JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.178.110.159

195.178.110.159 was found in our database!

This IP was reported 9,473 times. Confidence of Abuse is 100%: ?

100%

ISP	TECHOFF SRV LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS48090
Domain Name	dmzhost.co
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.178.110.159

Whois 195.178.110.159

IP Abuse Reports for 195.178.110.159:

This IP address has been reported a total of 9,473 times from 1,358 distinct sources. 195.178.110.159 was first reported on March 21st 2025, and the most recent report was 10 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Vano Ganzzz	2026-10-27 10:30:17 (10 minutes ago)	Triggered Cloudflare WAF (firewallCustom) from NL. Action taken: BLOCK ASN: 48090 (TECHOFF SRV LIMIT ... show more Triggered Cloudflare WAF (firewallCustom) from NL. Action taken: BLOCK ASN: 48090 (TECHOFF SRV LIMITED) Protocol: HTTP/1.1 (GET method) Endpoint: /include/config.php Timestamp: 2026-10-27T10:30:17Z Ray ID: a5110646acbf9f66 UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 H24	2026-10-27 10:25:42 (14 minutes ago)	/.git/logs/HEAD /credentials.json /.git-credentials /web/.git/config /server/.git/config /config.php ... show more /.git/logs/HEAD /credentials.json /.git-credentials /web/.git/config /server/.git/config /config.php /.env.bak /wp-config.php /.git/HEAD /app/.git/config show less	Web App Attack
🇩🇪 maxpower	2026-10-27 10:23:01 (17 minutes ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 195.178.110.159 (BG/Bulgaria/-): 1 in th ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 195.178.110.159 (BG/Bulgaria/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 195.178.110.159 - - [27/Oct/2026:11:22:56 +0100] "GET /.aws/credentials HTTP/2.0" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" "195.178.110.159" host=coiet.it show less	Port Scan
🇺🇸 Aurealize	2026-10-27 10:21:18 (19 minutes ago)	Automated Sensitive File discovery attempt detected by a Cloudflare WAF custom rule. Path: /.env.pro ... show more Automated Sensitive File discovery attempt detected by a Cloudflare WAF custom rule. Path: /.env.production. show less	Web App Attack Hacking
Anonymous	2026-10-27 09:56:13 (44 minutes ago)	Scan for .env Files at 2026-10-27T09:56:13+00:00	Web App Attack
🇺🇸 aks4226	2026-10-27 09:54:33 (45 minutes ago)	Bot search, attacking common web applications.	Web App Attack
🇺🇸 magnetosphere-tarpit	2026-10-27 09:53:19 (47 minutes ago)	Automated web scanner: repeatedly probed for .env, .git, wp-admin and PHP webshell paths that do not ... show more Automated web scanner: repeatedly probed for .env, .git, wp-admin and PHP webshell paths that do not exist on this host. Tarpitted, then banned: 10 requests within 24h0m0s show less	Port Scan Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-10-27 09:50:44 (49 minutes ago)	20 attempts against mh-misbehave-ban on chive	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-27 09:27:46 (1 hour ago)	(mod_security) mod_security triggered on hostname [redacted] 195.178.110.159 (BG/Bulgaria/-)	SQL Injection
🇩🇪 svr	2026-10-27 09:24:37 (1 hour ago)	HC-Flood Web Scanner	Web App Attack
🇩🇪 abuse-detection	2026-10-27 09:22:38 (1 hour ago)	Security detection: http-crawl-non_statics	Bad Web Bot
Anonymous	2026-10-27 09:19:01 (1 hour ago)	FortiWeb WAF: 344 attacks detected. Threat Score: 36000. Types: Client Management(172), Block IP Lis ... show more FortiWeb WAF: 344 attacks detected. Threat Score: 36000. Types: Client Management(172), Block IP List(172). Origin: Netherlands. show less	Web App Attack
🇩🇪 Gwyneth Llewelyn	2026-10-27 09:01:33 (1 hour ago)	2026/10/27 09:01:23 [error] 3675996#3675996: 830755 access forbidden by rule, client: 195.178.110.1 ... show more 2026/10/27 09:01:23 [error] 3675996#3675996: 830755 access forbidden by rule, client: 195.178.110.159, server: zonadetestes.com, request: "GET /.env HTTP/2.0", host: "zonadetestes.com" 195.178.110.159 - - [27/Oct/2026:09:01:23 +0000] "GET /.env HTTP/2.0" 403 1045 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 2026/10/27 09:01:31 [error] 3675996#3675996: *830755 access forbidden by rule, client: 195.178.110.159, server: zonadetestes.com, request: "GET /config/.env HTTP/2.0", host: "zonadetestes.com" show less	Brute-Force Web App Attack
🇭🇺 kranem	2026-10-27 09:00:29 (1 hour ago)	Triggered Cloudflare WAF from NL. Action taken: LINK_MAZE_INJECTED ASN: 48090 (TECHOFF SRV LIMITED) ... show more Triggered Cloudflare WAF from NL. Action taken: LINK_MAZE_INJECTED ASN: 48090 (TECHOFF SRV LIMITED) Protocol: HTTP/1.1 (GET method) Endpoint: /dump Timestamp: 2026-10-27T06:51:47Z User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36 show less	Bad Web Bot
🇵🇱 Budyn	2026-10-27 08:57:34 (1 hour ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vpn.dont-eat-the-pudding.online \| URI: /.git/config \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36 \| BODY: [Empty / GET Request] \| HEADERS: {"Accept-Encoding":"gzip, br","Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"NL","Cf-Connecting-Ip":"195.178.110.159","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a5107e736a6e0e86-AMS","Accept":"\/","X-Forwarded-For":"195.178.110.159"} show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 9473 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.89.20.7

🇳🇱 200.138.46.231

🇳🇱 200.138.46.189

🇨🇳 118.196.74.97

🇧🇩 103.138.191.43

🇺🇦 46.98.128.146

🇧🇷 45.236.137.131

🇩🇪 213.209.159.231

🇳🇱 195.178.110.204

🇬🇧 194.50.235.152

🇦🇱 193.187.102.183

🇳🇱 185.136.15.86

🇰🇷 175.203.201.109

🇲🇾 175.145.216.107

🇮🇳 129.121.169.182

🇳🇱 129.121.111.123

🇵🇰 116.71.136.125

🇧🇩 103.112.54.86

🇺🇸 71.6.232.28

🇮🇷 46.245.66.243