This IP address has been reported a total of
8
times from
4 distinct
sources.
128.140.106.57 was first reported on
September 12th 2026 , and the most recent report was
1 day ago Greece
with 5
reports;
Germany
with 2
reports;
Italy
with 1
report.
The most common categories in these recent reports were:
Port Scan
5
times;
Bad Web Bot
3
times;
Exploited Host
1
time;
Web App Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇬🇷
setupgr
2026-10-21 04:23:55
(1 day ago)
(mod_security) mod_security (id:11000011) triggered by 128.140.106.57 (DE/Germany/Bavaria/Nuremberg/ ...
show more
(mod_security) mod_security (id:11000011) triggered by 128.140.106.57 (DE/Germany/Bavaria/Nuremberg/-/[AS24940 Hetzner Online GmbH]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Oct 21 07:23:53.843723 2026] [security2:error] [pid 3177:tid 3304] [client 128.140.106.57:40166] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "clients.your-server.de" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: static.57.106.140.128.clients.your-server.de"] [severity "CRITICAL"] [hostname "adoro.gr"] [uri "/"] [unique_id "atg-WUwm9F6JzDRK3KZR3wAABA8"]
show less
Port Scan
🇩🇪
arthome.info
2026-10-04 10:35:00
(2 weeks ago)
keaz-outreach-pool-liveness/1.0
Bad Web Bot
🇬🇷
setupgr
2026-10-04 05:27:38
(2 weeks ago)
(mod_security) mod_security (id:11000011) triggered by 128.140.106.57 (DE/Germany/Bavaria/Nuremberg/ ...
show more
(mod_security) mod_security (id:11000011) triggered by 128.140.106.57 (DE/Germany/Bavaria/Nuremberg/-/[AS24940 Hetzner Online GmbH]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Oct 04 08:27:33.779126 2026] [security2:error] [pid 2883:tid 3041] [client 128.140.106.57:33582] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "clients.your-server.de" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: static.57.106.140.128.clients.your-server.de"] [severity "CRITICAL"] [hostname "pankoskal.gr"] [uri "/"] [unique_id "asHjxaLc2Z6LAbIhHUjjsQAAAxA"]
show less
Port Scan
🇬🇷
setupgr
2026-10-02 04:56:32
(2 weeks ago)
(mod_security) mod_security (id:11000011) triggered by 128.140.106.57 (DE/Germany/Bavaria/Nuremberg/ ...
show more
(mod_security) mod_security (id:11000011) triggered by 128.140.106.57 (DE/Germany/Bavaria/Nuremberg/-/[AS24940 Hetzner Online GmbH]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Fri Oct 02 07:56:27.972809 2026] [security2:error] [pid 2615723:tid 2615899] [client 128.140.106.57:39666] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "clients.your-server.de" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: static.57.106.140.128.clients.your-server.de"] [severity "CRITICAL"] [hostname "adoro.gr"] [uri "/"] [unique_id "ar85e9FNsSRenmagvw5xmwAAA1Y"]
show less
Port Scan
🇮🇹
Progetto1
2026-09-18 06:05:03
(1 month ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇬🇷
setupgr
2026-09-16 05:24:43
(1 month ago)
(mod_security) mod_security (id:11000011) triggered by 128.140.106.57 (DE/Germany/Bavaria/Nuremberg/ ...
show more
(mod_security) mod_security (id:11000011) triggered by 128.140.106.57 (DE/Germany/Bavaria/Nuremberg/-/[AS24940 Hetzner Online GmbH]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Sep 16 08:24:40.396946 2026] [security2:error] [pid 1197487:tid 1197590] [client 128.140.106.57:48986] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "clients.your-server.de" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: static.57.106.140.128.clients.your-server.de"] [severity "CRITICAL"] [hostname "pankoskal.gr"] [uri "/"] [unique_id "aqooGJHYSJ54IhmO49aUmgAABIM"]
show less
Port Scan
🇬🇷
setupgr
2026-09-14 05:51:14
(1 month ago)
(mod_security) mod_security (id:11000011) triggered by 128.140.106.57 (DE/Germany/Bavaria/Nuremberg/ ...
show more
(mod_security) mod_security (id:11000011) triggered by 128.140.106.57 (DE/Germany/Bavaria/Nuremberg/-/[AS24940 Hetzner Online GmbH]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Sep 14 08:51:14.285185 2026] [security2:error] [pid 309293:tid 309446] [client 128.140.106.57:56352] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "clients.your-server.de" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: static.57.106.140.128.clients.your-server.de"] [severity "CRITICAL"] [hostname "adoro.gr"] [uri "/"] [unique_id "aqeLUtHcHoipWMLF9BIhYQAAAxQ"]
show less
Port Scan
🇩🇪
LRob
2026-09-12 06:07:32
(1 month ago)
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show more
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: / | 2026-09-12 06:07 UTC
show less
Bad Web Bot
Showing 1 to
8
of 8 reports
