JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

5.75.131.84

Recent Activity

Abuse confidence score ?

42% Elevated

7 reports

6 reporters · latest 6 hours ago

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	static.84.131.75.5.clients.your-server.de
Domain Name	hetzner.com
Country	🇩🇪 Germany
City	Nuremberg, Bavaria

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 5.75.131.84

Export CSV

This IP address has been reported a total of 7 times from 6 distinct sources. 5.75.131.84 was first reported on October 17th 2026, and the most recent report was 6 hours ago. In the last 60 days, the top reporter locations were: Greece with 2 reports; Germany with 1 report; France with 1 report. The most common categories in these recent reports were: Web App Attack 5 times; Port Scan 2 times; Exploited Host 2 times; Bad Web Bot 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-10-19 02:49:53 (6 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇮🇹 Progetto1	2026-10-19 01:20:02 (8 hours ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇹🇷 oalver	2026-10-18 08:05:58 (1 day ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signa ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /wp-content/plugins/devvn-image-hotspot/admin/inc/metabox.php (HTTP 404). First seen: 2026-10-18. Risk score: 30/100. show less	Web App Attack
🇬🇷 setupgr	2026-10-17 22:05:29 (1 day ago)	(mod_security) mod_security (id:11000011) triggered by 5.75.131.84 (DE/Germany/Bavaria/Nuremberg/-/[ ... show more (mod_security) mod_security (id:11000011) triggered by 5.75.131.84 (DE/Germany/Bavaria/Nuremberg/-/[AS24940 Hetzner Online GmbH]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Oct 18 01:05:29.214497 2026] [security2:error] [pid 956356:tid 956385] [client 5.75.131.84:39686] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "clients.your-server.de" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: static.84.131.75.5.clients.your-server.de"] [severity "CRITICAL"] [hostname "fashionfragonard.gr"] [uri "/"] [unique_id "atPxKQWquxzcaTA6uF3ojQAAAAI"] show less	Port Scan
Anonymous	2026-10-17 21:06:43 (1 day ago)	Web application attack detected.	Web App Attack
🇬🇷 setupgr	2026-10-17 14:58:25 (1 day ago)	(mod_security) mod_security (id:11000011) triggered by 5.75.131.84 (DE/Germany/Bavaria/Nuremberg/-/[ ... show more (mod_security) mod_security (id:11000011) triggered by 5.75.131.84 (DE/Germany/Bavaria/Nuremberg/-/[AS24940 Hetzner Online GmbH]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Oct 17 17:58:24.711971 2026] [security2:error] [pid 956356:tid 956395] [client 5.75.131.84:32990] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "clients.your-server.de" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: static.84.131.75.5.clients.your-server.de"] [severity "CRITICAL"] [hostname "tavernadimitris.com"] [uri "/"] [unique_id "atONEAWquxzcaTA6uF2OsQAAAAw"] show less	Port Scan
🇫🇷 solution.it	2026-10-17 12:43:04 (1 day ago)	[Sat Oct 17 14:43:04.058589 2026] [php7:error] [pid 3580075:tid 3580075] [client 5.75.131.84:35508] ... show more [Sat Oct 17 14:43:04.058589 2026] [php7:error] [pid 3580075:tid 3580075] [client 5.75.131.84:35508] script '/var/www/html/www.craccaaltesoro.it/wp-includes/fonts/custom-file-3-1737787260.php' not found or unable to stat show less	Web App Attack

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 109.160.32.180

🇨🇳 36.106.166.23

🇳🇱 34.187.67.2

🇺🇸 205.210.31.68

🇹🇼 198.235.24.84

🇩🇪 141.147.49.120

🇸🇬 114.119.159.233

🇳🇱 77.239.124.47

🇬🇧 64.227.38.148

🇳🇱 45.148.10.157

🇬🇧 188.166.145.178

🇺🇦 185.183.94.210

🇫🇷 178.238.234.47

🇭🇰 156.225.1.47

🇨🇳 119.249.100.171

🇸🇬 114.119.155.233

🇮🇳 103.88.76.27

🇫🇷 85.217.140.22

🇺🇸 64.62.156.195

🇲🇾 47.250.150.236