JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.232.131.123

149.232.131.123 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 43%: ?

43%

ISP	Huawei-Cloud-MX
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136907
Domain Name	huawei.com
Country	🇲🇽 Mexico
City	Mexico City, Mexico City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.232.131.123

Whois 149.232.131.123

IP Abuse Reports for 149.232.131.123:

This IP address has been reported a total of 31 times from 21 distinct sources. 149.232.131.123 was first reported on February 19th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 sefinek.net	2026-06-05 19:35:32 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from MX. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from MX. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: /ip \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 afleventoffice.com.au	2026-06-03 08:28:39 (5 days ago)	GET /ip HTTP/1.1	Web App Attack
🇦🇺 MAGIC	2026-05-28 01:07:34 (1 week ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇹 Erpelstolz	2026-05-24 23:19:02 (2 weeks ago)	VM 131: 149.232.131.123 - - [25/May/2026:01:18:51 +0200] "GET /ip HTTP/1.1" 404 8468	Web App Attack
🇦🇺 afleventoffice.com.au	2026-05-24 16:25:47 (2 weeks ago)	GET /ip HTTP/1.1	Web App Attack
🇩🇪 milcraft.nl	2026-05-23 05:44:29 (2 weeks ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
🇨🇿 ptlab	2026-05-16 14:45:43 (3 weeks ago)	Detected wp_login attack from WP-host.	Hacking Web App Attack
🇩🇪 ketovoila.pl	2026-05-13 21:37:05 (3 weeks ago)	ketovoila.pl IP/proxy endpoint probing: hits=1; unique_paths=1; sample_paths=/ip; UA="Mozilla/5.0 (M ... show more ketovoila.pl IP/proxy endpoint probing: hits=1; unique_paths=1; sample_paths=/ip; UA="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36"; window=2026-05-13T21:37:05Z..2026-05-13T21:37:05Z show less	Web App Attack
🇺🇸 nodepile	2026-05-09 22:02:09 (4 weeks ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/fr ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/frontend/Smartwave/porto/en_US/Magento_Ui/templates/modal/modal-slide.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 nodepile	2026-05-05 11:38:01 (1 month ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/fr ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/frontend/Smartwave/porto/en_US/Magento_Ui/templates/modal/modal-slide.html ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 nodepile	2026-05-02 00:36:06 (1 month ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/fr ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/frontend/Smartwave/porto/en_US/Magento_Ui/templates/modal/modal-custom.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 jcbriar	2026-04-29 21:22:14 (1 month ago)	Searching for vulnerable scripts	Hacking Web App Attack
🇺🇸 nodepile	2026-04-28 12:57:14 (1 month ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/fr ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/frontend/Smartwave/porto/en_US/js-translation.json ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇩🇪 ketovoila.pl	2026-04-26 17:01:58 (1 month ago)	ketovoila.pl HONEYPOT traffic: count=1, paths=1; sample_path=ketovoila.pl/ip; UA=Mozilla/5.0 (Macint ... show more ketovoila.pl HONEYPOT traffic: count=1, paths=1; sample_path=ketovoila.pl/ip; UA=Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36; window=2026-04-26T16:38:22Z..2026-04-26T16:38:22Z show less	Port Scan Hacking Brute-Force
Anonymous	2026-04-22 20:56:15 (1 month ago)	Malicious activity detected	Hacking Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 185.137.164.15

🇩🇪 165.227.129.77

🇺🇸 165.22.34.238

🇭🇰 152.32.212.224

🇳🇬 41.242.115.84

🇰🇷 222.107.156.227

🇳🇱 193.176.31.204

🇨🇳 193.112.111.140

🇧🇷 177.54.26.26

🇭🇰 152.32.189.59

🇰🇷 114.202.253.7

🇨🇳 111.179.154.84

🇫🇷 51.178.251.40

🇺🇸 47.89.248.96

🇫🇷 46.105.160.254

🇨🇳 27.11.199.200

🇨🇱 190.46.77.254

🇺🇸 74.115.172.118

🇩🇪 69.5.169.199

🇺🇸 66.228.53.96