JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

23.180.120.170

Recent Activity

Abuse confidence score ?

100% Critical

133 reports

70 reporters · latest 5 hours ago

ISP	UHQ Services LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS53514
Domain Name	uhq.services
Country	🇫🇷 France
City	Paris, Ile-de-France

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 23.180.120.170

Export CSV

This IP address has been reported a total of 133 times from 70 distinct sources. 23.180.120.170 was first reported on October 9th 2026, and the most recent report was 5 hours ago. In the last 60 days, the top reporter locations were: Germany with 60 reports; Netherlands with 19 reports; United States of America with 15 reports. Over the same time period, 23.180.120.170 has changed country of origin 2 times. The most common categories in these recent reports were: Web App Attack 89 times; Bad Web Bot 28 times; Brute-Force 25 times; Hacking 17 times; Port Scan 7 times; Other 19 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-10-19 11:45:29 (5 hours ago)	[MonOct1913:45:16.0515712026][security2:error][pid1042539:tid1042581][client23.180.120.170:0]ModSecu ... show more [MonOct1913:45:16.0515712026][security2:error][pid1042539:tid1042581][client23.180.120.170:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"rxrecaptcha_response_field\"against\"TX:invalidarg2\"required.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"114\"][id\"390614\"][rev\"23\"][msg\"Atomicorp.comWAFRules:NullByteAttackBlocked\(InvalidcharacterinARGS\)\"][severity\"CRITICAL\"][hostname\"www.risanamento-pareti-umide.ch.risanamento-funghi-muffa.ch\"][uri\"/\"][unique_id\"atYCzCjMzSgPgB8aoOFLnwAAAEA\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 masterguru	2026-10-18 18:19:18 (22 hours ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 23.180.120.170 (FR/France/-): 1 in th ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 23.180.120.170 (FR/France/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-10-18 14:38:36 (1 day ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 23.180.120.170 (FR/France/-): 2 in th ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 23.180.120.170 (FR/France/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇩🇪 dbmwebdesign	2026-10-18 14:25:18 (1 day ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇳🇱 Site.eu	2026-10-18 11:06:53 (1 day ago)	Excessive 404/403 errors	Brute-Force
🇦🇺 AWW-Admin	2026-10-18 10:48:39 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 23.180.120.170 (US/United States/-)	SQL Injection
🇵🇱 gandaflux	2026-10-18 09:44:15 (1 day ago)	23.180.120.170 [redacted-domain] - [18/Oct/2026:11:44:13 +0200] "POST /en/ HTTP/1.1" 404 267 "-" "Mo ... show more 23.180.120.170 [redacted-domain] - [18/Oct/2026:11:44:13 +0200] "POST /en/ HTTP/1.1" 404 267 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 23.180.120.170 [redacted-domain] - [18/Oct/2026:11:44:13 +0200] "POST /app/ HTTP/1.1" 404 267 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 23.180.120.170 [redacted-domain] - [18/Oct/2026:11:44:13 +0200] "POST /api/ HTTP/1.1" 404 267 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 23.180.120.170 [redacted-domain] - [18/Oct/2026:11:44:13 +0200] "POST /_next/ HTTP/1.1" 404 267 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 23.180.120.170 ps show less	Bad Web Bot Web App Attack
🇹🇼 ashiyasayo	2026-10-18 07:58:00 (1 day ago)	Detected next.js authorization bypass vulnerability.	Web App Attack
🇫🇷 mail.avx.gr	2026-10-18 05:33:25 (1 day ago)	(nginx404ERRORS) Repeated nginx HTTP 404 errors from 23.180.120.170 (FR/France/Île-de-France/Paris/- ... show more (nginx404ERRORS) Repeated nginx HTTP 404 errors from 23.180.120.170 (FR/France/Île-de-France/Paris/-) show less	Hacking
🇳🇱 Site.eu	2026-10-18 04:58:14 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 EmilGH	2026-10-18 03:17:20 (1 day ago)	23.180.120.170 - - [18/Oct/2026:03:17:18 +0000] "POST /en/ HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; ... show more 23.180.120.170 - - [18/Oct/2026:03:17:18 +0000] "POST /en/ HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 23.180.120.170 - - [18/Oct/2026:03:17:18 +0000] "POST /app/ HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 23.180.120.170 - - [18/Oct/2026:03:17:18 +0000] "POST /app/ HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 23.180.120.170 - - [18/Oct/2026:03:17:18 +0000] "POST /api/ HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 23.180.120.170 - - [18/Oct/2026:03:17:18 +0000] "POST /api/ HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 23.180.120.170 - - [18/Oc ... show less	Bad Web Bot Web App Attack
🇩🇪 NetShield-DE	2026-10-17 23:08:00 (1 day ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-10-18T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-10-18T01:07:02+0200. Last: 2026-10-18T01:07:02+0200. Samples: - 2026-10-11 01:22:45,388 fail2ban.actions [858]: NOTICE [abuseipdb] Ban 23.180.120.170 show less	Web App Attack
🇩🇪 4server	2026-10-17 19:43:25 (1 day ago)	[SatOct1721:43:11.0536842026][security2:error][pid2972136:tid2972153][client23.180.120.170:0]ModSecu ... show more [SatOct1721:43:11.0536842026][security2:error][pid2972136:tid2972153][client23.180.120.170:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"rxrecaptcha_response_field\"against\"TX:invalidarg2\"required.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"114\"][id\"390614\"][rev\"23\"][msg\"Atomicorp.comWAFRules:NullByteAttackBlocked\(InvalidcharacterinARGS\)\"][severity\"CRITICAL\"][hostname\"avcolor.ch\"][uri\"/\"][unique_id\"atPPz3_wc-vNKuKgz0biyAAAAU4\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 NetShield-DE	2026-10-17 19:07:35 (1 day ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-10-17T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-10-17T21:07:01+0200. Last: 2026-10-17T21:07:01+0200. Samples: - 2026-10-11 01:22:45,388 fail2ban.actions [858]: NOTICE [abuseipdb] Ban 23.180.120.170 show less	Web App Attack
🇩🇪 Petros Stefanakis	2026-10-17 17:22:12 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 23.180.120.170 (US/United States/-)	SQL Injection

Showing 1 to 15 of 133 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 153.117.55.1

🇻🇳 113.172.112.226

🇩🇰 109.56.7.114

🇵🇪 200.37.103.36

🇫🇮 138.124.102.227

🇬🇧 118.193.64.235

🇩🇪 118.193.59.142

🇺🇸 91.230.168.179

🇺🇸 54.146.224.123

🇳🇱 52.233.193.61

🇺🇸 52.90.20.189

🇸🇬 45.78.207.244

🇺🇸 35.93.103.241

🇧🇷 191.55.103.26

🇸🇬 185.200.116.46

🇨🇳 171.13.42.9

🇩🇪 152.53.254.77

🇩🇪 118.193.59.10

🇹🇭 118.193.57.218

🇬🇦 102.142.98.22