JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 178.104.194.143

178.104.194.143 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 76%: ?

76%

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	static.143.194.104.178.clients.your-server.de
Domain Name	hetzner.com
Country	🇩🇪 Germany
City	Nuremberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 178.104.194.143

Whois 178.104.194.143

IP Abuse Reports for 178.104.194.143:

This IP address has been reported a total of 21 times from 16 distinct sources. 178.104.194.143 was first reported on July 20th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-21 22:01:23 (6 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-20. show less	Web App Attack SSH Hacking
🇿🇦 conure	2026-07-21 12:11:29 (1 week ago)	csagent: score 20.5: 404 noise floor x2, secrets grab x2; 1 domain(s) in 0s	Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-21 02:14:16 (1 week ago)	Blocked by CSF 13 firewall - Rule: config-dotfile GB/United Kingdom/static.143.194.104.178.clients.y ... show more Blocked by CSF 13 firewall - Rule: config-dotfile GB/United Kingdom/static.143.194.104.178.clients.your-server.de show less	Web App Attack
🇿🇦 conure	2026-07-21 01:55:00 (1 week ago)	csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 0s	Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 01:54:03 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 178.104.194.143 (static.143.194.104.178.clients ... show more (mod_security) mod_security (id:210492) triggered by 178.104.194.143 (static.143.194.104.178.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 21:53:54.672427 2026] [security2:error] [pid 2678038:tid 2678056] [client 178.104.194.143:33520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paversealservices.com"] [uri "/dev/.env"] [unique_id "al7RMnW-AwPjS3iTNP_XDAAAAMs"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-07-21 01:02:26 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 n2nguyenn2nguyen	2026-07-20 23:56:03 (1 week ago)	Blocked by YFC Security on https://parcl9.com — type: directory_scan_attempts	Web App Attack
🇩🇪 Tsumugi Kotobuki	2026-07-20 23:16:56 (1 week ago)	11x Web Scan (L7) \| Paths: /new/.env, /member/.env, /.env.save, /.env, /dev/.env \| Codes: 444(11x) \| ... show more 11x Web Scan (L7) \| Paths: /new/.env, /member/.env, /.env.save, /.env, /dev/.env \| Codes: 444(11x) \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebK... \| rDNS: static.143.194.104.178.clients.your-server.de \| F2B/angie-honeypot@2026-07-20T23:16:56Z show less	Bad Web Bot Web App Attack Hacking
🇷🇺 DZBOT	2026-07-20 22:57:17 (1 week ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-20 21:59:25 (1 week ago)	Auto-ban: >3000 req/min op 2026-07-20	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-20 20:40:21 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 178.104.194.143 (static.143.194.104.178.clients ... show more (mod_security) mod_security (id:210492) triggered by 178.104.194.143 (static.143.194.104.178.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 16:40:17.259964 2026] [security2:error] [pid 831141:tid 831141] [client 178.104.194.143:49056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "birdsofnewcaledonia.com"] [uri "/.env"] [unique_id "al6HsXRlKKLyLrmgkOQTAgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-20 20:18:53 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 178.104.194.143 (static.143.194.104.178.clients ... show more (mod_security) mod_security (id:210492) triggered by 178.104.194.143 (static.143.194.104.178.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 16:18:48.423841 2026] [security2:error] [pid 446588:tid 446588] [client 178.104.194.143:57418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mengsacupuncturecenter.com"] [uri "/dev/.env"] [unique_id "al6CqE_S1nSL3gYSozJNyQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-07-20 19:58:49 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 178.104.194.143 (DE/Germany/-/-/static. ... show more (mod_security) mod_security triggered on hostname [redacted] 178.104.194.143 (DE/Germany/-/-/static.143.194.104.178.clients.your-server.de) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-07-20 19:48:20 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 178.104.194.143 (static.143.194.104.178.clients ... show more (mod_security) mod_security (id:210492) triggered by 178.104.194.143 (static.143.194.104.178.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 15:48:15.699874 2026] [security2:error] [pid 2780:tid 2780] [client 178.104.194.143:60084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brodyworks.com"] [uri "/member/.env"] [unique_id "al57f7hmqxE9MSzaRDRuLQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-20 19:23:09 (1 week ago)	[ssd5.kdns.gr] httpd-config-scan: sites=www.all4animal.com; logs=/var/log/httpd/domains/all4animal.c ... show more [ssd5.kdns.gr] httpd-config-scan: sites=www.all4animal.com; logs=/var/log/httpd/domains/all4animal.com.log; samples=/dev/.env \| /.env \| /new/.env show less	Hacking Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.225

🇬🇧 213.166.84.42

🇨🇳 117.50.208.11

🇳🇱 45.198.224.15

🇬🇧 45.133.173.184

🇻🇳 45.121.24.222

🇬🇧 2a06:4880:4000::64

🇺🇸 2607:ff10:c8:594::c

🇺🇸 172.234.217.129

🇺🇸 165.154.172.163

🇹🇭 118.194.250.60

🇨🇳 115.211.131.153

🇬🇪 109.172.200.246

🇨🇳 106.12.15.118

🇳🇱 85.137.56.197

🇬🇧 51.195.183.37

🇺🇸 50.59.99.211

🇳🇱 45.148.10.151

🇩🇪 20.79.29.209

🇷🇴 2.57.121.112