JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.237.123.115

212.237.123.115 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 10%: ?

10%

ISP	Kurdistan Net Company for Computer and Internet Ltd.
Usage Type	Fixed Line ISP
ASN	AS206206
Domain Name	knet-telecom.com
Country	🇮🇶 Iraq
City	Erbil, Erbil

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.237.123.115

Whois 212.237.123.115

IP Abuse Reports for 212.237.123.115:

This IP address has been reported a total of 29 times from 21 distinct sources. 212.237.123.115 was first reported on April 17th 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 mypatricks	2026-06-11 09:25:57 (1 week ago)	212.237.123.115 \| Port: 14036 \| DNS: 212.237.123.115 2026-06-11T17:25:57+08:00 Asia/Baghdad \| IPs Sp ... show more 212.237.123.115 \| Port: 14036 \| DNS: 212.237.123.115 2026-06-11T17:25:57+08:00 Asia/Baghdad \| IPs Spam list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /ms?fd89fcae9dbdcbe=375 \| Ref: https://xxxxxx \| Country: IQ/Iraq/+03:00 IP City: Erbil Windows a09f924328e31d65-BGW/Baghdad, Iraq 1 hits/0 secs Browser 1 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇫🇷 Sklurk	2026-05-14 03:26:22 (1 month ago)	Web App Attack	Web App Attack
🇬🇧 killian7603	2026-04-05 18:37:46 (2 months ago)	Logon Policy Violation	Email Spam Spoofing Brute-Force
🇺🇸 kosada.com	2026-03-11 18:26:35 (3 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇩🇪 filstal.org	2026-03-11 15:04:51 (3 months ago)	Dovecot Brute-Force: Targeted User-Enumeration (Honey-Accounts)	Email Spam Brute-Force
Anonymous	2026-02-27 03:11:08 (3 months ago)	scanning http requests from known botnet	Web App Attack
🇫🇷 vtchost.com	2026-02-24 14:43:14 (3 months ago)	outdated or bad user agent ...	Bad Web Bot
🇺🇸 gui-ying233	2026-02-15 04:02:43 (4 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 show less	Bad Web Bot
🇷🇺 DZBOT	2026-02-06 19:19:48 (4 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-01-31 20:32:49 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 212.237.123.115 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 212.237.123.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 31 15:32:45.683226 2026] [security2:error] [pid 1313:tid 1313] [client 212.237.123.115:51574] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.circulodesonido.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.circulodesonido.org"] [uri "/[email protected]"] [unique_id "aX5m7fNmMshWFwm3Xva3qwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-19 12:49:51 (5 months ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp show less	Bad Web Bot Exploited Host
Anonymous	2026-01-06 19:59:04 (5 months ago)	scanning http requests from known botnet	Web App Attack
🇦🇺 MAGIC	2025-12-12 00:04:43 (6 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (6 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
Anonymous	2025-12-10 10:47:51 (6 months ago)	botnet	DDoS Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 4.201.96.144

🇳🇱 176.65.139.181

🇳🇬 152.32.143.6

🇫🇮 147.185.133.150

🇸🇬 101.47.159.125

🇷🇴 80.94.92.166

🇩🇪 47.245.136.45

🇻🇳 27.79.7.135

🇷🇴 2.57.121.112

🇫🇷 2001:41d0:33d:9200::40f

🇨🇦 209.50.188.109

🇨🇳 123.232.39.51

🇳🇱 91.92.42.61

🇸🇬 47.128.113.72

🇸🇬 43.133.61.150

🇺🇸 20.169.107.13

🇧🇷 168.121.139.249

🇮🇩 103.153.190.105

🇰🇪 41.191.229.226

🇨🇱 201.186.40.161