AbuseIPDB » 180.149.126.13

180.149.126.13 was found in our database!

This IP was reported 439 times. Confidence of Abuse is 51%: ?

51%

ISP	Shine LLC
Usage Type	Fixed Line ISP
ASN	AS45204
Domain Name	shinelimited.com
Country	Mongolia
City	Ulan Bator, Ulaanbaatar

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 180.149.126.13

Whois 180.149.126.13

IP Abuse Reports for 180.149.126.13:

This IP address has been reported a total of 439 times from 79 distinct sources. 180.149.126.13 was first reported on December 6th 2020, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-11-04 21:00:18 (2 months ago)	botnet	DDoS Attack
WhiteFireOCN1	2024-11-04 19:02:40 (2 months ago)	1 unauthorized connection attempt to port 80 HTTP GET to / from 180[.]149[.]126[.]13:55465 - 2 ... show more1 unauthorized connection attempt to port 80 HTTP GET to / from 180[.]149[.]126[.]13:55465 - 2024-11-04T18:59:25 show less	Port Scan
begou.dev	2024-11-04 12:45:22 (2 months ago)	[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/2095	Port Scan
geot	2024-11-03 13:22:43 (2 months ago)	GET /c/ HTTP/1.1	Hacking Web App Attack
Mark Marks	2024-11-02 13:16:02 (2 months ago)	Unauthorized connection attempt detected port 8080	Hacking
Anonymous	2024-11-02 12:41:57 (2 months ago)	Tried our host z.	Port Scan Hacking Exploited Host
webbfabriken	2024-11-02 08:26:42 (2 months ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by ... show morespam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabriken Security API - WFSecAPI show less	Web Spam
PulseServers	2024-11-02 08:05:10 (2 months ago)	Probing a honeypot for vulnerabilities. Ignored robots.txt - US10 Honeypot ...	Hacking Web App Attack
Soapy7261	2024-11-02 08:05:03 (2 months ago)	HTTP Method: GET \| Tried to access: /c/ --- This report is automated ---	Brute-Force Web App Attack
stvnrdg.me	2024-10-29 22:46:19 (2 months ago)	180.149.126.13 - - [29/Oct/2024:22:46:18 +0000] "GET /stalker_portal/server/tools/auth_simple.php HT ... show more180.149.126.13 - - [29/Oct/2024:22:46:18 +0000] "GET /stalker_portal/server/tools/auth_simple.php HTTP/1.1" 404 436 "-" "Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36" ... show less	Hacking
ParaBug	2024-10-29 15:57:43 (2 months ago)	180.149.126.13 - - [29/Oct/2024:16:57:42 +0100] "GET /c/ HTTP/1.1" 403 344 "-" "Mozilla/5.0 (Windows ... show more180.149.126.13 - - [29/Oct/2024:16:57:42 +0100] "GET /c/ HTTP/1.1" 403 344 "-" "Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36" ... show less	Phishing Brute-Force Web App Attack
MAGIC	2024-10-29 12:12:17 (2 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Security_Whaller	2024-10-28 14:21:24 (2 months ago)	Malicious activity detected on Honeypot.	Hacking Brute-Force Web App Attack
Interceptor_HQ	2024-10-28 12:39:27 (2 months ago)	request_uri: / -- automatic report --	Hacking Brute-Force
FEWA	2024-10-25 16:54:19 (2 months ago)	Fail2Ban Ban Triggered	Hacking Bad Web Bot Web App Attack