AbuseIPDB » 144.76.68.124

144.76.68.124 was found in our database!

This IP was reported 177 times. Confidence of Abuse is 43%: ?

43%

ISP	Hetzner Online GmbH
Usage Type	Search Engine Spider
Hostname(s)	static.124.68.76.144.clients.your-server.de
Domain Name	hetzner.de
Country	Germany
City	Falkenstein, Sachsen

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 144.76.68.124

Whois 144.76.68.124

IP Abuse Reports for 144.76.68.124:

This IP address has been reported a total of 177 times from 48 distinct sources. 144.76.68.124 was first reported on December 3rd 2020, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-10-05 03:14:01 (2 days ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
conseilgouz	2024-10-04 16:20:42 (2 days ago)	ecw-Joomla User : try to access forms...	Hacking
TPI-Abuse	2024-09-25 05:38:17 (1 week ago)	(mod_security) mod_security (id:220030) triggered by 144.76.68.124 (static.124.68.76.144.clients.you ... show more(mod_security) mod_security (id:220030) triggered by 144.76.68.124 (static.124.68.76.144.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 25 01:38:10.852777 2024] [security2:error] [pid 6365:tid 6365] [client 144.76.68.124:48156] [client 144.76.68.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "-C" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "19"] [id "220030"] [rev "9"] [msg "COMODO WAF: Vulnerability in PHP before 5.3.12 and 5.4.x before 5.4.2 (CVE-2012-1823)\|\|www.bestcountryclubs.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.bestcountryclubs.com"] [uri "/country-club-directory/countryclubs-wyoming/teton-pines-country-club-"] [unique_id "ZvOhwsvM_zz52Zevrk1KwAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-09-20 02:56:50 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 144.76.68.124 (static.124.68.76.144.clients.you ... show more(mod_security) mod_security (id:210730) triggered by 144.76.68.124 (static.124.68.76.144.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 19 22:56:45.835001 2024] [security2:error] [pid 18952:tid 18952] [client 144.76.68.124:59122] [client 144.76.68.124] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|anbrusgoldens.com\|F\|2"] [data ".nancygaffney.smugmug.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "anbrusgoldens.com"] [uri "/www.nancygaffney.smugmug.com"] [unique_id "ZuzkbQmiX07jQqS-raLmRQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
JJR	2024-09-20 00:45:28 (2 weeks ago)	Automated report (2024-09-19T17:45:28-07:00). Scraper detected.	Open Proxy Bad Web Bot
JJR	2024-09-20 00:13:07 (2 weeks ago)	Automated report (2024-09-19T17:13:07-07:00). Scraper detected.	Open Proxy Bad Web Bot
Anonymous	2024-09-19 17:59:44 (2 weeks ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
MarkGGN	2024-09-17 22:53:24 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Bad Web Bot Web App Attack
S.O.B.A. Dev.	2024-09-10 00:27:48 (3 weeks ago)	Threat Blocked by BeeHive from (ASN:24940) (Network:HETZNER-AS) (Host:soba.dev) (Method:GET) (Protoc ... show moreThreat Blocked by BeeHive from (ASN:24940) (Network:HETZNER-AS) (Host:soba.dev) (Method:GET) (Protocol:HTTP/1.1) (Timestamp:2024-09-10T00:27:48Z) show less	Web Spam Brute-Force Web App Attack
bigscoots.com	2024-09-09 00:53:01 (4 weeks ago)	(PERMBLOCK) 144.76.68.124 (DE/Germany/static.124.68.76.144.clients.your-server.de) has had more than ... show more(PERMBLOCK) 144.76.68.124 (DE/Germany/static.124.68.76.144.clients.your-server.de) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force SSH
Mendip_Defender	2024-09-08 16:17:09 (4 weeks ago)	144.76.68.124 - - [08/Sep/2024:17:17:14 +0100] "GET /robots.txt HTTP/2.0" 200 136 "-" "serpstatbot/2 ... show more144.76.68.124 - - [08/Sep/2024:17:17:14 +0100] "GET /robots.txt HTTP/2.0" 200 136 "-" "serpstatbot/2.1 (advanced backlink tracking bot; https://serpstatbot.com/; [email protected])" ... show less	Bad Web Bot
bigscoots.com	2024-08-28 10:52:22 (1 month ago)	(PERMBLOCK) 144.76.68.124 (DE/Germany/static.124.68.76.144.clients.your-server.de) has had more than ... show more(PERMBLOCK) 144.76.68.124 (DE/Germany/static.124.68.76.144.clients.your-server.de) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force SSH
juutis	2024-08-28 03:45:54 (1 month ago)	Multiple WAF abuses - IP blocked	Hacking Brute-Force Web App Attack
BlueWire Hosting	2024-08-09 14:10:09 (1 month ago)	Detected as a bad bot	Bad Web Bot
TPI-Abuse	2024-08-05 10:00:56 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 144.76.68.124 (static.124.68.76.144.clients.you ... show more(mod_security) mod_security (id:210730) triggered by 144.76.68.124 (static.124.68.76.144.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 05 06:00:50.760482 2024] [security2:error] [pid 11193:tid 11305] [client 144.76.68.124:33598] [client 144.76.68.124] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.fishrapper.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.fishrapper.com"] [uri "/images/2020-fishing-link-hovers/debug.log"] [unique_id "ZrCi0qSyuzIls5pJJYPb0gAAANg"] show less	Brute-Force Bad Web Bot Web App Attack