JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.130.23.168

94.130.23.168 was found in our database!

This IP was reported 389 times. Confidence of Abuse is 35%: ?

35%

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	static.168.23.130.94.clients.your-server.de
Domain Name	hetzner.com
Country	🇩🇪 Germany
City	Falkenstein, Saxony

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.130.23.168

Whois 94.130.23.168

IP Abuse Reports for 94.130.23.168:

This IP address has been reported a total of 389 times from 78 distinct sources. 94.130.23.168 was first reported on December 19th 2020, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 NotCool	2026-07-16 13:16:54 (1 hour ago)	(PERMBLOCK) 94.130.23.168 (DE/Germany/static.168.23.130.94.clients.your-server.de) has had more than ... show more (PERMBLOCK) 94.130.23.168 (DE/Germany/static.168.23.130.94.clients.your-server.de) has had more than 4 temp blocks in the last 86400 secs show less	Brute-Force
🇩🇪 grassau.com	2026-07-16 11:29:09 (3 hours ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 94.130.23.168 (DE/Ge ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 94.130.23.168 (DE/Germany/Saxony/Falkenstein/static.168.23.130.94.clients.your-server.de) show less	Bad Web Bot
🇬🇧 NotCool	2026-07-16 04:36:50 (10 hours ago)	(CRAWLDELAY) Generic Bot Crawl-delay Violation 94.130.23.168 (DE/Germany/static.168.23.130.94.client ... show more (CRAWLDELAY) Generic Bot Crawl-delay Violation 94.130.23.168 (DE/Germany/static.168.23.130.94.clients.your-server.de): 50 in the last 3600 secs show less	Bad Web Bot
🇨🇭 Origon	2026-07-15 19:10:27 (19 hours ago)	http-bad-user-agent - IP: 94.130.23.168 - time="2026-07-15T21:06:56+02:00" level=info msg="(555f66b ... show more http-bad-user-agent - IP: 94.130.23.168 - time="2026-07-15T21:06:56+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 94.130.23.168 (DE/24940) : 4h ban on Ip 94.130.23.168" module=db show less	Bad Web Bot
🇨🇭 Origon	2026-06-11 15:01:36 (1 month ago)	http-bad-user-agent - IP: 94.130.23.168 - time="2026-06-11T17:01:35+02:00" level=info msg="(555f66b ... show more http-bad-user-agent - IP: 94.130.23.168 - time="2026-06-11T17:01:35+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 94.130.23.168 (DE/24940) : 4h ban on Ip 94.130.23.168" module=db show less	Bad Web Bot
🇺🇦 vbios.com	2026-06-02 13:22:12 (1 month ago)	WEB_Brute-Force	Brute-Force
🇨🇭 Origon	2026-06-02 00:11:04 (1 month ago)	http-bad-user-agent - IP: 94.130.23.168 - time="2026-06-02T02:11:04+02:00" level=info msg="(555f66b ... show more http-bad-user-agent - IP: 94.130.23.168 - time="2026-06-02T02:11:04+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 94.130.23.168 (DE/24940) : 4h ban on Ip 94.130.23.168" module=db show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-30 20:40:15 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 94.130.23.168 (static.168.23.130.94.clients.you ... show more (mod_security) mod_security (id:210730) triggered by 94.130.23.168 (static.168.23.130.94.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 16:40:09.758189 2026] [security2:error] [pid 29608:tid 29608] [client 94.130.23.168:52246] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.dalessalesandservice.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dalessalesandservice.com"] [uri "/about-us/[email protected]"] [unique_id "ahtLKRrigGh4Htx3P47b3gAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-29 14:56:26 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 94.130.23.168 (static.168.23.130.94.clients.you ... show more (mod_security) mod_security (id:210730) triggered by 94.130.23.168 (static.168.23.130.94.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 10:56:21.459653 2026] [security2:error] [pid 24521:tid 24591] [client 94.130.23.168:43402] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.gestorialuengo.com\|F\|2"] [data ".abogadoparticular.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gestorialuengo.com"] [uri "/www.abogadoparticular.com"] [unique_id "ahmpFRsEsnxdXT-TnLN7QwAAAcg"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 LTM	2026-05-21 06:20:02 (1 month ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
🇩🇪 Vegascosmetics	2026-05-19 21:52:25 (1 month ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot
🇳🇱 BlueWire Hosting	2026-05-19 13:41:26 (1 month ago)	Bad bot ignoring robot.txt	Bad Web Bot
Anonymous	2026-05-18 09:18:18 (1 month ago)	FortiWeb WAF: 2 attacks detected. Threat Score: 302800. Types: Client Management(1), Block IP List(1 ... show more FortiWeb WAF: 2 attacks detected. Threat Score: 302800. Types: Client Management(1), Block IP List(1). Origin: Germany. show less	Web App Attack
🇩🇪 Oakley	2026-05-17 03:32:45 (1 month ago)	(mod_security) mod_security (id:900209) triggered by 94.130.23.168 (DE/Germany/static.168.23.130.94. ... show more (mod_security) mod_security (id:900209) triggered by 94.130.23.168 (DE/Germany/static.168.23.130.94.clients.your-server.de): 5 in the last 900 secs show less	Web App Attack Hacking
🇨🇭 Origon	2026-05-15 16:30:51 (2 months ago)	http-bad-user-agent - IP: 94.130.23.168 - time="2026-05-15T18:30:51+02:00" level=info msg="(555f66b ... show more http-bad-user-agent - IP: 94.130.23.168 - time="2026-05-15T18:30:51+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 94.130.23.168 (DE/24940) : 4h ban on Ip 94.130.23.168" module=db show less	Bad Web Bot

Showing 1 to 15 of 389 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 176.53.159.197

🇮🇩 163.7.11.126

🇭🇰 161.81.59.7

🇸🇪 93.158.90.252

🇷🇴 92.118.39.14

🇺🇸 66.228.35.180

🇫🇷 51.159.149.103

🇺🇸 45.56.72.142

🇺🇸 44.158.253.194

🇻🇳 14.191.71.193

🇨🇳 1.83.125.3

🇪🇸 217.154.106.153

🇨🇴 186.118.119.134

🇺🇸 81.30.98.193

🇺🇸 44.99.189.25

🇭🇰 43.132.150.89

🇨🇳 218.56.160.82

🇳🇱 185.224.128.16

🇮🇳 122.161.52.234

🇭🇰 118.193.38.134