JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 101.99.94.181

101.99.94.181 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 65%: ?

65%

ISP	Shinjiru Technology Sdn Bhd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45839
Hostname(s)	server1.kamon.la
Domain Name	shinjiru.com.my
Country	🇧🇬 Bulgaria
City	Sofia, Sofia-Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 101.99.94.181

Whois 101.99.94.181

IP Abuse Reports for 101.99.94.181:

This IP address has been reported a total of 11 times from 11 distinct sources. 101.99.94.181 was first reported on June 18th 2026, and the most recent report was 22 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 33three	2026-06-21 11:45:50 (22 minutes ago)	Fail2Ban jail WebAttack triggered	Brute-Force
🇩🇪 MusicLibrary	2026-06-21 10:20:29 (1 hour ago)	Attempted access to sensitive configuration files (.env, .git, etc.)	Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-21 09:06:29 (3 hours ago)	Multiple WAF Violations	Web App Attack
🇧🇪 voormedia	2026-06-21 08:31:13 (3 hours ago)	Accessed trap at '/.env'	Web App Attack
🇩🇪 netclix.gr	2026-06-21 06:02:59 (6 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 101.99.94.181 (MY/Malaysia/server1.kamo ... show more (mod_security) mod_security triggered on hostname [redacted] 101.99.94.181 (MY/Malaysia/server1.kamon.la): (CF_ENABLE) show less	SQL Injection
🇦🇺 screwlooseit.com.au	2026-06-19 16:44:29 (1 day ago)	Blocked by CSF 13 firewall - Rule: config-dotfile MY/Malaysia/server1.kamon.la	Web App Attack
🇫🇷 Octopuce	2026-06-19 15:56:59 (1 day ago)	Aggressive web search of vulnerable pages: /.git/logs/HEAD /.env /.env.local /app/.env /api/.env .. ... show more Aggressive web search of vulnerable pages: /.git/logs/HEAD /.env /.env.local /app/.env /api/.env ... show less	Web App Attack
Anonymous	2026-06-19 01:11:04 (2 days ago)	Bot / scanning and/or hacking attempts: GET /env.php HTTP/2.0, GET /.env~ HTTP/2.0, GET /.env.bak HT ... show more Bot / scanning and/or hacking attempts: GET /env.php HTTP/2.0, GET /.env~ HTTP/2.0, GET /.env.bak HTTP/2.0, GET /.env.prod HTTP/2.0, GET /.env.old HTTP/2.0, GET /env.json HTTP/2.0, GET /api/.env HTTP/2.0, GET /env.js HTTP/2.0, GET /public/.env HTTP/2.0, GET /.env.swp HTTP/2.0, GET /src/.env HTTP/2.0, GET /env HTTP/2.0, GET /.env.test HTTP/2.0, GET /web/.env HTTP/2.0, GET /.env.example HTTP/2.0, GET /.env.sample HTTP/2.0, GET /app/.env HTTP/2.0, GET /.env.dist HTTP/2.0, GET /backend/.env HTTP/2.0, GET /.env.save HTTP/2.0, GET /.env.development HTTP/2.0, GET /www/.env HTTP/2.0, GET /config/.env HTTP/2.0, GET /.env.dev HTTP/2.0 show less	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2026-06-18 23:59:40 (2 days ago)	101.99.94.181 - - [19/Jun/2026:02:58:18 +0300] "GET /.env HTTP/1.1" 404 767 "-" "Mozilla/5.0 (Window ... show more 101.99.94.181 - - [19/Jun/2026:02:58:18 +0300] "GET /.env HTTP/1.1" 404 767 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 101.99.94.181 - - [19/Jun/2026:02:59:39 +0300] "GET /app/.env HTTP/1.1" 404 767 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇧🇷 SOCBR	2026-06-18 23:52:57 (2 days ago)	IPS: Web Server Exposed Git Repository Information Disclosure.	Hacking
🇺🇸 helios.live	2026-06-18 22:13:50 (2 days ago)	2026/06/18 22:13:48 [error] 959794#959794: 1356125 access forbidden by rule, client: 101.99.94.181, ... show more 2026/06/18 22:13:48 [error] 959794#959794: 1356125 access forbidden by rule, client: 101.99.94.181, server: kocerroxy.com, request: "GET /.env.local HTTP/1.1", host: "app.kocerroxy.com" 2026/06/18 22:13:48 [error] 959794#959794: 1356125 access forbidden by rule, client: 101.99.94.181, server: kocerroxy.com, request: "GET /.env.production HTTP/1.1", host: "app.kocerroxy.com" 2026/06/18 22:13:48 [error] 959794#959794: 1356125 access forbidden by rule, client: 101.99.94.181, server: kocerroxy.com, request: "GET /.env.development HTTP/1.1", host: "app.kocerroxy.com" 2026/06/18 22:13:49 [error] 959794#959794: 1356125 access forbidden by rule, client: 101.99.94.181, server: kocerroxy.com, request: "GET /.env.staging HTTP/1.1", host: "app.kocerroxy.com" 2026/06/18 22:13:49 [error] 959794#959794: 1356155 access forbidden by rule, client: 101.99.94.181, server: kocerroxy.com, request: "GET /.env.testing HTTP/1.1", host: "app.kocerroxy.com" ... show less	Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 185.226.196.24

🇺🇸 13.89.125.24

🇺🇸 2602:80d:1007::ba

🇺🇸 172.234.221.84

🇯🇵 107.155.15.81

🇮🇳 68.233.116.124

🇮🇪 65.52.75.227

🇺🇸 52.203.65.83

🇨🇳 39.104.64.139

🇧🇦 31.223.130.45

🇺🇸 208.84.102.178

🇯🇵 203.25.124.13

🇳🇱 193.176.31.205

🇦🇷 186.122.177.140

🇲🇽 177.230.79.202

🇹🇼 128.14.237.120

🇨🇳 116.228.233.93

🇨🇳 113.251.88.56

🇱🇹 81.30.98.49

🇳🇱 81.19.216.107