JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 123.115.180.136

123.115.180.136 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 34%: ?

34%

ISP	China Unicom Beijing province network
Usage Type	Fixed Line ISP
ASN	AS4808
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 123.115.180.136

Whois 123.115.180.136

IP Abuse Reports for 123.115.180.136:

This IP address has been reported a total of 5 times from 5 distinct sources. 123.115.180.136 was first reported on August 11th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 xavier-momain.eu	2026-09-02 16:49:33 (8 hours ago)	CrowdSec: crowdsecurity/ssh-bf \| Port: 22 \| Attempts: 4 \| First: 2026-09-02 16:49:01 +0000 UTC \| Las ... show more CrowdSec: crowdsecurity/ssh-bf \| Port: 22 \| Attempts: 4 \| First: 2026-09-02 16:49:01 +0000 UTC \| Last: 2026-09-02 16:49:05 +0000 UTC show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-09-02 01:08:29 (23 hours ago)	(mod_security) mod_security (id:210831) triggered by 123.115.180.136 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 123.115.180.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 21:08:25.425920 2026] [security2:error] [pid 13447:tid 13447] [client 123.115.180.136:44458] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/webalizer/"] [unique_id "apd3CcGyXxoVOKtC_FIznAAAAB4"], referer: http://backstore.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 xveil	2026-08-31 06:11:25 (2 days ago)	2026-08-31T13:11:23.043935 mail-honeypot postfix/submission/smtpd[17609]: warning: unknown[123.115.1 ... show more 2026-08-31T13:11:23.043935 mail-honeypot postfix/submission/smtpd[17609]: warning: unknown[123.115.180.136]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇮🇹 VHosting	2026-08-28 16:15:04 (5 days ago)	Detected mail brute force attack from different servers	Brute-Force
Anonymous	2026-08-11 08:50:05 (3 weeks ago)	\| [Dangerous/China] Aggressive IP 123.115.180.136 (~30 hits). Type: DoS Defender- Web server 400 err ... show more \| [Dangerous/China] Aggressive IP 123.115.180.136 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 194.164.107.4

🇺🇦 194.60.254.70

🇻🇳 160.191.237.126

🇺🇸 138.68.243.18

🇧🇷 131.72.94.30

🇺🇸 72.63.29.20

🇺🇸 64.62.197.183

🇺🇸 45.17.39.120

🇺🇸 40.124.114.47

🇧🇪 198.235.24.146

🇺🇸 195.184.76.66

🇳🇱 192.253.248.226

🇳🇱 185.224.128.16

🇺🇸 185.180.141.45

🇺🇸 185.180.141.44

🇧🇷 179.144.43.146

🇧🇷 179.63.161.163

🇧🇷 177.125.115.205

🇨🇻 156.232.58.127

🇺🇸 147.185.132.204