JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

194.163.142.120

Neutral Activity

Abuse confidence score ?

0% Low Risk

40 reports

36 reporters · latest 1 year ago

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3632576.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

194.163.142.120 has been reported 40 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 194.163.142.120

Export CSV

This IP address has been reported a total of 40 times from 36 distinct sources. 194.163.142.120 was first reported on November 13th 2024, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 FEWA	2024-12-04 17:52:07 (1 year ago)	Fail2Ban Ban Triggered	Hacking Bad Web Bot Web App Attack
Anonymous	2024-12-03 08:50:01 (1 year ago)	[Tue Dec 03 03:50:01.022175 2024] [:error] [pid 1101] [client 194.163.142.120] ModSecurity: Access d ... show more [Tue Dec 03 03:50:01.022175 2024] [:error] [pid 1101] [client 194.163.142.120] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "[mungedIP2]"] [uri "/.env"] [unique_id "Z07GOH8AAAEAAARNsJIAAAAA"] [Tue Dec 03 03:50:01.121842 2024] [:error] [pid 1101] [client 194.163.142.120] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-gene show less	Bad Web Bot Web App Attack
🇬🇧 Swiptly	2024-12-02 15:08:04 (1 year ago)	Multiple critical ModSecurity events ...	Web Spam Bad Web Bot
🇩🇪 sdos.es	2024-12-02 13:02:01 (1 year ago)	"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env"	Web App Attack
🇫🇷 3Gear	2024-12-02 08:26:29 (1 year ago)	194.163.142.120 - - [02/Dec/2024:08:26:05 +0000] "GET /cgi-bin/.env HTTP/1.1" 404 548 "-" "Mozilla/5 ... show more 194.163.142.120 - - [02/Dec/2024:08:26:05 +0000] "GET /cgi-bin/.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36" 194.163.142.120 - - [02/Dec/2024:08:26:26 +0000] "GET /horde/.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36" 194.163.142.120 - - [02/Dec/2024:08:26:28 +0000] "GET /mail/.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36" ... show less	Port Scan Bad Web Bot
🇺🇸 jcbriar	2024-12-02 03:01:21 (1 year ago)	Searching for vulnerable scripts	Hacking Web App Attack
Anonymous	2024-12-01 00:25:37 (1 year ago)	Attempted search for exploits and vulnerabilities detected by fail2ban noscript ...	Brute-Force Web App Attack
🇬🇧 Andrew	2024-11-21 01:58:51 (1 year ago)	Blocked by UFW (TCP on port 80). Source port: 35770 TTL: 57 Packet length: 60 TOS: 0x00 This report ... show more Blocked by UFW (TCP on port 80). Source port: 35770 TTL: 57 Packet length: 60 TOS: 0x00 This report (for 194.163.142.120) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇩🇪 barbarella	2024-11-21 01:49:36 (1 year ago)	Multiple (6179) times attack on https port 443: unsolicited access to Administrative pages (GET /ind ... show more Multiple (6179) times attack on https port 443: unsolicited access to Administrative pages (GET /index.html) 01:49:41 Configuration snooping in .env file (GET /site/.env) 01:49:42 Configuration snooping in .env file (GET /icons/.env) 01:49:43 Configuration snooping in .env file (GET /cgi-bin/.env) 01:49:56 Configuration snooping in .env file (GET /awstats/.env) 01:50:03 Configuration snooping in .env file (GET /manual/.env) 01:50:12 hacking attempt of version control system (GET /site/.gitlab-ci.yml) 01:50:13 unauthorized access to Visual Studio Code - SFTP Extension (GET /site/.ftpconfig) 01:50:13 unauthorized access to Visual Studio Code - SFTP Extension (GET /site/.vscode/ftp-sync.json) show less	Hacking Web App Attack
Anonymous	2024-11-21 01:44:37 (1 year ago)	(mod_security) mod_security triggered on hostname [redacted] 194.163.142.120 (DE/Germany/vmi2269682. ... show more (mod_security) mod_security triggered on hostname [redacted] 194.163.142.120 (DE/Germany/vmi2269682.contaboserver.net) show less	SQL Injection
🇬🇧 sc user	2024-11-20 21:55:27 (1 year ago)	(mod_security) mod_security triggered on hostname [redacted] 194.163.142.120 (DE/Germany/vmi2269682. ... show more (mod_security) mod_security triggered on hostname [redacted] 194.163.142.120 (DE/Germany/vmi2269682.contaboserver.net) show less	SQL Injection
Anonymous	2024-11-20 20:18:56 (1 year ago)	Apache failures to authorize detected by fail2ban auth ...	Brute-Force
🇩🇪 sdos.es	2024-11-20 15:17:44 (1 year ago)	"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env"	Web App Attack
Anonymous	2024-11-20 05:17:05 (1 year ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
Anonymous	2024-11-19 19:45:49 (1 year ago)	[Tue Nov 19 19:45:43.556863 2024] [:error] [pid 1782104] [client 194.163.142.120:52274] script '/var ... show more [Tue Nov 19 19:45:43.556863 2024] [:error] [pid 1782104] [client 194.163.142.120:52274] script '/var/www/vhosts/mcdermit.org/BOISD/phpinfo.php' not found or unable to stat [Tue Nov 19 19:45:43.676726 2024] [:error] [pid 1782104] [client 194.163.142.120:52274] script '/var/www/vhosts/mcdermit.org/BOISD/test.php' not found or unable to stat [Tue Nov 19 19:45:44.773180 2024] [:error] [pid 1782104] [client 194.163.142.120:52274] script '/var/www/vhosts/mcdermit.org/BOISD/app_dev.php' not found or unable to stat [Tue Nov 19 19:45:46.418416 2024] [:error] [pid 1782104] [client 194.163.142.120:52274] script '/var/www/vhosts/mcdermit.org/BOISD/info.php' not found or unable to stat [Tue Nov 19 19:45:49.722524 2024] [:error] [pid 1782104] [client 194.163.142.120:52274] script '/var/www/vhosts/mcdermit.org/BOISD/php_info.php' not found or unable to stat ... show less	Brute-Force

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.250.5.21

🇬🇧 185.170.110.74

🇮🇩 103.193.178.8

🇷🇴 80.94.92.179

🇺🇸 75.80.65.214

🇺🇸 65.49.20.68

🇺🇸 20.84.164.62

🇷🇴 2.57.122.208

🇸🇬 159.65.128.76

🇱🇹 141.98.11.46

🇺🇸 134.33.97.100

🇮🇳 117.197.100.250

🇷🇴 92.118.39.49

🇮🇳 49.43.129.174

🇳🇱 45.148.10.152

🇬🇧 35.203.211.186

🇨🇦 207.161.92.76

🇺🇦 185.159.162.9

🇨🇳 182.138.158.88

🇺🇸 70.167.234.161