JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.180.120.145

23.180.120.145 was found in our database!

This IP was reported 274 times. Confidence of Abuse is 100%: ?

100%

ISP	UHQ Services LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS53514
Domain Name	uhq.services
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.180.120.145

Whois 23.180.120.145

IP Abuse Reports for 23.180.120.145:

This IP address has been reported a total of 274 times from 149 distinct sources. 23.180.120.145 was first reported on July 9th 2026, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-08-22 00:01:52 (20 hours ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 23.180.120.145 (FR/France/-): 1 in th ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 23.180.120.145 (FR/France/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇩🇪 DocNetzwerk	2026-08-21 01:36:56 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 23.180.120.145 (US/United States/-)	SQL Injection
🇩🇪 rh24	2026-08-21 00:56:29 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 23.180.120.145 (US/United States/-)	SQL Injection
🇫🇷 masterguru	2026-08-20 04:43:23 (2 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 23.180.120.145 (FR/France/-): 2 in th ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 23.180.120.145 (FR/France/-): 2 in the last 3600 secs (0-196) show less	Hacking
Anonymous	2026-08-19 22:45:16 (2 days ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇩🇪 iNetWorker	2026-08-19 18:21:44 (3 days ago)	trolling for resource vulnerabilities	Web App Attack
Anonymous	2026-08-19 05:57:12 (3 days ago)	Http Port:80 (http_status:403) - Agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2) AppleWebKit/605. ... show more Http Port:80 (http_status:403) - Agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15 show less	Web App Attack
🇺🇸 ruusvuu	2026-08-19 03:55:31 (3 days ago)	Automated abuse report: 25 attack/probe requests from UHQ Services LLC / FR. Targeted paths: /. Samp ... show more Automated abuse report: 25 attack/probe requests from UHQ Services LLC / FR. Targeted paths: /. Sample log lines: [mart] 📊 8/3/2026, 07:57:12 23.180.120.145 POST / 404 - 1.140 ms ref="-" [mirassertions] 2026-08-18 20:55:31: 8/18/2026 20:55:31 23.180.120.145 POST / 404 - 0.852 ms - Detected by an automated web-server log monitor. show less	Web App Attack
🇦🇹 Pingger Shikkoken	2026-08-19 02:09:26 (3 days ago)	2026-08-19T02:09:26+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2026-08-19T02:09:26+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=23.180.120.145 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=34007 DF PROTO=TCP SPT=37406 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-19T02:09:27+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=23.180.120.145 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=34008 DF PROTO=TCP SPT=37406 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-19T02:09:29+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=23.180.120.145 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=34009 DF PROTO=TCP SPT=37406 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
🇨🇭 Forgeminiatures	2026-08-18 19:03:24 (4 days ago)	Automated honeypot/IP-defense trigger on forgeminiatures.work. Reason: honeypot:/api/. Targeted path ... show more Automated honeypot/IP-defense trigger on forgeminiatures.work. Reason: honeypot:/api/. Targeted path: /api/. User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36. show less	Port Scan Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-08-18 18:12:52 (4 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 23.180.120.145 (FR/France/-): 1 in th ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 23.180.120.145 (FR/France/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇲🇾 Rizzy	2026-08-18 13:07:44 (4 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇨🇭 4server	2026-08-18 09:26:05 (4 days ago)	[TueAug1811:25:55.9923272026][security2:error][pid2685585:tid2685807][client23.180.120.145:0]ModSecu ... show more [TueAug1811:25:55.9923272026][security2:error][pid2685585:tid2685807][client23.180.120.145:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"rxrecaptcha_response_field\"against\"TX:invalidarg2\"required.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"114\"][id\"390614\"][rev\"23\"][msg\"Atomicorp.comWAFRules:NullByteAttackBlocked\(InvalidcharacterinARGS\)\"][severity\"CRITICAL\"][hostname\"www.hosting-e-domini.net\"][uri\"/\"][unique_id\"aoQlIzkFzBYCan8qYCGy-wAAAQE\"] show less	Hacking Web App Attack
🇩🇪 jbcrn	2026-08-18 06:25:36 (4 days ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 show less	Bad Web Bot Web App Attack
🇩🇪 4server	2026-08-17 09:37:06 (5 days ago)	[MonAug1711:36:53.4287722026][security2:error][pid1278478:tid1278495][client23.180.120.145:0]ModSecu ... show more [MonAug1711:36:53.4287722026][security2:error][pid1278478:tid1278495][client23.180.120.145:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"rxrecaptcha_response_field\"against\"TX:invalidarg2\"required.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"114\"][id\"390614\"][rev\"23\"][msg\"Atomicorp.comWAFRules:NullByteAttackBlocked\(InvalidcharacterinARGS\)\"][severity\"CRITICAL\"][hostname\"hdcadvisory.ch\"][uri\"/\"][unique_id\"aoLWNWIHYFIdjVXa2LqGXQAAAI4\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 274 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 45.205.1.244

🇨🇳 222.176.200.53

🇧🇷 187.125.196.38

🇰🇷 152.32.139.9

🇨🇳 47.96.177.66

🇺🇸 45.56.83.149

🇰🇷 220.119.37.141

🇩🇪 213.209.159.11

🇱🇹 213.176.26.95

🇱🇹 213.176.26.58

🇱🇹 213.176.26.52

🇱🇹 213.176.26.22

🇺🇸 205.210.31.24

🇺🇸 203.161.43.31

🇩🇪 151.243.11.235

🇨🇳 124.205.141.215

🇷🇴 92.118.39.58

🇬🇧 88.215.1.201

🇺🇸 66.132.172.101

🇸🇬 47.84.12.198