JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 123.6.49.13

123.6.49.13 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 67%: ?

67%

ISP	China Unicom Henan province network
Usage Type	Fixed Line ISP
ASN	AS4837
Hostname(s)	hn.kd.ny.adsl
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Zhengzhou, Henan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 123.6.49.13

Whois 123.6.49.13

IP Abuse Reports for 123.6.49.13:

This IP address has been reported a total of 33 times from 19 distinct sources. 123.6.49.13 was first reported on July 10th 2026, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nodepile	2026-09-01 13:29:48 (22 hours ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/fr ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/frontend/Smartwave/porto/en_US/js-translation.json ua='Mozilla/5.0 (Linux; Android 11; CPH2185) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Mobile Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 cwytech	2026-09-01 12:58:23 (22 hours ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-web-high.	Bad Web Bot Web App Attack
🇬🇧 neo101	2026-08-29 19:37:53 (3 days ago)	Secret Hunting & Credential Harvesting: Automated scanner (Nuclei (Secret Hunter)) probed decoy secr ... show more Secret Hunting & Credential Harvesting: Automated scanner (Nuclei (Secret Hunter)) probed decoy secrets path '/.env'. Delivered poisoned decoy AWS credentials (KEY-151: AKIAUE4EELJISH7MYTK2). Active canary forensic tracking. show less	Hacking Web App Attack
🇵🇱 Budyn	2026-08-29 19:03:02 (3 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: telemetry.goblinpot.website \| URI: /.env \| UA: Mozilla/5.0 (Linux; Android 11; CPH2185) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Mobile Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-29 11:56:26 (3 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: auth.astropot.online \| URI: /wp-admin/ \| UA: Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 cwytech	2026-08-28 07:24:34 (5 days ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-web-high.	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-22 10:10:12 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: astropot.site \| URI: /backup.sql \| UA: Mozilla/5.0 (Linux; Android 10; HUAWEI P30 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.105 Mobile Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇷🇺 DZBOT	2026-08-21 02:43:10 (1 week ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇵🇱 Budyn	2026-08-19 22:43:58 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: billing.teddypot.space \| URI: /.env \| UA: Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇨🇦 Anytech	2026-08-18 08:49:59 (2 weeks ago)	Blocked by Conn-Monitor: http-bad-user-agent	Web App Attack Bad Web Bot
🇦🇺 MAGIC	2026-08-17 01:00:14 (2 weeks ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 1gz	2026-08-16 14:41:48 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: CHALLENGE Protocol: HTTP/2 (GET met ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: /script.js UA: Mozilla/5.0 (Linux; Android 10; HUAWEI P30 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.105 Mobile Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇳 primal	2026-08-15 15:24:01 (2 weeks ago)	Automated attack traffic against a WordPress site: automated bot traffic, failed JavaScript challeng ... show more Automated attack traffic against a WordPress site: automated bot traffic, failed JavaScript challenge at CDN edge (2x). Blocked by CDN/WAF/application security layers. Total 2 hits in last 30 days. show less	Bad Web Bot
🇩🇪 Skyrider	2026-08-14 08:30:46 (2 weeks ago)	crowdsecurity/nginx-req-limit-exceeded	DDoS Attack
Anonymous	2026-08-11 17:56:48 (3 weeks ago)	2026-08-11 19:56:48 ERROR util.AccessViolations - 123.6.49.13 report to fail2ban - action: block ...	Hacking Brute-Force Bad Web Bot

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇵 2620:171:24:f004:9999::245

🇺🇸 2602:80d:1007::50

🇧🇬 79.124.62.134

🇮🇳 159.65.148.158

🇨🇴 152.200.205.180

🇦🇺 61.68.77.236

🇷🇺 46.166.86.80

🇪🇬 197.164.226.21

🇺🇸 195.184.76.61

🇦🇷 190.120.247.98

🇦🇴 154.116.254.157

🇬🇧 86.154.215.155

🇫🇷 85.217.140.13

🇷🇺 83.239.84.130

🇭🇰 152.32.254.222

🇰🇷 115.68.226.19

🇸🇬 84.75.155.103

🇫🇷 79.137.76.231

🇺🇸 34.106.26.61

🇺🇸 18.217.87.203