JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 124.220.80.248

124.220.80.248 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 20%: ?

20%

ISP	Tencent cloud computing (Beijing) Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45090
Domain Name	tencentcloud.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 124.220.80.248

Whois 124.220.80.248

IP Abuse Reports for 124.220.80.248:

This IP address has been reported a total of 8 times from 5 distinct sources. 124.220.80.248 was first reported on July 16th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 d qz	2026-07-28 00:05:59 (3 weeks ago)	2026-07-28T08:05:55.775457+08:00 VM-0-4-ubuntu sshd[1245644]: pam_unix(sshd:auth): authentication fa ... show more 2026-07-28T08:05:55.775457+08:00 VM-0-4-ubuntu sshd[1245644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.220.80.248 2026-07-28T08:05:57.962727+08:00 VM-0-4-ubuntu sshd[1245644]: Failed password for invalid user fdrusers from 124.220.80.248 port 32162 ssh2 ... show less	Brute-Force SSH
🇨🇳 さいとうあすか	2026-07-26 09:01:03 (3 weeks ago)	Jul 26 17:01:02 pbs sshd[856637]: Invalid user admin from 124.220.80.248 port 37363 ...	Brute-Force SSH
🇳🇱 homeshowdomain.nl	2026-07-17 22:03:54 (1 month ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-16. show less	Web App Attack SSH Hacking
🇳🇱 homeshowdomain.nl	2026-07-16 22:02:15 (1 month ago)	Auto-ban: >3000 req/min op 2026-07-16	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-16 16:47:32 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 124.220.80.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 124.220.80.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 12:43:37.884735 2026] [security2:error] [pid 18111:tid 18111] [client 124.220.80.248:1544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.pnwintl.com"] [uri "/.env.prod"] [unique_id "alkKOSOO9lHLARshZugn3AAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-16 16:20:02 (1 month ago)	\| [Dangerous/China] Aggressive IP 124.220.80.248 (~30 hits). Type: DoS Defender- Web server 400 erro ... show more \| [Dangerous/China] Aggressive IP 124.220.80.248 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇺🇸 TPI-Abuse	2026-07-16 16:11:50 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 124.220.80.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 124.220.80.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 12:11:44.930987 2026] [security2:error] [pid 15771:tid 15771] [client 124.220.80.248:33905] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stevensalsberg.com.salsberggroup.com"] [uri "/.env.production.local"] [unique_id "alkCwCJ2OkSRa25uBt6SzwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 15:56:14 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 124.220.80.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 124.220.80.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 11:55:14.827964 2026] [security2:error] [pid 4039:tid 4049] [client 124.220.80.248:31052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "behaviorhealth.org"] [uri "/.env.dev"] [unique_id "alj-4owMp0-V_8WfygvrEQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a01:4f8:150:13a5::100:2d

🇨🇱 200.83.216.110

🇷🇺 109.169.221.39

🇺🇸 54.226.74.194

🇺🇸 216.25.89.92

🇱🇹 213.176.26.62

🇹🇼 198.235.24.71

🇨🇬 197.157.252.162

🇨🇳 120.48.50.133

🇬🇧 35.203.210.153

🇬🇧 2a06:4880:2000::26

🇳🇱 193.47.62.69

🇧🇷 179.107.209.119

🇩🇪 167.94.146.36

🇲🇾 161.142.144.231

🇵🇰 153.117.9.93

🇧🇷 138.97.186.20

🇧🇷 128.201.24.134

🇩🇪 92.208.38.200

🇺🇸 43.135.149.69