JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.169.122.63

109.169.122.63 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 95%: ?

95%

ISP	Buchholz Digital GmbH
Usage Type	Fixed Line ISP
ASN	AS208988
Hostname(s)	109-169-122-63.dyn.ip-net.buchholz-digital.de
Domain Name	buchholz-digital.de
Country	🇩🇪 Germany
City	Buchholz in der Nordheide, Lower Saxony

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.169.122.63

Whois 109.169.122.63

IP Abuse Reports for 109.169.122.63:

This IP address has been reported a total of 25 times from 18 distinct sources. 109.169.122.63 was first reported on August 28th 2026, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-02 05:06:57 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 109.169.122.63 (109-169-122-63.dyn.ip-net.buchh ... show more (mod_security) mod_security (id:210492) triggered by 109.169.122.63 (109-169-122-63.dyn.ip-net.buchholz-digital.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:06:52.444370 2026] [security2:error] [pid 6297:tid 6297] [client 109.169.122.63:64903] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fishleadership.org"] [uri "/wp-config.php~"] [unique_id "apeu7KDO73CQOVk1UJbUdwAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-09-02 03:34:20 (18 hours ago)	[02/Sep/2026:06:34:19 +0300] -- 109.169.122.63 Ban reason: Scanner [CMS_GENERIC] \| Request: POST /wp ... show more [02/Sep/2026:06:34:19 +0300] -- 109.169.122.63 Ban reason: Scanner [CMS_GENERIC] \| Request: POST /wp-json/batch/v1 HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 TAY	2026-09-02 03:07:07 (19 hours ago)	109.169.122.63 - - [02/Sep/2026:11:06:39 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 48441 "-" "Moz ... show more 109.169.122.63 - - [02/Sep/2026:11:06:39 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 48441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 109.169.122.63 - - [02/Sep/2026:11:06:45 +0800] "GET /wp-config.php~ HTTP/1.1" 404 48441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 109.169.122.63 - - [02/Sep/2026:11:06:51 +0800] "GET /wp-config.php.save HTTP/1.1" 404 48441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 109.169.122.63 - - [02/Sep/2026:11:06:53 +0800] "GET /wp-config.php.old HTTP/1.1" 404 48441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 109.169.122.63 - - [02/Sep/2026:11:07:00 +0800] "GET /wp-config.php.orig HTTP/1.1" 404 48441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH ... show less	Brute-Force
🇺🇸 TAY	2026-09-01 23:52:47 (22 hours ago)	109.169.122.63 - - [02/Sep/2026:07:52:20 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 54884 "-" "Moz ... show more 109.169.122.63 - - [02/Sep/2026:07:52:20 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 54884 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 109.169.122.63 - - [02/Sep/2026:07:52:23 +0800] "GET /wp-config.php~ HTTP/1.1" 404 54881 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 109.169.122.63 - - [02/Sep/2026:07:52:25 +0800] "GET /wp-config.php.save HTTP/1.1" 404 54907 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 109.169.122.63 - - [02/Sep/2026:07:52:35 +0800] "GET /wp-config.php.old HTTP/1.1" 404 54884 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 109.169.122.63 - - [02/Sep/2026:07:52:45 +0800] "GET /wp-config.php.orig HTTP/1.1" 500 5818 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHT ... show less	Brute-Force
🇺🇸 TAY	2026-09-01 22:30:55 (23 hours ago)	109.169.122.63 - - [02/Sep/2026:06:30:37 +0800] "GET /wp-config.php~ HTTP/1.1" 404 48454 "-" "Mozill ... show more 109.169.122.63 - - [02/Sep/2026:06:30:37 +0800] "GET /wp-config.php~ HTTP/1.1" 404 48454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 109.169.122.63 - - [02/Sep/2026:06:30:38 +0800] "GET /wp-config.php.save HTTP/1.1" 404 48454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 109.169.122.63 - - [02/Sep/2026:06:30:39 +0800] "GET /wp-config.php.old HTTP/1.1" 404 48454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 109.169.122.63 - - [02/Sep/2026:06:30:45 +0800] "GET /wp-config.php.orig HTTP/1.1" 404 48454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 109.169.122.63 - - [02/Sep/2026:06:30:52 +0800] "GET /wp-config.php.txt HTTP/1.1" 404 48454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH ... show less	Brute-Force
🇺🇸 TPI-Abuse	2026-09-01 19:18:29 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 109.169.122.63 (109-169-122-63.dyn.ip-net.buchh ... show more (mod_security) mod_security (id:210492) triggered by 109.169.122.63 (109-169-122-63.dyn.ip-net.buchholz-digital.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 15:18:23.071798 2026] [security2:error] [pid 18314:tid 18314] [client 109.169.122.63:64322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lasertherapyoc.com"] [uri "/wp-config.php.save"] [unique_id "apck_-yBih2vLsNW9LVdWwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 SCHAPPY	2026-09-01 13:02:18 (1 day ago)	Probing for wp2shell vulnerabilities.	Hacking Web App Attack
🇦🇺 A.i.D.A.N.N	2026-09-01 11:07:41 (1 day ago)	A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web vulnerability scanning detected	Web App Attack
🇮🇩 Antasena	2026-09-01 08:02:10 (1 day ago)	Triggered IDS Description:Suspicious WordPress Batch API Possible WP2Shell Enumeration \| src_ip: 109 ... show more Triggered IDS Description:Suspicious WordPress Batch API Possible WP2Shell Enumeration \| src_ip: 109.169.122.63 \| Path: wp-json/batch/v1 show less	Web App Attack
Anonymous	2026-09-01 06:00:36 (1 day ago)	Web application attack detected.	Web App Attack
🇫🇷 pm33	2026-08-31 20:47:57 (2 days ago)	Excessive crawling HTTP 404	Web App Attack
🇵🇱 heterodyna.pl	2026-08-31 20:30:56 (2 days ago)	Skan 404/probe: /wp-content/plugins/wp-file-manager/ URL: /wp-content/plugins/wp-file-manager/ UA: M ... show more Skan 404/probe: /wp-content/plugins/wp-file-manager/ URL: /wp-content/plugins/wp-file-manager/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 show less	Brute-Force Web App Attack
🇫🇮 paissangroup	2026-08-31 12:33:13 (2 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TAY	2026-08-31 06:07:16 (2 days ago)	109.169.122.63 - - [31/Aug/2026:14:05:56 +0800] "GET /wp-config.php.bak HTTP/1.1" 301 6229 "-" "Mozi ... show more 109.169.122.63 - - [31/Aug/2026:14:05:56 +0800] "GET /wp-config.php.bak HTTP/1.1" 301 6229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 109.169.122.63 - - [31/Aug/2026:14:06:04 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 54884 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 109.169.122.63 - - [31/Aug/2026:14:06:15 +0800] "GET /wp-config.php~ HTTP/1.1" 301 6226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 109.169.122.63 - - [31/Aug/2026:14:06:21 +0800] "GET /wp-config.php~ HTTP/1.1" 404 54881 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 109.169.122.63 - - [31/Aug/2026:14:07:10 +0800] "GET /wp-config.php.orig HTTP/1.1" 301 6230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, li ... show less	Brute-Force
🇫🇷 masterguru	2026-08-31 03:48:47 (2 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 109.169.122.63 (DE/Germany/109-169-12 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 109.169.122.63 (DE/Germany/109-169-122-63.dyn.ip-net.buchholz-digital.de): 2 in the last 3600 secs (0-196) show less	Hacking

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.158.40.145

🇦🇷 200.59.127.95

🇩🇪 167.94.146.48

🇸🇪 157.22.73.212

🇺🇸 136.65.82.2

🇨🇳 116.179.32.228

🇻🇳 116.111.5.237

🇫🇷 77.239.124.184

🇺🇸 2604:a880:800:14:0:3:7368:1000

🇧🇷 186.209.77.236

🇨🇳 116.179.37.35

🇱🇹 77.90.185.88

🇫🇮 45.88.13.104

🇫🇷 185.101.21.227

🇨🇳 116.196.81.183

🇯🇵 43.133.6.100

🇮🇩 36.64.68.99

🇺🇸 20.236.202.228

🇪🇬 196.202.24.44

🇨🇳 121.63.221.85