2.56.189.123

Classification: Malicious

2.56.189.123 is a malicious IP address. Reported by 7 threat sources, last seen 2026-08-18. Network: AS62240 Clouvider Limited.

Current activity

  • Known attacker — Seen launching attacks over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Malicious Host HoneyDB 2026-08-18 00:00:00 2026-08-18 00:00:00 attacker malicious-activity
Suspicious Host AbuseIPDB 2024-07-12 01:19:21 2026-03-03 23:50:19 anomalous-activity
Proxy IPWhois.io 2025-03-31 11:18:14 2026-01-17 23:00:49 anonymization
Proxy FireHOL 2023-09-01 15:57:05 2025-10-15 09:36:49 anonymization
Anonymizer FireHOL 2025-10-08 11:25:42 2025-10-15 09:32:50 anonymization
HTTP Spammer StopForumSpam.com 2022-06-14 01:13:58 2025-05-05 08:37:01 malicious-activity
VPN IPWhois.io 2025-03-01 01:55:15 2025-03-01 01:55:15 anonymization
ET CINS Active Threat Intelligence Poor Reputation IP UDP Emerging Threats 2022-08-02 02:30:34 2022-08-10 02:15:38 malicious-activity
ET CINS Active Threat Intelligence Poor Reputation IP TCP Emerging Threats 2022-08-02 02:30:33 2022-08-10 02:15:36 malicious-activity
Malicious Host CIArmy 2022-08-01 03:30:17 2022-08-09 03:25:52 malicious-activity

Tags

anonymization bot abuse

Whois information

AS name
AS62240 Clouvider Limited
AS registry
ripencc
AS date
2019-03-15 00:00:00
AS CIDR
2.56.188.0/22
CIDR
2.56.189.120/29
Registrant
Clouvider Limited
Address
Clouvider Limited 30 Moorgate City of London London, UK EC2R 6PJ
City
Dallas
State
TX
Postal code
75201
Country
US — United States 🇺🇸
Contact email
[email protected]
First indexed
2022-06-14 01:13:58
Last updated
2026-08-18 22:01:12

Malicious IPs in the same CIDR

2.56.188.34 2.56.189.89 2.56.188.160 2.56.189.75 2.56.189.107 2.56.189.91 2.56.189.123