JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 168.144.120.210

168.144.120.210 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 64%: ?

64%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇮🇳 India
City	Bashettihalli, Karnataka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 168.144.120.210

Whois 168.144.120.210

IP Abuse Reports for 168.144.120.210:

This IP address has been reported a total of 28 times from 16 distinct sources. 168.144.120.210 was first reported on May 21st 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 ptlab	2026-06-30 22:00:04 (14 hours ago)	Detected forbidden path/plugin attack from WP-host.	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 11:05:37 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 168.144.120.210 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 168.144.120.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 07:05:33.850292 2026] [security2:error] [pid 30126:tid 30126] [client 168.144.120.210:54174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|mail.zacharyschwartzman.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mail.zacharyschwartzman.com"] [uri "/"] [unique_id "akD__e9LTEP6012f_5Nb9AAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 pm33	2026-06-25 02:39:37 (6 days ago)	Unauthorized connections HTTP 403	Web App Attack
🇦🇹 centurion	2026-06-22 20:39:21 (1 week ago)	Blocked by UFW on ns03 [443/tcp] Source port: 36452 TTL: 46 Packet length: 60 TOS: 0x00 This report ... show more Blocked by UFW on ns03 [443/tcp] Source port: 36452 TTL: 46 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
Anonymous	2026-06-21 09:49:03 (1 week ago)	89-nginx-404 ...	Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-06-20 23:21:22 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from IN. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from IN. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: /welcome \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 grassau.com	2026-06-19 14:33:41 (1 week ago)	Port Scan detected from 168.144.120.210 (IN/India/Karnataka/Bengaluru/-).	Port Scan
🇩🇪 MBombeck	2026-06-13 21:47:32 (2 weeks ago)	Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures	Web App Attack
🇧🇪 cmbplf	2026-06-13 04:03:08 (2 weeks ago)	5.443 requests to many distinct domains in 1 hour (2w6d22h)	Brute-Force Bad Web Bot
🇳🇱 cybertailor	2026-06-11 13:32:14 (2 weeks ago)	168.144.120.210 - - [11/Jun/2026:17:49:09 +0500] "GET / HTTP/1.1" 404 146 "-" "Go-http-client/1.1" 1 ... show more 168.144.120.210 - - [11/Jun/2026:17:49:09 +0500] "GET / HTTP/1.1" 404 146 "-" "Go-http-client/1.1" 168.144.120.210 - - [11/Jun/2026:18:32:02 +0500] "GET / HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.0 Safari/537.36" 168.144.120.210 - - [11/Jun/2026:18:32:02 +0500] "GET / HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.0 Safari/537.36" 168.144.120.210 - - [11/Jun/2026:18:32:11 +0500] "GET / HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.0 Safari/537.36" 168.144.120.210 - - [11/Jun/2026:18:32:11 +0500] "GET / HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.0 Safari/537.36" ... show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-10 18:32:37 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 168.144.120.210 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 168.144.120.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 14:32:28.834282 2026] [security2:error] [pid 20798:tid 20798] [client 168.144.120.210:43384] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|fcc.robotrodeo.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "fcc.robotrodeo.net"] [uri "/"] [unique_id "aimtvO0cJV2uu_sz-Vxq1AAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-06-10 13:57:00 (2 weeks ago)		Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-10 13:33:37 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 168.144.120.210 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 168.144.120.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 09:33:28.495808 2026] [security2:error] [pid 10396:tid 10407] [client 168.144.120.210:4696] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|ioqm.aafm.us\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ioqm.aafm.us"] [uri "/"] [unique_id "ailnqIxJUCd61S11CSGPtgAAAEQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 updown.io	2026-06-09 19:17:07 (3 weeks ago)	{"level":"info","ts":1781029603.1461728,"logger":"http.log.access.log0","msg":"handled request","req ... show more {"level":"info","ts":1781029603.1461728,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"168.144.120.210","remote_port":"34758","client_ip":"168.144.120.210","proto":"HTTP/1.1","method":"GET","host":"drsq.status.updown.io","uri":"/","headers":{"User-Agent":["Go-http-client/1.1"],"Connection":["close"],"Accept-Encoding":["gzip"]}},"bytes_read":0,"user_id":"","duration":0.000077838,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://drsq.status.updown.io/"],"Content-Type":[]}} {"level":"info","ts":1781029941.0595105,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"168.144.120.210","remote_port":"37080","client_ip":"168.144.120.210","proto":"HTTP/1.1","method":"GET","host":"a.a.a.bb.ccc.dddd.1lps.status.updown.io","uri":"/","headers":{"User-Agent":["Go-http-client/1.1"],"Connection":["close"],"Accept-Encoding":["gzip"]}},"bytes_read":0,"user_id":"","duration":0.00005737,"size":0, ... show less	DDoS Attack Web App Attack
🇺🇸 TPI-Abuse	2026-06-06 00:32:15 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 168.144.120.210 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 168.144.120.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 20:32:10.875872 2026] [security2:error] [pid 5635:tid 5635] [client 168.144.120.210:5360] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.ankitoner.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ankitoner.com"] [uri "/"] [unique_id "aiNqish66CpojVcKfz9MQQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:4860:4801:6f:8000::1

🇧🇷 187.108.230.123

🇩🇪 167.94.146.58

🇺🇸 161.35.101.104

🇧🇪 158.173.67.70

🇨🇳 112.0.53.226

🇺🇸 104.243.35.34

🇺🇸 91.230.168.92

🇩🇪 68.183.212.68

🇿🇦 41.215.235.85

🇧🇪 34.53.158.15

🇬🇪 2.57.217.229

🇬🇧 2a06:4880:2000::35

🇸🇪 2603:1062:0:334::1e

🇸🇪 2603:1062:0:334::19

🇳🇱 204.76.203.206

🇸🇬 172.236.129.186

🇸🇬 172.217.43.150

🇭🇰 165.154.41.232

🇰🇷 158.180.79.132