JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.237.121.157

212.237.121.157 was found in our database!

This IP was reported 65 times. Confidence of Abuse is 77%: ?

77%

ISP	Kurdistan Net Company for Computer and Internet Ltd.
Usage Type	Fixed Line ISP
ASN	AS206206
Domain Name	knet-telecom.com
Country	🇮🇶 Iraq
City	Baghdad, Baghdad

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.237.121.157

Whois 212.237.121.157

IP Abuse Reports for 212.237.121.157:

This IP address has been reported a total of 65 times from 33 distinct sources. 212.237.121.157 was first reported on February 23rd 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇱 spd.co.il	2026-06-02 23:02:10 (1 week ago)	Web application attack detected	Hacking Web App Attack
🇮🇩 Burayot	2026-06-01 00:20:11 (2 weeks ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 212.237.121.157 (IQ/Iraq/-): 1 in t ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 212.237.121.157 (IQ/Iraq/-): 1 in the last 3600 secs show less	Web App Attack
Anonymous	2026-05-31 22:47:22 (2 weeks ago)	fail2ban_an apache-modsecurity [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [uri "/.git/H ... show more fail2ban_an apache-modsecurity [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [uri "/.git/HEAD"] show less	Bad Web Bot Web App Attack
Anonymous	2026-05-31 22:19:01 (2 weeks ago)	(caddyscan) Scanner path probe from 212.237.121.157 (IQ/Iraq/-): 5 in the last 3600 secs; Ports: ; ... show more (caddyscan) Scanner path probe from 212.237.121.157 (IQ/Iraq/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 212.237.121.157 - - [31/May/2026:22:18:51 +0000] "GET /.git/HEAD HTTP/1.1" [REDACTED] 200 2627 212.237.121.157 - - [31/May/2026:22:18:52 +0000] "GET /.git/HEAD HTTP/1.1" [REDACTED] 200 2627 212.237.121.157 - - [31/May/2026:22:18:53 +0000] "GET /.git/HEAD HTTP/1.1" [REDACTED] 200 2627 212.237.121.157 - - [31/May/2026:22:18:58 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 212.237.121.157 - - [31/May/2026:22:18:58 +0000] "GET /app/.env HTTP/1.1" show less	Port Scan
🇬🇧 thetomtaylor.co.uk	2026-05-31 14:08:01 (2 weeks ago)	Fail2Ban - [RECIDIVE]Repeat offender across multiple jails on recidive ... [ice02]	Brute-Force Bad Web Bot Exploited Host Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-05-31 13:06:02 (2 weeks ago)	Fail2Ban - [RECIDIVE]Repeat offender across multiple jails on recidive ... [ice01,wa01,wa02]	Brute-Force Bad Web Bot Exploited Host Web App Attack
Anonymous	2026-05-31 11:01:59 (2 weeks ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IQ, Attack patterns: Clou ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IQ, Attack patterns: Cloud secrets probing, Malicious User-Agent show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-31 08:29:16 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 212.237.121.157 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 212.237.121.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 04:29:12.892903 2026] [security2:error] [pid 8623:tid 8623] [client 212.237.121.157:60872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thegolfhole.com"] [uri "/.git/HEAD"] [unique_id "ahvxWI2CEGS7DlbG0_KJagAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-31 08:01:35 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 212.237.121.157 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 212.237.121.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 04:01:28.051725 2026] [security2:error] [pid 26432:tid 26432] [client 212.237.121.157:58355] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kneupper.com"] [uri "/.git/HEAD"] [unique_id "ahvq2AbZlBRgqvR7-kB7LAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 maxpower	2026-05-31 07:34:34 (2 weeks ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 212.237.121.157 (IQ/Iraq/-): 2 in the la ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 212.237.121.157 (IQ/Iraq/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 212.237.121.157 - - [31/May/2026:09:34:22 +0200] "GET /.git/HEAD HTTP/1.1" 403 146 "-" "python-requests/2.31.0" "-" host=deflorentiis.com 212.237.121.157 - - [31/May/2026:09:34:28 +0200] "GET /app/.env HTTP/1.1" 403 146 "-" "python-requests/2.31.0" "-" host=deflorentiis.com show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-31 07:07:49 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 212.237.121.157 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 212.237.121.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 03:07:44.553480 2026] [security2:error] [pid 31554:tid 31554] [client 212.237.121.157:60356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clintcurrin.com"] [uri "/.git/HEAD"] [unique_id "ahveQF-n1gfM_G8aRyu0EgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 paissangroup	2026-05-31 06:39:49 (2 weeks ago)	Multiple WAF Violations	Web App Attack
🇩🇪 gadix	2026-05-31 06:05:54 (2 weeks ago)	[31/May/2026:08:05:49.734351 +0200] ahvPvdwjv9qrj0dWYnPXMwAAAAA 212.237.121.157 55708 127.0.0.1 7081 ... show more [31/May/2026:08:05:49.734351 +0200] ahvPvdwjv9qrj0dWYnPXMwAAAAA 212.237.121.157 55708 127.0.0.1 7081 [31/May/2026:08:05:51.301255 +0200] ahvPv344dkuH5ctkgnUe_QAAAAQ 212.237.121.157 55722 127.0.0.1 7081 [31/May/2026:08:05:52.717771 +0200] ahvPwB1DLfu3E8NfNAdCLwAAAAo 212.237.121.157 55724 127.0.0.1 7081 ... show less	Web App Attack
🇬🇧 consul.to	2026-05-31 05:41:24 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-05-31 05:23:47 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 212.237.121.157 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 212.237.121.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 01:23:40.071066 2026] [security2:error] [pid 18705:tid 18705] [client 212.237.121.157:58279] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xalais.com"] [uri "/.git/HEAD"] [unique_id "ahvF3JuK2pz5ASRw4gZR4gAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 65 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 185.192.69.194

🇮🇳 143.110.187.49

🇨🇳 111.201.1.15

🇪🇪 80.77.25.195

🇹🇼 59.126.87.212

🇺🇸 34.125.196.94

🇧🇪 34.62.143.143

🇰🇷 221.159.119.6

🇺🇸 216.239.34.223

🇭🇰 199.45.155.96

🇭🇰 199.45.154.122

🇪🇬 196.219.93.108

🇿🇦 165.49.22.26

🇨🇴 161.18.234.168

🇱🇹 77.90.185.243

🇺🇸 66.240.236.116

🇺🇸 64.62.156.212

🇳🇴 51.175.83.146

🇮🇳 49.43.119.240

🇻🇪 38.246.182.40