JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.195.114.28

159.195.114.28 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 100%: ?

100%

ISP	netcup GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197540
Hostname(s)	v2202608401547503298.supersrv.de
Domain Name	netcup.de
Country	🇦🇹 Austria
City	Vienna, State of Vienna

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.195.114.28

Whois 159.195.114.28

IP Abuse Reports for 159.195.114.28:

This IP address has been reported a total of 45 times from 40 distinct sources. 159.195.114.28 was first reported on August 23rd 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 LotPhantom	2026-08-25 14:07:53 (5 days ago)	159.195.114.28 - - [25/Aug/2026:14:06:57 +0000] "POST / HTTP/1.1" 404 146 "-" "Mozilla/5.0 (iPhone; ... show more 159.195.114.28 - - [25/Aug/2026:14:06:57 +0000] "POST / HTTP/1.1" 404 146 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1" "0" ... show less	Web App Attack
🇬🇧 Smish	2026-08-25 11:43:42 (5 days ago)	HONEYPOT HIT --> Fail2ban time=1787658221 log=2026-08-25T12:43:41+01:00 ip=159.195.114.28 host=89.39 ... show more HONEYPOT HIT --> Fail2ban time=1787658221 log=2026-08-25T12:43:41+01:00 ip=159.195.114.28 host=89.39.211.6 method=GET uri="/.env" status=404 ua="-" ref="-" rid=5f0fe4efdcdb3d69a23c0e147ef371d5 show less	Web App Attack
🇺🇸 VanKoh	2026-08-25 10:49:17 (5 days ago)	159.195.114.28 - - [25/Aug/2026:04:49:15 -0600] "POST / HTTP/1.1" 200 157351 "-" "Mozilla/5.0 (iPhon ... show more 159.195.114.28 - - [25/Aug/2026:04:49:15 -0600] "POST / HTTP/1.1" 200 157351 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1" 159.195.114.28 - - [25/Aug/2026:04:49:16 -0600] "POST /public/ HTTP/1.1" 404 58296 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15" 159.195.114.28 - - [25/Aug/2026:04:49:17 -0600] "POST /index.php HTTP/1.1" 200 157351 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" ... show less	DDoS Attack Web App Attack
🇺🇸 eber965	2026-08-25 09:00:27 (6 days ago)	[Tue Aug 25 05:00:25 2026] [authz_core:error] [pid 3890616:tid 140216346060544] [client 159.195.114. ... show more [Tue Aug 25 05:00:25 2026] [authz_core:error] [pid 3890616:tid 140216346060544] [client 159.195.114.28:62039] AH01630: client denied by server configuration: /var/www/html/.env [Tue Aug 25 05:00:26 2026] [authz_core:error] [pid 3890561:tid 140216656459520] [client 159.195.114.28:62383] AH01630: client denied by server configuration: /var/www/html/.env.save [Tue Aug 25 05:00:26 2026] [authz_core:error] [pid 3435008:tid 140216648066816] [client 159.195.114.28:62384] AH01630: client denied by server configuration: /var/www/html/.env.bak [Tue Aug 25 05:00:26 2026] [authz_core:error] [pid 3890616:tid 140216278918912] [client 159.195.114.28:62039] AH01630: client denied by server configuration: /var/www/html/.env.old [Tue Aug 25 05:00:26 2026] [authz_core:error] [pid 3466824:tid 140216648066816] [client 159.195.114.28:62382] AH01630: client denied by server configuration: /var/www/html/.env.backup ... show less	Brute-Force
🇨🇭 dalslab ltd	2026-08-25 08:55:58 (6 days ago)	159.195.114.28 - - [25/Aug/2026:10:55:57 +0200] "POST / HTTP/1.1" 405 154 "-" "Mozilla/5.0 (Windows ... show more 159.195.114.28 - - [25/Aug/2026:10:55:57 +0200] "POST / HTTP/1.1" 405 154 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:132.0) Gecko/20100101 Firefox/132.0" 159.195.114.28 - - [25/Aug/2026:10:55:57 +0200] "POST /public/ HTTP/1.1" 405 556 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 159.195.114.28 - - [25/Aug/2026:10:55:57 +0200] "POST /index.php HTTP/1.1" 405 154 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:133.0) Gecko/20100101 Firefox/133.0" 159.195.114.28 - - [25/Aug/2026:10:55:58 +0200] "GET /images/..%2f..%2f..%2f..%2f.env HTTP/1.1" 400 154 "-" "-" 159.195.114.28 - - [25/Aug/2026:10:55:58 +0200] "GET /assets/..%2f..%2f..%2f..%2f.env HTTP/1.1" 400 154 "-" "-" ... show less	Web Spam Brute-Force Bad Web Bot Web App Attack
🇩🇪 23p02732	2026-08-25 06:10:57 (6 days ago)	Automated web scanning and malicious probing	Brute-Force Bad Web Bot Web App Attack
🇩🇪 VentryShield	2026-08-25 05:11:21 (6 days ago)	p0t honeypot: https connection on port 443/tcp, 278 bytes received from client	Web App Attack Bad Web Bot
🇩🇪 paissangroup	2026-08-25 03:15:28 (6 days ago)	Multiple WAF Violations	Web App Attack
🇫🇷 cydit.eu	2026-08-25 03:15:12 (6 days ago)	phpMyAdmin attack detected by fail2ban on thor.cydit.eu	Web App Attack
🇩🇪 DyhnenTv	2026-08-25 03:13:08 (6 days ago)	CrowdSec webserver: crowdsecurity/http-sensitive-files	Web App Attack Bad Web Bot
Anonymous	2026-08-25 00:10:37 (6 days ago)	abuse ssl access	Hacking Brute-Force Web App Attack
🇩🇪 Jochen Pretli	2026-08-24 12:50:53 (6 days ago)	connection to honeypot	Email Spam Port Scan
🇭🇰 azminawwar	2026-08-24 11:33:04 (6 days ago)	[159.195.114.28] triggered by honeypot on port [80], Timestamp [2026-08-24T11:33:03Z]METHOD=GET PATH ... show more [159.195.114.28] triggered by honeypot on port [80], Timestamp [2026-08-24T11:33:03Z]METHOD=GET PATH=/ HTTP=HTTP/1.1 UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko show less	Port Scan Hacking
🇬🇧 thetomtaylor.co.uk	2026-08-24 10:56:02 (6 days ago)	Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [ice01]	Hacking SQL Injection Web App Attack
🇩🇪 EinfxchFinn	2026-08-24 10:43:23 (6 days ago)	Unauthorized connection attempt to port 443 from 159.195.114.28	Port Scan

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.43.100.48

🇮🇳 103.123.53.88

🇧🇬 79.124.56.250

🇷🇺 46.188.119.26

🇫🇮 2a00:1450:4010:c06::12d

🇨🇳 219.151.22.112

🇯🇵 118.194.236.142

🇿🇦 105.186.81.14

🇺🇸 103.81.230.30

🇳🇱 45.148.10.151

🇬🇧 35.203.210.161

🇭🇰 154.221.25.72

🇺🇸 147.185.132.84

🇨🇳 121.229.156.86

🇺🇸 103.143.11.150

🇫🇷 80.87.206.19

🇺🇸 52.44.85.7

🇲🇾 49.124.153.46

🇨🇳 47.103.197.73

🇺🇸 34.86.118.137