JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 167.71.52.156

167.71.52.156 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 69%: ?

69%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 167.71.52.156

Whois 167.71.52.156

IP Abuse Reports for 167.71.52.156:

This IP address has been reported a total of 48 times from 27 distinct sources. 167.71.52.156 was first reported on February 27th 2021, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-18 04:22:37 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 167.71.52.156 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 167.71.52.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 00:22:32.301606 2026] [security2:error] [pid 12616:tid 12616] [client 167.71.52.156:43430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jussetcotradinglimited.co"] [uri "/.git/config"] [unique_id "alr_iDlios2Lg5U05Mz7PQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 02:10:58 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 167.71.52.156 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 167.71.52.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 22:10:52.368248 2026] [security2:error] [pid 1266828:tid 1266828] [client 167.71.52.156:50516] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.h2ofall.co"] [uri "/.git/config"] [unique_id "alrgrMk9JKHprPzRmcdTNQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 01:39:13 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 167.71.52.156 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 167.71.52.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 21:39:10.449418 2026] [security2:error] [pid 15912:tid 15912] [client 167.71.52.156:49588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.globalhotels.com.co"] [uri "/.git/config"] [unique_id "alrZPnVz6XkgaY6z1dkCJAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-18 01:35:01 (7 hours ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 01:23:58 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 167.71.52.156 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 167.71.52.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 21:23:52.041456 2026] [security2:error] [pid 19150:tid 19150] [client 167.71.52.156:34366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.genesis7.co"] [uri "/.git/config"] [unique_id "alrVqJ16OJVjhUiaePHBbAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 00:29:24 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 167.71.52.156 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 167.71.52.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 20:29:16.893446 2026] [security2:error] [pid 28770:tid 28770] [client 167.71.52.156:43468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.femalegamblers.mobileonlinecasinos.co"] [uri "/.git/config"] [unique_id "alrI3P42aDgf1xHmK708hAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 23:56:51 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 167.71.52.156 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 167.71.52.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 19:56:46.353883 2026] [security2:error] [pid 1504968:tid 1504968] [client 167.71.52.156:43080] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.epetsure.co"] [uri "/.git/config"] [unique_id "alrBPjUswqH8ovIGMieHggAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 ELYAZ	2026-07-17 23:43:25 (8 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 167.71.52.156 (DE/Germany/-): (CF_ENAB ... show more (mod_security) mod_security triggered on hostname [redacted] 167.71.52.156 (DE/Germany/-): (CF_ENABLE) show less	SQL Injection
🇳🇿 Antinson	2026-07-17 23:23:28 (9 hours ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇬🇧 Bytemark	2026-07-17 23:02:29 (9 hours ago)	167.71.52.156 - - [18/Jul/2026:00:02:28 +0100] "GET /arquivos/javascript/responsive_filemanager/file ... show more 167.71.52.156 - - [18/Jul/2026:00:02:28 +0100] "GET /arquivos/javascript/responsive_filemanager/filemanager/dialog.php HTTP/1.1" 301 643 "https://www.distancelearningcentre.co//arquivos/javascript/responsive_filemanager/filemanager/dialog.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 22:48:59 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 167.71.52.156 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 167.71.52.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 18:48:53.362414 2026] [security2:error] [pid 980179:tid 980179] [client 167.71.52.156:38752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dev.integratic.com.co"] [uri "/.git/config"] [unique_id "alqxVXFXmfBVMdfl9LwuLQAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-07-17 22:28:49 (10 hours ago)		Brute-Force Web App Attack
Anonymous	2026-07-17 22:05:30 (10 hours ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (58/60 min)'; Requests=58	Port Scan
🇺🇸 TPI-Abuse	2026-07-17 21:45:50 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 167.71.52.156 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 167.71.52.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 17:45:43.997420 2026] [security2:error] [pid 21082:tid 21082] [client 167.71.52.156:58078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cookes.co"] [uri "/.git/config"] [unique_id "alqih5kLUq9IqDJI2X68IQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 21:22:55 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 167.71.52.156 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 167.71.52.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 17:22:49.697234 2026] [security2:error] [pid 12279:tid 12279] [client 167.71.52.156:56390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cmexico.co"] [uri "/.git/config"] [unique_id "alqdKSF9_llS0Lba5zfHCQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.11.196.79

🇺🇸 162.216.150.20

🇲🇦 105.154.166.239

🇳🇱 45.148.10.147

🇬🇧 35.203.210.244

🇬🇧 31.171.130.52

🇮🇳 20.204.81.42

🇺🇸 20.163.74.20

🇯🇵 8.216.4.35

🇳🇱 158.94.209.225

🇻🇳 118.69.226.76

🇮🇳 103.149.197.34

🇫🇷 85.69.240.210

🇷🇴 80.94.92.234

🇺🇸 34.150.213.175

🇳🇱 195.178.110.217

🇺🇸 162.35.175.181

🇫🇷 91.196.152.19

🇧🇬 79.124.58.142

🇱🇹 77.90.185.20