JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 168.144.157.130

168.144.157.130 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 55%: ?

55%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇮🇳 India
City	Bashettihalli, Karnataka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 168.144.157.130

Whois 168.144.157.130

IP Abuse Reports for 168.144.157.130:

This IP address has been reported a total of 24 times from 13 distinct sources. 168.144.157.130 was first reported on May 27th 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-07-01 14:37:56 (15 hours ago)	Blocked by UFW (TCP on 443) Source port: 15294 TTL: 52 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 443) Source port: 15294 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 168.144.157.130) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 21:53:11 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 168.144.157.130 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 168.144.157.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 17:53:08.515501 2026] [security2:error] [pid 12405:tid 12405] [client 168.144.157.130:37268] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|mail.yukihouse.hk\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mail.yukihouse.hk"] [uri "/"] [unique_id "akGXxBjJM_oM0cQwUHRQYQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 pm33	2026-06-25 02:21:22 (1 week ago)	Unauthorized connections HTTP 403	Web App Attack
🇵🇱 sefinek.net	2026-06-20 23:32:45 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from IN. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from IN. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: /welcome \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-20 06:45:58 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 168.144.157.130 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 168.144.157.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 02:45:53.115396 2026] [security2:error] [pid 26210:tid 26210] [client 168.144.157.130:39700] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|autodiscover.juniperhills.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "autodiscover.juniperhills.net"] [uri "/"] [unique_id "ajY3IUl_pTcpLDmClA3I_gAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-06-19 14:35:52 (1 week ago)	Port Scan detected from 168.144.157.130 (IN/India/Karnataka/Bengaluru/-).	Port Scan
🇺🇸 TPI-Abuse	2026-06-18 10:44:47 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 168.144.157.130 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 168.144.157.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 06:44:43.494981 2026] [security2:error] [pid 13333:tid 13406] [client 168.144.157.130:58260] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.econpage.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.econpage.com"] [uri "/"] [unique_id "ajPMG4WJ3gz7maXF_8o2EwAAAQQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 06:27:40 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 168.144.157.130 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 168.144.157.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 02:27:36.580445 2026] [security2:error] [pid 11269:tid 11269] [client 168.144.157.130:27944] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.ceta-arts.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ceta-arts.com"] [uri "/"] [unique_id "ajDs2EbW0AnZHdtI0-oOsQAAAFc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 MBombeck	2026-06-13 21:40:58 (2 weeks ago)	Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures	Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 13:33:25 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 168.144.157.130 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 168.144.157.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 09:33:21.876366 2026] [security2:error] [pid 29386:tid 29428] [client 168.144.157.130:62558] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|aapmapac.aafm.us\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "aapmapac.aafm.us"] [uri "/"] [unique_id "ailnoY1YasQ5d-R5pGLhtgAAAMA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 updown.io	2026-06-09 19:14:57 (3 weeks ago)	{"level":"info","ts":1781029582.5686517,"logger":"http.log.access.log0","msg":"handled request","req ... show more {"level":"info","ts":1781029582.5686517,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"168.144.157.130","remote_port":"42516","client_ip":"168.144.157.130","proto":"HTTP/1.1","method":"GET","host":"tdww.status.updown.io","uri":"/","headers":{"User-Agent":["Go-http-client/1.1"],"Connection":["close"],"Accept-Encoding":["gzip"]}},"bytes_read":0,"user_id":"","duration":0.000087858,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://tdww.status.updown.io/"],"Content-Type":[]}} {"level":"info","ts":1781029657.259579,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"168.144.157.130","remote_port":"48704","client_ip":"168.144.157.130","proto":"HTTP/1.1","method":"GET","host":"www.jwdd.status.updown.io","uri":"/","headers":{"Accept-Encoding":["gzip"],"User-Agent":["Go-http-client/1.1"],"Connection":["close"]}},"bytes_read":0,"user_id":"","duration":0.000081736,"size":0,"status":308," ... show less	DDoS Attack Web App Attack
🇦🇺 MAGIC	2026-06-08 02:00:59 (3 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2026-06-07 22:23:57 (3 weeks ago)	[08/Jun/2026:08:11:31 +1000] "GET /welcome HTTP/1.1" 404 236 "https://[X].[X]/welcome" "Mozilla/5.0 ... show more [08/Jun/2026:08:11:31 +1000] "GET /welcome HTTP/1.1" 404 236 "https://[X].[X]/welcome" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.0 Safari/537.36" [08/Jun/2026:08:23:56 +1000] "GET /welcome HTTP/1.1" 404 236 "https://www.[X].[X]/welcome" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.0 Safari/537.36" show less	Hacking Web App Attack
🇭🇺 lid3rc	2026-06-05 06:17:00 (3 weeks ago)	/welcome	Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 08:34:47 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 168.144.157.130 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 168.144.157.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 04:34:42.752622 2026] [security2:error] [pid 22679:tid 22679] [client 168.144.157.130:18274] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.jesuspuzzle.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jesuspuzzle.com"] [uri "/"] [unique_id "aiE4on86X45o3QeHBdnzTQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 107.167.37.113

🇺🇸 104.243.42.167

🇺🇸 104.243.35.45

🇳🇱 89.21.67.177

🇫🇷 62.210.142.165

🇧🇷 205.210.31.251

🇧🇷 205.210.31.161

🇺🇸 199.30.231.6

🇧🇪 198.235.24.224

🇰🇷 121.167.147.112

🇨🇳 27.20.120.93

🇨🇳 14.103.122.182

🇸🇬 2400:8901::f03c:93ff:fef8:5fbc

🇧🇷 186.225.144.106

🇻🇳 180.93.32.181

🇫🇷 178.33.138.134

🇺🇸 165.227.55.4

🇹🇷 95.3.76.162

🇷🇴 92.118.39.14

🇺🇸 72.167.48.122