AbuseIPDB » 141.94.145.64

141.94.145.64 was found in our database!

This IP was reported 772 times. Confidence of Abuse is 100%: ?

100%

ISP	1337 Services GmbH StarkRDP
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	ip64.ip-141-94-145.eu
Domain Name	starkrdp.net
Country	France
City	Dunkerque, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 141.94.145.64

Whois 141.94.145.64

IP Abuse Reports for 141.94.145.64:

This IP address has been reported a total of 772 times from 293 distinct sources. 141.94.145.64 was first reported on February 9th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Gem	2025-02-21 23:22:56 (1 month ago)	Unauthorized web scan.	Web App Attack
sid3windr	2025-02-21 13:54:26 (1 month ago)	GET /.git/config (Tarpitted for 1d15h8m26s, wasted 8.06MB)	Web App Attack
service Informatique	2025-02-21 04:00:37 (1 month ago)	GET /_profiler/phpinfo	Web App Attack
chronos	2025-02-21 03:33:26 (1 month ago)	[AUTORAVALT][[21/02/2025 - 00:33:25 -03:00 UTC] Attack from [1337 Services GmbH StarkRDP]<br / ... show more[AUTORAVALT][[21/02/2025 - 00:33:25 -03:00 UTC] Attack from [1337 Services GmbH StarkRDP] [141.94.145.64]-[RANGE:141.94.145.64 - 141.94.145.79] [ip64.ip-141-94-145.eu] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-comme] ... show less	Hacking Web App Attack
Alexy THOMAS	2025-02-21 01:00:37 (1 month ago)	Invalid request: GET /_profiler/phpinfo HTTP/1.1 using Mozilla/5.0 (Linux; Android 9; ONEPLUS A6010) ... show moreInvalid request: GET /_profiler/phpinfo HTTP/1.1 using Mozilla/5.0 (Linux; Android 9; ONEPLUS A6010) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36 show less	Bad Web Bot Web App Attack
sid3windr	2025-02-21 00:51:40 (1 month ago)	GET /.env (Tarpitted for 1d15h8m26s, wasted 8.06MB)	Web App Attack
mr_whitehat	2025-02-21 00:34:59 (1 month ago)	Probed for vulnerable web application: request line: /.git/config (Possible exploit:Scan for open gi ... show moreProbed for vulnerable web application: request line: /.git/config (Possible exploit:Scan for open git repositories) show less	Web App Attack
geot	2025-02-20 13:19:44 (1 month ago)	GET /_profiler/phpinfo HTTP/1.1 GET /.env.local HTTP/1.1 GET /.env HTTP/1.1 GET /. ... show moreGET /_profiler/phpinfo HTTP/1.1 GET /.env.local HTTP/1.1 GET /.env HTTP/1.1 GET /.git/config HTTP/1.1 show less	Hacking Bad Web Bot Web App Attack
Anonymous	2025-02-20 12:36:16 (1 month ago)	[19/Feb/2025:05:25:31 -0500] \"GET /.env HTTP/1.1\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; r ... show more[19/Feb/2025:05:25:31 -0500] \"GET /.env HTTP/1.1\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0\" [19/Feb/2025:05:27:02 -0500] \"GET /.env HTTP/1.1\" \"Opera/9.80 (Android; Opera Mini/7.5.33361/31.1543; U; en) Presto/2.8.119 Version/11.1010\" [19/Feb/2025:10:37:16 -0500] \"GET /.env.local HTTP/1.1\" \"Mozilla/5.0 (Linux; Android 9; POCO F1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36\" [19/Feb/2025:10:38:43 -0500] \"GET /.env.local HTTP/1.1\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36\" [19/Feb/2025:19:10:53 -0500] \"GET /.git/config HTTP/1.1\" \"Mozilla/5.0 (iPhone; U; CPU iPhone OS 2_0 like Mac OS X; en-us) AppleWebKit/525.18.1 (KHTML, like Gecko) Version/3.1.1 Mobile/5A347 Safari/525.200\" show less	Hacking
JCB	2025-02-20 09:14:00 (1 month ago)	141.94.145.64 - - [20/Feb/2025:01:50:41 +0200] "GET /_profiler/phpinfo HTTP/1.1" 404 196 "-" "Mozill ... show more141.94.145.64 - - [20/Feb/2025:01:50:41 +0200] "GET /_profiler/phpinfo HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3889.0 Safari/537.36" 141.94.145.64 - - [20/Feb/2025:01:53:31 +0200] "GET /_profiler/phpinfo HTTP/1.1" 404 196 "-" "MOT-V9mm/00.62 UP.Browser/6.2.3.4.c.1.123 (GUI) MMP/2.0" ... show less	Hacking Web App Attack
octageeks.com	2025-02-20 05:07:08 (1 month ago)	Wordpress malicious attack:[octablocked]	Web App Attack
Anonymous	2025-02-20 04:52:34 (1 month ago)	Reported from Nginx log analysis 16. Log: 141.94.145.64 - - [20/Feb/2025:xx:xx:xx 0100] "GET /_prof ... show moreReported from Nginx log analysis 16. Log: 141.94.145.64 - - [20/Feb/2025:xx:xx:xx 0100] "GET /_profiler/phpinfo HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.5; rv:10.0.1) Gecko/20100101 Firefox/10.0.1 SeaMonkey/2.7.1" "-" "FR France -" "AS16276" "OVH SAS" show less	Port Scan Brute-Force SSH
Anonymous	2025-02-20 04:21:51 (1 month ago)	Feb 20 06:21:51 mail haproxy[3994]: 141.94.145.64:36610 [20/Feb/2025:06:21:51.202] http-in http-in/< ... show moreFeb 20 06:21:51 mail haproxy[3994]: 141.94.145.64:36610 [20/Feb/2025:06:21:51.202] http-in http-in/<NOSRV> -1/-1/-1/-1/0 503 216 - - SC-- 1/1/0/0/0 0/0 "GET /.git/config HTTP/1.1" ... show less	Brute-Force Web App Attack
oh.mg	2025-02-20 04:12:54 (1 month ago)	[Thu Feb 20 05:12:53.315288 2025] [security2:error] [pid 2855292:tid 2855314] [client 141.94.145.64: ... show more[Thu Feb 20 05:12:53.315288 2025] [security2:error] [pid 2855292:tid 2855314] [client 141.94.145.64:35902] [client 141.94.145.64] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "95.216.72.247"] [uri "/_profiler/phpinfo"] [unique_id "Z7arxUAUvAyIgn9AMucsZQAAAQQ"] ... show less	Bad Web Bot Web App Attack
el-brujo	2025-02-20 04:03:23 (1 month ago)	20/Feb/2025:05:03:23.264017 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more20/Feb/2025:05:03:23.264017 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 141.94.145.64] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "91.126.217.153"] [uri "/.git/config"] [unique_id "Z7api4K-GlswlSVrI6sWQgAAAGU"] ... show less	Hacking Web App Attack