JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.172.115.167

144.172.115.167 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 100%: ?

100%

ISP	RouterHosting LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14956
Hostname(s)	167.115.172.144.static.cloudzy.com
Domain Name	cloudzy.com
Country	🇺🇸 United States of America
City	Ogden, Utah

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.172.115.167

Whois 144.172.115.167

IP Abuse Reports for 144.172.115.167:

This IP address has been reported a total of 48 times from 38 distinct sources. 144.172.115.167 was first reported on October 22nd 2026, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-10-22 15:34:21 (1 minute ago)	1.696 requests with url.path /.git/config 558 requests with url.path .git/*	Brute-Force Bad Web Bot
🇮🇹 CoreTech srl	2026-10-22 15:34:02 (1 minute ago)	cloudlinux2 fail2ban: 2026-10-22 17:29:09,262 fail2ban.filter [1488]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-10-22 17:29:09,262 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 144.172.115.167 - 2026-10-22 17:29:09cloudlinux2 fail2ban: 2026-10-22 17:29:28,902 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 158.181.44.205 - 2026-10-22 17:29:28cloudlinux2 fail2ban: 2026-10-22 17:29:29,036 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 158.181.44.205 - 2026-10-22 17:29:29cloudlinux2 fail2ban: 2026-10-22 17:29:37,641 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 103.167.191.3 - 2026-10-22 17:29:37cloudlinux2 fail2ban: 2026-10-22 17:29:36,592 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 103.167.191.3 - 2026-10-22 17:29:36cloudlinux2 fail2ban: 2026-10-22 17:29:30,652 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 103.167.191.3 - 2026-10-22 17:29:30cloudlinux2 fail2ban: 2026-10-22 17:29:37,872 fail2ban.actions [1488]: NOTICE [plesk-modsecurity] Ban 103.167.191.3cloudlinux2 fai show less	Brute-Force
🇹🇭 Kriengkrai Chaimin	2026-10-22 15:29:53 (5 minutes ago)	144.172.115.167 - - [22/Oct/2026:22:29:53 +0700] "GET /.git/config HTTP/1.1" 404 1245 "-" "Mozilla/5 ... show more 144.172.115.167 - - [22/Oct/2026:22:29:53 +0700] "GET /.git/config HTTP/1.1" 404 1245 "-" "Mozilla/5.0 (X11; Linux x86_64)" "-" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 15:29:20 (6 minutes ago)	(mod_security) mod_security (id:210492) triggered by 144.172.115.167 (167.115.172.144.static.cloudzy ... show more (mod_security) mod_security (id:210492) triggered by 144.172.115.167 (167.115.172.144.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 11:29:14.937802 2026] [security2:error] [pid 19369:tid 19382] [client 144.172.115.167:55880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clinicadelparabrisas.com"] [uri "/.git/config"] [unique_id "atorymAILkvakb6DQZdFkgAAAMw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-10-22 15:27:26 (8 minutes ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.git (Match: /.git) show less	Hacking Brute-Force Web App Attack
🇩🇪 webanyone	2026-10-22 15:19:27 (16 minutes ago)	Secret file probe \| method: GET \| path: /.git/config \| ua: Mozilla/5.0 (X11; Linux x86_64)	Hacking Web App Attack
🇩🇪 big-cloud.nl	2026-10-22 15:14:30 (21 minutes ago)	Try to access /.git/config	Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 15:14:17 (21 minutes ago)	(mod_security) mod_security (id:210492) triggered by 144.172.115.167 (167.115.172.144.static.cloudzy ... show more (mod_security) mod_security (id:210492) triggered by 144.172.115.167 (167.115.172.144.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 11:14:13.066570 2026] [security2:error] [pid 25302:tid 25302] [client 144.172.115.167:59212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "castagnino.com"] [uri "/.git/config"] [unique_id "atooRb9bYulOGPIWXQfDggAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-22 15:13:02 (22 minutes ago)	Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1	Hacking Web App Attack
🇩🇪 BlueWire Hosting	2026-10-22 15:11:26 (24 minutes ago)	High-confidence malicious configuration/VCS probe	Web App Attack
🇨🇭 TheCoon	2026-10-22 15:10:54 (24 minutes ago)	Automated: Credential theft attempt - JSON bomb served	Web App Attack Hacking
🇬🇧 rakkor	2026-10-22 15:09:51 (25 minutes ago)	2026/10/22 14:33:33 [error] 20062#20062: 291327 open() "/usr/syno/synoman/.git/config" failed (2: N ... show more 2026/10/22 14:33:33 [error] 20062#20062: 291327 open() "/usr/syno/synoman/.git/config" failed (2: No such file or directory), client: 144.172.115.167, server: audio.rakkor.uk, request: "GET /.git/config HTTP/1.1", host: "audio.rakkor.uk" 2026/10/22 16:09:50 [error] 20061#20061: *303020 open() "/usr/syno/synoman/.git/config" failed (2: No such file or directory), client: 144.172.115.167, server: cam.rakkor.uk, request: "GET /.git/config HTTP/1.1", host: "cam.rakkor.uk" ... show less	Brute-Force Hacking Web App Attack
🇫🇷 Bensay	2026-10-22 15:03:04 (32 minutes ago)	HTTP web-app probe; method=GET; path=/.git/config; status=403; user-agent=Mozilla/5.0 (X11; Linux x8 ... show more HTTP web-app probe; method=GET; path=/.git/config; status=403; user-agent=Mozilla/5.0 (X11; Linux x86_64) show less	Web App Attack
🇺🇸 Rip	2026-10-22 15:01:48 (33 minutes ago)	Restricted File Access Attempts	Port Scan Web App Attack
🇫🇮 YF	2026-10-22 15:01:36 (34 minutes ago)	Git config exposure probe	Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.228

🇧🇷 170.247.7.180

🇩🇪 162.158.111.8

🇺🇸 157.245.85.173

127.0.0.1

🇮🇳 122.183.45.63

🇪🇬 105.198.238.186

🇧🇩 103.143.35.218

🇭🇺 89.134.198.210

🇺🇸 76.18.43.134

🇫🇷 51.75.253.68

🇸🇬 47.79.13.21

🇹🇼 36.238.174.167

🇨🇳 8.148.226.5

🇨🇭 209.99.185.195

🇧🇷 209.14.12.251

🇺🇸 195.184.76.114

🇲🇽 189.234.134.125

🇨🇴 181.49.8.57

🇻🇳 180.93.54.135