JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.201.244.120

195.201.244.120 was found in our database!

This IP was reported 106 times. Confidence of Abuse is 46%: ?

46%

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	static.120.244.201.195.clients.your-server.de
Domain Name	hetzner.com
Country	🇩🇪 Germany
City	Falkenstein, Saxony

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.201.244.120

Whois 195.201.244.120

IP Abuse Reports for 195.201.244.120:

This IP address has been reported a total of 106 times from 39 distinct sources. 195.201.244.120 was first reported on January 23rd 2024, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Echobit	2026-07-05 20:25:50 (7 hours ago)	Crawling, BadBot, Fake User-Agent, Ignore robots.txt	Hacking Bad Web Bot
🇪🇸 pipeline.es	2026-07-05 13:33:38 (14 hours ago)	Web scanning / probing for vulnerable paths \| URL: /ofertas-viajes/categorias/circuitos/asia/hong-ko ... show more Web scanning / probing for vulnerable paths \| URL: /ofertas-viajes/categorias/circuitos/asia/hong-kong-y-bali-circuito-12-dias-con-visitas-y-playa-cupos-y-precios-garantizados-apr-sep-desde-2395-euro-.htm \| Evidence: microsites.aevav.es 195.201.244.120 - - [05/Jul/2026:15:32:41 +0200] \"GET /ofertas-viajes/categorias/circuitos/asia/hong-kong-y-bali-circuito-12-dias-con-visitas-y-playa-cupos-y-precios-garantizados-apr-sep-desde-2395-euro-.htm HTTP/1.1\" 404 3398 \"https://tajmahal.aevav.es/ofertas-viajes/categorias/circuitos/asia/hong-kong-y-bali-circuito-12-dias-con-visitas-y-playa-cupos-y-precios-garantizados \| ASN: Hetzner Online GmbH \| Country: DE show less	Port Scan Web App Attack
🇩🇪 ghostwarriors	2026-07-02 22:20:35 (3 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-30 19:08:22 (5 days ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Mali ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Malicious User-Agent show less	Bad Web Bot Web App Attack
Anonymous	2026-06-29 18:06:13 (6 days ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Mali ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Malicious User-Agent show less	Bad Web Bot Web App Attack
Anonymous	2026-06-26 20:02:52 (1 week ago)	Web attack	Bad Web Bot Web App Attack
🇩🇪 mwgbr	2026-06-24 20:15:28 (1 week ago)	195.201.244.120 (DE/Germany/static.120.244.201.195.clients.your-server.de), more than 10 Apache 403 ... show more 195.201.244.120 (DE/Germany/static.120.244.201.195.clients.your-server.de), more than 10 Apache 403 hits show less	Hacking
🇺🇸 TPI-Abuse	2026-06-23 06:17:07 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 195.201.244.120 (static.120.244.201.195.clients ... show more (mod_security) mod_security (id:210730) triggered by 195.201.244.120 (static.120.244.201.195.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 02:17:02.910845 2026] [security2:error] [pid 2791:tid 2791] [client 195.201.244.120:32503] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.karsini-services.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.karsini-services.com"] [uri "/[email protected]"] [unique_id "ajok3oSA5xCy-S1V5nWJCQAAAA8"], referer: https://www.karsini-services.com/[email protected] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-13 02:12:14 (3 weeks ago)	Web attack	Bad Web Bot Web App Attack
Anonymous	2026-06-08 03:07:09 (4 weeks ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Mali ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Malicious User-Agent show less	Bad Web Bot Web App Attack
🇩🇪 psauxit	2026-06-02 19:29:44 (1 month ago)	Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ... show more Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping show less	Web App Attack Hacking
Anonymous	2026-05-31 04:01:31 (1 month ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Mali ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Malicious User-Agent show less	Bad Web Bot Web App Attack
🇫🇮 YF	2026-05-20 08:05:51 (1 month ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
Anonymous	2026-04-29 00:05:22 (2 months ago)	Blocked: Reason='Suspicious traffic score=65 (review-based detection)'; Requests=156	Hacking
🇺🇸 TPI-Abuse	2026-04-27 22:36:57 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 195.201.244.120 (static.120.244.201.195.clients ... show more (mod_security) mod_security (id:210730) triggered by 195.201.244.120 (static.120.244.201.195.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 18:36:50.103423 2026] [security2:error] [pid 17952:tid 17972] [client 195.201.244.120:64949] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.aafm.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.aafm.org"] [uri "/http/charteredfinancialmanager.com"] [unique_id "ae_lAnhrv7YoORuRtZQF8gAAAVI"], referer: https://www.aafm.org/http//charteredfinancialmanager.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 106 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.90.244.18

🇺🇸 205.210.31.102

🇺🇸 195.184.76.207

🇺🇸 173.239.254.137

🇬🇧 45.82.76.128

🇺🇸 13.221.244.98

🇬🇧 5.252.83.162

🇧🇷 205.210.31.162

🇺🇸 154.83.197.56

🇺🇸 135.119.97.71

🇻🇳 103.237.144.204

🇻🇳 103.67.162.139

🇺🇸 97.74.230.245

🇨🇳 14.153.227.105

🇹🇭 1.4.171.43

🇭🇰 194.187.178.213

🇺🇸 193.37.33.34

🇺🇸 143.244.60.175

🇨🇳 123.160.223.72

🇸🇬 101.32.114.9