AbuseIPDB » 144.172.73.50

Check an IP Address, Domain Name, or Subnet

e.g. 34.239.147.7, microsoft.com, or 5.188.10.0/24

144.172.73.50 was found in our database!

This IP was reported 1,316 times. Confidence of Abuse is 100%: ?

100%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	Frantech Solutions
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	tor-exit
Domain Name	frantech.ca
Country	Netherlands
City	Amsterdam, Noord-Holland

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 144.172.73.50

Whois 144.172.73.50

IP Abuse Reports for 144.172.73.50:

This IP address has been reported a total of 1,316 times from 357 distinct sources. 144.172.73.50 was first reported on January 5th 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
SpaceHost-Server	14 Jun 2022	144.172.73.50 - - [14/Jun/2022:09:31:40 +0200] "POST /xmlrpc.php HTTP/1.0" 200 733 "-" "Mozilla/5.0 ... show more144.172.73.50 - - [14/Jun/2022:09:31:40 +0200] "POST /xmlrpc.php HTTP/1.0" 200 733 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 144.172.73.50 - - [14/Jun/2022:09:31:41 +0200] "POST /xmlrpc.php HTTP/1.0" 200 733 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 144.172.73.50 - - [14/Jun/2022:09:31:41 +0200] "POST /xmlrpc.php HTTP/1.0" 200 733 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" show less	Hacking Web App Attack
el-brujo	13 Jun 2022	13/Jun/2022:10:19:01 +0200Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 144.172 ... show more13/Jun/2022:10:19:01 +0200Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 144.172.73.50] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "735"] [id "920350"] [msg "Host header is a numeric IP address"] [data "91.126.217.153"] [severity "WARNING"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "91.126.217.153"] [uri "/a2billing/config.all.php"] [unique_id "Yqby9exPfwlSvFgKzPB2ZAAAAIo"] ... show less	Hacking Web App Attack
SpaceHost-Server	12 Jun 2022	144.172.73.50 - - [13/Jun/2022:04:00:22 +0200] "POST /xmlrpc.php HTTP/1.0" 200 700 "-" "Mozilla/5.0 ... show more144.172.73.50 - - [13/Jun/2022:04:00:22 +0200] "POST /xmlrpc.php HTTP/1.0" 200 700 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10; rv:33.0) Gecko/20100101 Firefox/33.0" 144.172.73.50 - - [13/Jun/2022:04:00:24 +0200] "POST /xmlrpc.php HTTP/1.0" 200 700 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10; rv:33.0) Gecko/20100101 Firefox/33.0" 144.172.73.50 - - [13/Jun/2022:04:00:25 +0200] "POST /xmlrpc.php HTTP/1.0" 200 700 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10; rv:33.0) Gecko/20100101 Firefox/33.0" show less	Hacking Web App Attack
Anonymous	12 Jun 2022	kidness.family 144.172.73.50 [12/Jun/2022:22:52:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5503 "-" " ... show morekidness.family 144.172.73.50 [12/Jun/2022:22:52:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5503 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.141 Safari/537.36 Edg/87.0.664.75" kidness.family 144.172.73.50 [12/Jun/2022:22:52:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5503 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.141 Safari/537.36 Edg/87.0.664.75" show less	Web App Attack
trbs	12 Jun 2022	01,1-01/01 [bc01/m23] +100,00 PostRequest-Spammer scoring: nairobi	Phishing Web Spam
Anonymous	08 Jun 2022		Web Spam Bad Web Bot
DUBREUIL	08 Jun 2022	As always with frantech.ca	DDoS Attack Open Proxy Port Scan Hacking SQL Injection Brute-Force Web App Attack SSH
gu-alvareza	07 Jun 2022	WordPress.xmlrpc.Pingback.DoS	DDoS Attack
varlet	06 Jun 2022	unallowed DokuWiki connection after abuse	Blog Spam
IrisFlower	06 Jun 2022	Unauthorized connection attempt detected from IP address 144.172.73.50 to port 443 [J]	Port Scan Hacking
ozisp.com.au	05 Jun 2022	US_FranTech_<33>1654476500 [1:2522021:4815] ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffi ... show moreUS_FranTech_<33>1654476500 [1:2522021:4815] ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic group 22 [Classification: Misc Attack] [Priority: 2] {TCP} 144.172.73.50:59724 show less	Open Proxy
Ba-Yu	04 Jun 2022	WP-xmlrpc exploit	Web Spam Blog Spam Hacking Exploited Host Web App Attack
Olivia Davis	04 Jun 2022		Web Spam
bsoft.de	04 Jun 2022	144.172.73.50 - - [04/Jun/2022:08:22:08 +0200] "GET /wp-login.php HTTP/1.1" 200 10095 "-" "Mozilla/5 ... show more144.172.73.50 - - [04/Jun/2022:08:22:08 +0200] "GET /wp-login.php HTTP/1.1" 200 10095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:61.0) Gecko/20100101 Firefox/61.0" 144.172.73.50 - - [04/Jun/2022:08:22:11 +0200] "GET /wp-login.php HTTP/1.1" 200 10095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:61.0) Gecko/20100101 Firefox/61.0" 144.172.73.50 - - [04/Jun/2022:08:22:13 +0200] "POST /wp-login.php HTTP/1.1" 200 10886 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:61.0) Gecko/20100101 Firefox/61.0" show less	Web App Attack
gu-alvareza	03 Jun 2022	WordPress.xmlrpc.Pingback.DoS	DDoS Attack