This IP address has been reported a total of
84
times from
42 distinct
sources.
123.253.65.136 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[Tue Oct 20 16:26:51.465301 2026] [php7:error] [pid 3763904:tid 3763904] [client 123.253.65.136:5530 ...
show more[Tue Oct 20 16:26:51.465301 2026] [php7:error] [pid 3763904:tid 3763904] [client 123.253.65.136:55302] script '/var/www/html/www.craccaaltesoro.it/wp-login.php' not found or unable to stat
show less
BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt an ...
show moreBnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives
123.253.65.136 443 - [20/Oct/2026:13:18:49 +0000] "GET [redacted] HTTP/1.1" 410 5246 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:147.0) Gecko/20100101 Firefox/147.0"
show less
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5 ...
show moreRepeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=34&topics%5B3%5D=38&topics%5B4%5D=46&topics%5B5%5D=44 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36")
show less
nfdump top talker: 123.253.65.136 | first seen 2026-10-12 19:53:23.840 | duration 00:00:00.235 | flo ...
show morenfdump top talker: 123.253.65.136 | first seen 2026-10-12 19:53:23.840 | duration 00:00:00.235 | flows=4 | packets=345774 | bytes=246.1 M | pps=1471 | bps=8.4 M | bpp=711 | proto=udp
show less
Not following 301 redirects — wasted requests | method: GET | path: /wp-login.php | ua: Mozilla/5.0 ...
show moreNot following 301 redirects — wasted requests | method: GET | path: /wp-login.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
show less
nfdump top talker: 123.253.65.136 | first seen 2026-10-08 13:21:12.576 | duration 00:00:00.094 | flo ...
show morenfdump top talker: 123.253.65.136 | first seen 2026-10-08 13:21:12.576 | duration 00:00:00.094 | flows=5 | packets=123783 | bytes=92.4 M | pps=1310 | bps=7.8 M | bpp=746 | proto=any
show less
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5 ...
show moreRepeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=39&topics%5B2%5D=32&topics%5B3%5D=65&topics%5B4%5D=50 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36")
show less
HTTP application-layer DoS / botnet traffic from 123.253.65.136: repeated high-cost dynamic page and ...
show moreHTTP application-layer DoS / botnet traffic from 123.253.65.136: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
show less