220.72.104 - - [07/Feb/2025:22:43:18 +0000] "HEAD /mail.rar HTTP/1.1" 404 0 "-" rt="0.155" "pyth ... show more124.220.72.104 - - [07/Feb/2025:22:43:18 +0000] "HEAD /mail.rar HTTP/1.1" 404 0 "-" rt="0.155" "python-requests/2.31.0" "-" h="www.blockchainqualifications.com" sn="www.blockchainqualifications.com" ru="/mail.rar" u="/index.php" ucs="-" ua="unix:/var/run/php/blockchainqualifications82.sock" us="404" uct="0.000" urt="0.155" 124.220.72.104 - - [07/Feb/2025:22:43:18 +0000] "HEAD /mail.rar HTTP/1.1" 404 0 "-" "python-requests/2.31.0" "-" 124.220.72.104 - - [07/Feb/2025:22:46:41 +0000] "HEAD /mail.zip HTTP/1.1" 404 0 "-" rt="0.150" "python-requests/2.31.0" "-" h="www.blockchainqualifications.com" sn="www.blockchainqualifications.com" ru="/mail.zip" u="/index.php" ucs="-" ua="unix:/var/run/php/blockchainqualifications82.sock" us="404" uct="0.000" urt="0.151" 124.220.72.104 - - [07/Feb/2025:22:46:41 +0000] "HEAD /mail.zip HTTP/1.1" 404 0 "-" "python-requests/2.31.0" "-" 124.220.72.104 - - [07/Feb/2025:22:50:14 +0000] "HEAD /mail.tar.gz HTTP/1.1" 404 0 "-" rt="0.182" "python-requests/2.31.0" " ... show less	Bad Web Bot
cmbplf	2025-02-06 15:01:51 (5 months ago)	5.672 HEAD requests in 1 hour (1w5d12h)	Brute-Force Bad Web Bot
ThreatBook.io	2025-02-02 22:25:38 (5 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/124.220.72.104 20 ... show moreThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/124.220.72.104 2025-02-02 03:00:27 / show less	Web App Attack
ThreatBook.io	2025-01-31 22:32:34 (5 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/124.220.72.104	SSH
ThreatBook.io	2025-01-26 22:32:29 (5 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/124.220.72.104 20 ... show moreThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/124.220.72.104 2025-01-26 12:52:20 /wz.rar 2025-01-26 12:52:19 /cmbdb.jmtad.com.rar 2025-01-26 12:52:20 /wwwroot.rar 2025-01-26 12:52:21 /old.rar 2025-01-26 12:52:20 /index.rar 2025-01-26 12:52:19 /cmbdbjmtadcom.rar 2025-01-26 12:52:20 /sql.rar show less	Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩