JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 200.123.52.115

200.123.52.115 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 49%: ?

49%

ISP	P&C ON LINE S.R.L. (NETWAY INTERNET)
Usage Type	Fixed Line ISP
ASN	AS272928
Domain Name	netway.com.ar
Country	🇦🇷 Argentina
City	Laferrere, Buenos Aires

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 200.123.52.115

Whois 200.123.52.115

IP Abuse Reports for 200.123.52.115:

This IP address has been reported a total of 21 times from 17 distinct sources. 200.123.52.115 was first reported on January 28th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 GamesGames	2026-10-17 13:18:59 (1 hour ago)	SSH login attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-10-17 12:11:19 (3 hours ago)	(mod_security) mod_security (id:225170) triggered by 200.123.52.115 (host52115.netway.com.ar): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 200.123.52.115 (host52115.netway.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 08:11:12.636238 2026] [security2:error] [pid 25485:tid 25516] [client 200.123.52.115:58064] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|woodamy.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "woodamy.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atNl4LJhkbVbF1WnT6dJogAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 RLDD	2026-10-17 11:58:10 (3 hours ago)	WP probing for vulnerabilities -nov	Web App Attack
🇬🇧 spamverify.com	2026-10-16 14:46:10 (1 day ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 09:28:18 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 200.123.52.115 (host52115.netway.com.ar): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 200.123.52.115 (host52115.netway.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 05:28:14.442512 2026] [security2:error] [pid 15288:tid 15288] [client 200.123.52.115:16260] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|nearfieldchrist.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nearfieldchrist.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atCcrujqA5Wx05bvqw8ZgwAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2026-10-12 15:27:52 (4 days ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 鬼影233	2026-09-23 17:55:35 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-09-13 03:41:18 (1 month ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking
🇹🇷 ugurcoskun	2026-09-09 22:34:50 (1 month ago)	Auto-blocked by Seczar SecureOps — SSH Brute Force (6 events in 5min) at 2026-09-09 22:34	Web App Attack
🇹🇷 savasboluk	2026-09-04 02:33:05 (1 month ago)	Auto-blocked by Seczar SecureOps — SSH Brute Force (6 events in 5min) at 2026-09-04 02:33	Web App Attack
🇺🇸 kosada.com	2026-07-06 19:40:45 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇳🇱 Roderic	2026-06-29 23:07:58 (3 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-03 21:15:53 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 200.123.52.115 (host52115.netway.com.ar): 1 in ... show more (mod_security) mod_security (id:210730) triggered by 200.123.52.115 (host52115.netway.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 17:15:49.398092 2026] [security2:error] [pid 31529:tid 31529] [client 200.123.52.115:22084] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|williamfitzsimmons.com\|F\|2"] [data ".rex.greyareaprod.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "williamfitzsimmons.com"] [uri "/news/0410-william-fitzsimmons-spring-tour-update/www.rex.greyareaprod.com"] [unique_id "aiCZhRO6I6PWyByqpIidjgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇬 mypatricks	2026-05-12 13:14:20 (5 months ago)	200.123.52.115 \| Port: 12902 \| DNS: host52115.netway.com.ar 2026-05-12T21:14:19+08:00 America/Argent ... show more 200.123.52.115 \| Port: 12902 \| DNS: host52115.netway.com.ar 2026-05-12T21:14:19+08:00 America/Argentina/Buenos_Aires \| HOST Data Center/Web Hosting/Transit Spam list \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.0 HTTP/1.1 443 GET \| URL: /?route=common/language/language&code=en-gb&redirect=https%3A%2F%2Fxxxxxx%2FFondant_3D_Formula_Racing_Themed_Cake%2F%3F_route_%3DFondant_3D_Formula_Racing_Themed_Cake%26amp%3BAUD%3D \| Ref: - \| Country: AR/Argentina/−03:00 IP City: Buenos Aires Linux 9fa9af8739deacbc-EZE/Buenos Aires, Argentina 1 hits/0 secs Browser 3 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇮🇹 VHosting	2025-12-23 14:10:35 (9 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 201.149.53.243

🇵🇱 194.180.49.219

🇧🇷 187.84.8.33

🇺🇸 129.121.143.150

🇦🇷 45.175.162.178

🇺🇸 20.150.211.114

🇩🇪 2a00:1911:1:843:cd3a:8f60:4303:4d34

🇧🇷 2804:1128:bcd0:f100:6c26:cfcb:4425:df9d

🇦🇺 216.226.77.20

🇸🇰 188.167.251.108

🇨🇳 182.119.231.147

🇺🇸 107.180.88.176

🇫🇮 104.28.254.16

🇧🇩 103.183.141.210

🇺🇸 98.248.218.102

🇳🇱 86.54.31.34

🇬🇧 77.67.26.69

🇺🇸 70.183.236.151

🇻🇳 58.186.20.101

🇺🇸 205.185.121.17