JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 174.142.97.123

174.142.97.123

Neutral Activity

68 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Leaseweb Canada Inc.

Usage Type

Data Center/Web Hosting/Transit

ASN

AS32613

Domain Name

leaseweb.com

Country

🇨🇦 Canada

City

Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

174.142.97.123 has been reported 68 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 174.142.97.123:

This IP address has been reported a total of 68 times from 39 distinct sources. 174.142.97.123 was first reported on June 2nd 2025, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-07-15 07:55:00 (1 year ago)	Telerik.Web.UI.RadAsyncUpload.Handling.Arbitrary.File.Upload	Web App Attack
🇩🇪 LRob	2025-07-08 00:04:10 (1 year ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇺🇸 zorrigas	2025-07-07 18:48:50 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 174.142.97.123 (CA/Canada/-): 5 in the last 360 ... show more (mod_security) mod_security (id:210492) triggered by 174.142.97.123 (CA/Canada/-): 5 in the last 3600 secs show less	Brute-Force
🇺🇸 TPI-Abuse	2025-07-07 18:42:59 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 174.142.97.123 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 174.142.97.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 07 14:42:51.858557 2025] [security2:error] [pid 28579:tid 28579] [client 174.142.97.123:26338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stmaarten-boatcharters.com"] [uri "/sftp-config.json"] [unique_id "aGwVK6NkwH5QJvoB9ODO7wAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 John Doe	2025-07-07 16:56:38 (1 year ago)	$f2bV_matches	DDoS Attack Web Spam Hacking Bad Web Bot Web App Attack
🇳🇱 Joop	2025-07-07 16:54:53 (1 year ago)	2025-07-07 18:54:50 +0200 s5 /wp-includes/ALFA_DATA/alfacgiapi/	Web App Attack
🇺🇸 TPI-Abuse	2025-07-07 16:33:46 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 174.142.97.123 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 174.142.97.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 07 12:33:39.680429 2025] [security2:error] [pid 303:tid 303] [client 174.142.97.123:13413] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|rwfrancis.com\|F\|2"] [data ".web.ui.webresource.axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rwfrancis.com"] [uri "/Telerik.Web.UI.WebResource.axd"] [unique_id "aGv246kP4iIthO9nYEG6yQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 Progetto1	2025-07-07 16:05:02 (1 year ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇬🇧 rakkor	2025-07-07 15:44:03 (1 year ago)	2025-07-07T16:44:02+01:00 NAS [Mon Jul 07 16:44:02.404503 2025] [proxy_fcgi:error] [pid 28278:tid 14 ... show more 2025-07-07T16:44:02+01:00 NAS [Mon Jul 07 16:44:02.404503 2025] [proxy_fcgi:error] [pid 28278:tid 140685067937472] [client 174.142.97.123:57886] AH01071: Got error 'Primary script unknown' ... show less	Hacking Brute-Force
Anonymous	2025-07-07 15:10:33 (1 year ago)	Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1	Hacking Web App Attack
🇩🇪 Kreapptivo	2025-07-07 15:10:27 (1 year ago)	[07/Jul/2025:17:10:23 +0200] Web-Request: "GET /.git/config", User-Agent: "Mozilla/5.0 (Windows NT 1 ... show more [07/Jul/2025:17:10:23 +0200] Web-Request: "GET /.git/config", User-Agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.141 Safari/537.36" show less	Bad Web Bot Web App Attack
🇫🇮 YF	2025-07-07 15:01:01 (1 year ago)		Brute-Force Web App Attack
🇳🇿 Tripwire	2025-07-07 13:58:24 (1 year ago)	Scanning for exploits - /.aws/credentials	Hacking Web App Attack
🇮🇹 VHosting	2025-07-07 11:50:04 (1 year ago)	Detected attack by Imunify360	Brute-Force Web App Attack
🇳🇱 artificialred.nl	2025-07-07 08:29:02 (1 year ago)	[ModSecurity probing] access_ssl_log:174.142.97.123 - - [07/Jul/2025:10:25:24 +0200] GET /.ftpconfig ... show more [ModSecurity probing] access_ssl_log:174.142.97.123 - - [07/Jul/2025:10:25:24 +0200] GET /.ftpconfig HTTP/1.0" 404 26543 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML show less	Port Scan Web App Attack

Showing 1 to 15 of 68 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.166.12.196

🇧🇷 177.45.231.98

🇧🇬 109.160.32.78

🇹🇭 203.154.158.195

🇭🇰 192.151.255.195

🇫🇷 91.231.89.223

🇬🇧 87.236.176.61

🇭🇰 38.237.241.247

🇸🇬 35.240.188.162

🇩🇪 213.209.159.108

🇧🇷 189.125.111.177

🇺🇸 162.216.150.138

🇻🇳 116.98.247.181

🇧🇬 109.160.32.62

🇮🇩 103.98.176.164

🇸🇬 84.75.155.10

🇪🇸 83.38.117.200

🇩🇪 69.5.169.174

🇮🇳 65.0.158.225

🇺🇸 2607:f8b0:4004:c17::126