JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.237.120.123

212.237.120.123 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 20%: ?

20%

ISP	Kurdistan Net Company for Computer and Internet Ltd.
Usage Type	Fixed Line ISP
ASN	AS206206
Domain Name	knet-telecom.com
Country	🇮🇶 Iraq
City	Erbil, Erbil

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.237.120.123

Whois 212.237.120.123

IP Abuse Reports for 212.237.120.123:

This IP address has been reported a total of 19 times from 15 distinct sources. 212.237.120.123 was first reported on May 5th 2021, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇰🇷 zlhIcd	2026-06-26 07:05:35 (16 hours ago)	212.237.120.123 - - [16/Jun/2026:10:26:03 +0900] "GET /pcwiki/index.php?days=30&from=20251119160025& ... show more 212.237.120.123 - - [16/Jun/2026:10:26:03 +0900] "GET /pcwiki/index.php?days=30&from=20251119160025&hideliu=1&hidemyself=1&limit=100&title=%EB%8C%80%EB%AC%B8 HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6613.84 Safari/537.36" ... show less	Web Spam SQL Injection Bad Web Bot Web App Attack
🇬🇧 PeravixGroup	2026-06-03 17:27:55 (3 weeks ago)	Honeypot detection: Android Debug Bridge (ADB) unauthorized access attempt on port 5555. Severity: M ... show more Honeypot detection: Android Debug Bridge (ADB) unauthorized access attempt on port 5555. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Hacking
Anonymous	2026-05-12 05:51:20 (1 month ago)	Attack Signature Blocked: /wishlist/index/add/product/11920/form_key/QVzWd0ItIc0ROyQb/ (Magento Site ... show more Attack Signature Blocked: /wishlist/index/add/product/11920/form_key/QVzWd0ItIc0ROyQb/ (Magento Site) (Botnet activity attributed to: Angara Technologies Group / mikhail-smirnov-79830322) show less	Web App Attack Bad Web Bot
🇨🇭 ALPHANET	2026-05-07 10:51:01 (1 month ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
Anonymous	2026-03-20 17:48:00 (3 months ago)	Multiple Violations by Bot	Port Scan Web App Attack
🇦🇺 MAGIC	2026-02-20 00:08:30 (4 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-02-19 00:01:42 (4 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 HandyTreff.de	2026-01-30 04:54:31 (4 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -52.217 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -52.217 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Sa show less	Bad Web Bot Web App Attack
🇩🇪 HandyTreff.de	2025-12-05 06:50:12 (6 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -36.327 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -36.327 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0. show less	Bad Web Bot Web App Attack
Anonymous	2025-11-25 00:35:55 (7 months ago)	scanning http requests from known botnet	Web App Attack
🇮🇩 hermawan	2025-11-22 13:37:39 (7 months ago)	[Sat Nov 22 20:28:15.835307 2025] [security2:error] [pid 1051588:tid 140558440761024] [client 212.23 ... show more [Sat Nov 22 20:28:15.835307 2025] [security2:error] [pid 1051588:tid 140558440761024] [client 212.237.120.123:58028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AOLBUILD" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: AOLBUILD found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 ADG/11.0.2510 AOLBUILD/11.0.2510 Safari/537.36 request_line = GET /index.php/profil/meteorologi/list-all-categories/4282-klimatologi/prakiraan-klimatologi/prakiraan-dasarian/prakiraan-curah-hujan-dasarian/prakiraan-probabilistik-curah-hujan-dasarian/prakiraan-probabilistik-curah-hujan-dasarian-provinsi-jawa-timur/prakiraan-dasarian-probabilistik-curah-hu..."] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/meteorologi/list-all ... show less	Hacking Web App Attack
Anonymous	2025-11-17 18:51:24 (7 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-15 12:35:08 (7 months ago)	scanning http requests from known botnet	Web App Attack
🇸🇪 finnjohan	2025-10-12 19:46:22 (8 months ago)	DDoS	DDoS Attack
🇺🇸 rsiddall	2025-08-07 01:16:04 (10 months ago)	IP used faked sender domain, rejected due to DMARC policy, probable botnet member or drive-by VM	Email Spam

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.102.21.104

🇩🇪 217.160.134.38

🇺🇸 216.25.89.133

🇩🇪 207.244.209.58

🇺🇸 205.210.31.73

🇺🇸 205.210.31.67

🇬🇧 195.96.139.33

🇬🇧 188.122.37.97

🇺🇸 134.128.23.234

🇳🇱 109.207.174.234

🇸🇪 79.136.7.167

🇮🇪 54.195.21.216

🇺🇸 20.64.104.70

🇺🇸 216.226.77.10

🇵🇭 210.5.117.238

🇺🇸 205.210.31.53

🇬🇧 195.96.139.32

🇬🇧 195.96.139.31

🇵🇸 193.58.151.2

🇳🇱 185.236.20.195