JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.47.144.168

212.47.144.168 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 29%: ?

29%

ISP	Aztelekom LLC
Usage Type	Fixed Line ISP
ASN	AS8814
Domain Name	aztelekom.az
Country	🇦🇿 Azerbaijan
City	Sabirabad, Sabirabad District

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.47.144.168

Whois 212.47.144.168

IP Abuse Reports for 212.47.144.168:

This IP address has been reported a total of 19 times from 14 distinct sources. 212.47.144.168 was first reported on January 31st 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-10-16 13:27:45 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 11:59:52 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 212.47.144.168 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 212.47.144.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 07:59:48.740547 2026] [security2:error] [pid 13537:tid 13537] [client 212.47.144.168:1918] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.ferrarapanfitness.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ferrarapanfitness.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atIRtLxQxM3-JUpZBnt7twAAAAQ"], referer: https://ferrarapanfitness.com/wp-json/wp/v2/users/me show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-24 19:48:46 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
Anonymous	2026-08-25 22:17:40 (1 month ago)	denied traffic to a honeypot network. destination port 22.	Port Scan Hacking
🇺🇸 ras07	2026-08-25 22:00:14 (1 month ago)	Brute force SSH login attempts.	Brute-Force SSH
🇺🇸 kosada.com	2026-08-25 13:30:25 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-08-01 13:12:51 (2 months ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
🇩🇪 ghostwarriors	2026-07-07 11:50:59 (3 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-04 17:00:43 (3 months ago)	Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /brands/rcf/shopby/manufacturer-rcf-lsi-evoko-haivision-ask_proxima-projectiondesign-xyz-huawei.html \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇺🇸 kosada.com	2026-06-29 07:28:10 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇬🇧 PeravixGroup	2026-06-03 10:49:26 (4 months ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇮🇩 hermawan	2026-03-02 17:58:51 (7 months ago)	03/03/2026-00:58:50.947762 [Drop] [] [1:9200003:0] Coba - reject apa masuk matomo appears 430 tim ... show more 03/03/2026-00:58:50.947762 [Drop] [] [1:9200003:0] Coba - reject apa masuk matomo appears 430 times match dipake google crawler 66-249-73-193 JA4 hash brazil [**] [Classification: (null)] [Priority: 3] {TCP} 212.47.144.168:10489 -> 103.166.156.58:443 ... show less	Email Spam Hacking
🇹🇷 rtbh.com.tr	2026-02-24 20:11:44 (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-02-23 20:11:43 (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2026-01-08 13:38:26 (9 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.37.71.173

🇺🇸 104.207.32.168

🇫🇷 91.231.89.65

🇦🇷 200.189.31.50

🇺🇾 179.27.97.205

🇩🇪 178.104.148.87

🇨🇳 120.240.80.44

🇭🇰 119.246.15.94

🇫🇷 91.196.152.95

🇲🇽 189.171.78.141

🇺🇸 135.233.98.30

🇨🇳 110.249.201.168

🇩🇪 93.152.221.50

🇩🇪 64.89.163.146

🇧🇪 198.235.24.136

🇳🇬 102.88.137.80

🇬🇧 86.38.187.202

🇲🇾 47.250.131.49

🇳🇱 45.115.26.149

🇳🇱 193.176.31.235