JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.140.199.137

194.140.199.137 was found in our database!

This IP was reported 71 times. Confidence of Abuse is 69%: ?

69%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS40021
Hostname(s)	vmi3392249.contaboserver.net
Domain Name	contabo.com
Country	🇺🇸 United States of America
City	Orangeburg, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.140.199.137

Whois 194.140.199.137

IP Abuse Reports for 194.140.199.137:

This IP address has been reported a total of 71 times from 52 distinct sources. 194.140.199.137 was first reported on April 16th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Catalin Negru	2026-07-04 17:05:39 (5 days ago)	2026-06-06 05:49:05,948 fail2ban.actions [1034576]: NOTICE [apache-dirscan] Ban 194.140.199. ... show more 2026-06-06 05:49:05,948 fail2ban.actions [1034576]: NOTICE [apache-dirscan] Ban 194.140.199.137 2026-06-06 05:49:05,989 fail2ban.actions [1034576]: NOTICE [apache-404] Ban 194.140.199.137 2026-06-06 05:49:06,151 fail2ban.actions [1034576]: NOTICE [web-scanner] Ban 194.140.199.137 2026-06-06 05:49:06,183 fail2ban.actions [1034576]: NOTICE [laravel-auth] Ban 194.140.199.137 2026-06-06 05:49:06,363 fail2ban.actions [1034576]: NOTICE [laravel-env] Ban 194.140.199.137 ... show less	Brute-Force Web App Attack
🇺🇸 RH5	2026-06-12 01:47:54 (4 weeks ago)	Restricted URL probing (/.env) (UTC 2026-06-12 01:47)	Web App Attack
🇫🇷 cityhunter_rhone	2026-06-11 07:30:04 (4 weeks ago)	Mercurius Guide auto detection \| source=Fail2Ban \| scraper score=5 \| events=1 \| decision=datacenter ... show more Mercurius Guide auto detection \| source=Fail2Ban \| scraper score=5 \| events=1 \| decision=datacenter \| actions=fail2ban failed plesk-modsecurity \| last_seen=2026-06-11 09:17:16 show less	Brute-Force SSH Web App Attack
🇨🇦 john doe	2026-06-11 05:00:38 (4 weeks ago)	SentinelBot: Env File Hunting (score: 73)	Bad Web Bot
🇧🇪 cmbplf	2026-06-10 20:05:20 (4 weeks ago)	2.878 requests from abuseipdb.com blacklisted IP (1yr2w2d)	Brute-Force Bad Web Bot
🇫🇷 Lino Project	2026-06-10 19:53:56 (4 weeks ago)	194.140.199.137 - - [10/Jun/2026:21:53:53 +0200] "GET /.env HTTP/1.1" 302 505 "-" "Mozilla/5.0 (Maci ... show more 194.140.199.137 - - [10/Jun/2026:21:53:53 +0200] "GET /.env HTTP/1.1" 302 505 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.140.199.137 - - [10/Jun/2026:21:53:54 +0200] "GET /vendor/.env HTTP/1.1" 302 519 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 elcruzado.es	2026-06-10 17:45:56 (4 weeks ago)	(mod_security) mod_security triggered on hostname [redacted] 194.140.199.137 (US/United States/vmi32 ... show more (mod_security) mod_security triggered on hostname [redacted] 194.140.199.137 (US/United States/vmi3225528.contaboserver.net) show less	SQL Injection
🇭🇺 whitehoodie	2026-06-09 21:26:00 (1 month ago)	AUTOMATED REPORT: Tried to access .env file	Hacking Bad Web Bot Web App Attack
🇫🇷 Catalin Negru	2026-06-09 17:04:51 (1 month ago)	2026-06-06 05:49:05,948 fail2ban.actions [1034576]: NOTICE [apache-dirscan] Ban 194.140.199. ... show more 2026-06-06 05:49:05,948 fail2ban.actions [1034576]: NOTICE [apache-dirscan] Ban 194.140.199.137 2026-06-06 05:49:05,989 fail2ban.actions [1034576]: NOTICE [apache-404] Ban 194.140.199.137 2026-06-06 05:49:06,151 fail2ban.actions [1034576]: NOTICE [web-scanner] Ban 194.140.199.137 2026-06-06 05:49:06,183 fail2ban.actions [1034576]: NOTICE [laravel-auth] Ban 194.140.199.137 2026-06-06 05:49:06,363 fail2ban.actions [1034576]: NOTICE [laravel-env] Ban 194.140.199.137 ... show less	Brute-Force Web App Attack
🇺🇦 Scientific Route	2026-06-09 10:05:20 (1 month ago)	194.140.199.137 - - [09/Jun/2026:13:05:19 +0300] "GET /.env HTTP/1.1" 404 493 "-" "Mozilla/5.0 (Maci ... show more 194.140.199.137 - - [09/Jun/2026:13:05:19 +0300] "GET /.env HTTP/1.1" 404 493 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.140.199.137 - - [09/Jun/2026:13:05:19 +0300] "GET /sendgrid.env HTTP/1.1" 404 493 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-09 10:05:19 (1 month ago)	194.140.199.137 - - [09/Jun/2026:13:05:18 +0300] "GET /.env HTTP/1.1" 404 493 "-" "Mozilla/5.0 (Maci ... show more 194.140.199.137 - - [09/Jun/2026:13:05:18 +0300] "GET /.env HTTP/1.1" 404 493 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.140.199.137 - - [09/Jun/2026:13:05:19 +0300] "GET /sendgrid.env HTTP/1.1" 404 493 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" ... show less	Web App Attack
🇮🇩 Burayot	2026-06-09 08:30:54 (1 month ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 194.140.199.137 (US/United States/vm ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 194.140.199.137 (US/United States/vmi3225528.contaboserver.net): 1 in the last 3600 secs show less	Web App Attack
🇧🇷 Peregrine	2026-06-09 03:13:06 (1 month ago)	Fail2Ban S3 Jail: tomcat-honeypot \| Evidence: - 194.140.199.137 - - [02/Jun/2026:14:13:30 -0300] "GE ... show more Fail2Ban S3 Jail: tomcat-honeypot \| Evidence: - 194.140.199.137 - - [02/Jun/2026:14:13:30 -0300] "GET /.env HTTP/1.1" 404 414 - 194.140.199.137 - - [02/Jun/2026:14:13:31 -0300] "GET /sendgrid.env HTTP/1.1" 404 414 - 194.140.199.137 - - [02/Jun/2026:14:13:31 -0300] "GET /core/.env HTTP/1.1" 404 414 - 194.140.199.137 - - [02/Jun/2026:14:13:31 -0300] "GET /vendor/.env HTTP/1.1" 404 414 - 194.140.199.137 - - [02/Jun/2026:14:13:32 -0300] "GET /assets/.env HTTP/1.1" 404 414 - 194.140.199.137 - - [02/Jun/2026:14:13:32 -0300] "GET /storage/.env HTTP/1.1" 404 414 - 194.140.199.137 - - [02/Jun/2026:14:13:33 -0300] "GET /public/.env HTTP/1.1" 404 414 - 194.140.199.137 - - [02/Jun/2026:14:13:34 -0300] "GET /admin/.env HTTP/1.1" 404 414 show less	Bad Web Bot
🇩🇪 ecs.ge	2026-06-08 21:16:28 (1 month ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇱🇻 garmtech.com	2026-06-08 18:11:18 (1 month ago)	Attempted access to sensitive endpoint (/.env) detected. Automated scan or unauthorized probing.	Web App Attack

Showing 1 to 15 of 71 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 212.32.76.8

🇺🇦 194.44.56.138

🇿🇦 105.225.111.158

🇳🇱 93.123.118.229

🇫🇷 91.196.152.17

🇸🇳 41.208.147.131

🇬🇧 35.203.210.201

🇩🇪 217.24.238.120

🇹🇷 191.44.70.70

🇮🇩 163.7.16.186

🇺🇸 162.216.150.139

🇺🇸 162.144.195.114

🇹🇭 119.42.105.136

🇧🇩 103.234.202.196

🇮🇳 59.180.153.159

🇭🇰 46.8.78.131

🇺🇸 45.33.78.24

🇰🇷 14.46.87.209

🇺🇸 2607:f8b0:4001:c34::121

🇳🇱 195.178.110.42