JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 123.160.235.133

123.160.235.133 was found in our database!

This IP was reported 90 times. Confidence of Abuse is 37%: ?

37%

ISP	CHINANET henan province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	hntele.com
Country	🇨🇳 China
City	Zhengzhou, Henan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 123.160.235.133

Whois 123.160.235.133

IP Abuse Reports for 123.160.235.133:

This IP address has been reported a total of 90 times from 24 distinct sources. 123.160.235.133 was first reported on March 18th 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇳 Public CSIRT/CC of Mongolia	2026-07-15 02:07:03 (1 day ago)	Honeypot hit: Empty payload (likely service probe); 2161 [1] TCP	Port Scan
🇦🇹 centurion	2026-07-05 02:58:47 (1 week ago)	Blocked by UFW on ns03 [44818/tcp] Source port: 55843 TTL: 237 Packet length: 44 TOS: 0x00 This rep ... show more Blocked by UFW on ns03 [44818/tcp] Source port: 55843 TTL: 237 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-07-05 02:09:54 (1 week ago)	Honeypot hit: Empty payload (likely service probe); 50000 [1] TCP Reported by: https://github.com/se ... show more Honeypot hit: Empty payload (likely service probe); 50000 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇳🇱 donarev419	2026-07-05 01:39:25 (1 week ago)	Connection to port 10006 with data transfer. Data preview: USER anonymous	Port Scan Hacking
🇺🇸 Axel	2026-07-02 11:52:29 (1 week ago)	Blocked by UFW on LAXHH [5000/tcp] \| SPT: 27364 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [5000/tcp] \| SPT: 27364 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-06 01:19:08 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 123.160.235.133 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 123.160.235.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 21:19:01.308598 2026] [security2:error] [pid 28320:tid 28320] [client 123.160.235.133:45313] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|ramseysgalleryofstuff.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "ramseysgalleryofstuff.com"] [uri "/"] [unique_id "aiN1hW-lbSjXELIEF_S1zgAAAAc"], referer: http://ramseysgalleryofstuff.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-02 21:01:15 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 123.160.235.133 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 123.160.235.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 17:01:07.731345 2026] [security2:error] [pid 19563:tid 19563] [client 123.160.235.133:57110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|coyotepoet.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "coyotepoet.com"] [uri "/"] [unique_id "ah9Ek5aNZj_VARQQjn8ZLAAAABE"], referer: http://coyotepoet.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-01 19:43:38 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 123.160.235.133 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 123.160.235.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 15:43:32.349388 2026] [security2:error] [pid 6362:tid 6362] [client 123.160.235.133:4148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|2ezgroup.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "2ezgroup.com"] [uri "/"] [unique_id "ah3g5ONFOKLRDeKuWmMgBAAAAAA"], referer: http://2ezgroup.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 security.rdmc.fr	2026-03-10 08:01:54 (4 months ago)	Port Scan Attack proto:UDP src:30405 dst:5061	Port Scan
🇨🇳 ThreatBook.io	2026-02-11 23:23:47 (5 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/123.160.235.133	SSH
Anonymous	2026-01-20 14:50:03 (5 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇩🇪 centurion	2026-01-01 00:41:54 (6 months ago)	Blocked by UFW on ns02 [12350/tcp] Source port: 19671 TTL: 237 Packet length: 44 TOS: 0x00 This rep ... show more Blocked by UFW on ns02 [12350/tcp] Source port: 19671 TTL: 237 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2025-11-03 21:28:29 (8 months ago)	tcp/50996 (3 or more attempts)	Port Scan
🇺🇸 MPL	2025-10-18 00:55:03 (8 months ago)	tcp/505	Port Scan
🇺🇸 MPL	2025-10-18 00:55:03 (8 months ago)	tcp/505 (2 or more attempts)	Port Scan

Showing 1 to 15 of 90 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 207.175.129.235

🇧🇷 205.210.31.252

🇦🇷 181.164.12.188

🇸🇬 168.144.101.72

🇩🇪 151.243.150.222

🇨🇳 125.93.252.89

🇫🇷 91.231.89.108

🇦🇺 89.184.200.46

🇧🇬 79.124.62.126

🇳🇱 45.148.10.240

🇹🇿 41.59.202.241

🇮🇩 36.81.79.184

🇧🇪 34.78.255.113

🇨🇳 14.103.91.55

10.186.59.1

🇨🇳 220.184.123.60

🇺🇸 205.210.31.58

🇦🇷 200.107.230.4

🇧🇷 200.11.122.192

🇹🇼 198.235.24.80