JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 167.172.172.214

167.172.172.214 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 167.172.172.214

Whois 167.172.172.214

IP Abuse Reports for 167.172.172.214:

This IP address has been reported a total of 25 times from 21 distinct sources. 167.172.172.214 was first reported on April 3rd 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 sefinek.net	2026-04-21 09:09:34 (2 months ago)	Honeypot hit: HTTP/1.1 request on 8086 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) ... show more Honeypot hit: HTTP/1.1 request on 8086 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate; 8086 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 xmission.com	2026-04-21 08:33:12 (2 months ago)	Blocked by UFW (TCP on 465) Source port: 61004 TTL: 238 Packet length: 44 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 465) Source port: 61004 TTL: 238 Packet length: 44 TOS: 0x08 This report (for 167.172.172.214) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-04-21 08:10:07 (2 months ago)	2026-04-21T11:10:06.748216+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:f ... show more 2026-04-21T11:10:06.748216+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:fd:74:70:71:9e:08:00 SRC=167.172.172.214 DST=10.0.0.30 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=55061 PROTO=TCP SPT=61001 DPT=12000 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇧🇪 voormedia	2026-04-09 15:49:02 (3 months ago)	Accessed trap at '/wp-admin/install.php'	Web App Attack
🇺🇸 TPI-Abuse	2026-04-07 19:37:51 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 167.172.172.214 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 167.172.172.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 15:37:47.230854 2026] [security2:error] [pid 1417405:tid 1417405] [client 167.172.172.214:50150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jimmyshakes.org"] [uri "/wp-config.php"] [unique_id "adVdC5lk8JtfWg27aUI4ZQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-07 18:03:37 (3 months ago)	Web attack	Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting	2026-04-07 17:41:07 (3 months ago)	(upload_shell) srv101 Shell upload 167.172.172.214 (DE/Germany/-): 1 in the last 3600 secs; Ports: * ... show more (upload_shell) srv101 Shell upload 167.172.172.214 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇪 FeG Deutschland	2026-04-07 16:53:32 (3 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-04-07 13:15:49 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 167.172.172.214 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 167.172.172.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 09:15:44.755541 2026] [security2:error] [pid 1427385:tid 1427385] [client 167.172.172.214:53012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "siedersoft.com.ar"] [uri "/wp-config.php"] [unique_id "adUDgB1bdCLle3DOPOr-WQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-04-07 03:31:14 (3 months ago)	210 requests with url.path *.alfa	Brute-Force Bad Web Bot
🇵🇹 Information Security	2026-04-06 19:44:25 (3 months ago)	Web App Attack	Web App Attack
🇺🇸 ipblock.com	2026-04-06 17:43:00 (3 months ago)	IPBlock protected site ID [4055-d][s=02]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇵🇹 joaomdsferro	2026-04-06 09:22:00 (3 months ago)	167.172.172.214 - - [04/Apr/2026:15:32:21 +0000] "GET /.well-known/wp-signup.php HTTP/1.1" 404	Web Spam Web App Attack Hacking
🇳🇿 Antinson	2026-04-06 08:30:57 (3 months ago)	Scraping with a high error ratio and request rate	Bad Web Bot
Anonymous	2026-04-06 05:31:02 (3 months ago)	Bot / scanning and/or hacking attempts: GET /lock360.php?daksldlkdsadas=1 HTTP/1.1, GET /5.php HTTP/ ... show more Bot / scanning and/or hacking attempts: GET /lock360.php?daksldlkdsadas=1 HTTP/1.1, GET /5.php HTTP/1.1 show less	Hacking Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 106.13.170.216

🇺🇸 91.230.168.25

🇫🇷 85.217.140.46

🇭🇰 199.45.154.132

🇨🇳 125.93.252.89

🇵🇰 103.166.103.173

🇫🇷 85.217.140.40

🇳🇱 77.83.39.197

🇳🇱 45.198.224.5

🇹🇿 196.43.73.138

🇧🇷 191.53.11.205

🇦🇷 190.177.141.47

🇺🇸 162.216.150.104

🇺🇸 162.216.148.0

🇺🇸 154.92.23.249

🇺🇸 104.243.37.196

🇮🇳 103.214.63.111

🇹🇬 102.64.220.218

🇧🇬 85.187.236.68

🇩🇪 69.5.169.124