JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.169.163.56

194.169.163.56 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 78%: ?

78%

ISP	MT FINANCE LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS214822
Domain Name	ruvds.com
Country	🇷🇺 Russian Federation
City	Saint Petersburg, St.-Petersburg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.169.163.56

Whois 194.169.163.56

IP Abuse Reports for 194.169.163.56:

This IP address has been reported a total of 17 times from 14 distinct sources. 194.169.163.56 was first reported on October 21st 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-10-22 22:01:17 (2 hours ago)	Auto-ban: >3000 req/min op 2026-10-22	Web App Attack SSH Hacking
Anonymous	2026-10-22 14:34:04 (9 hours ago)	Bot / scanning and/or hacking attempts: GET /.env.local HTTP/1.1, GET /.env HTTP/1.1	Hacking Web App Attack
🇮🇹 CoreTech srl	2026-10-22 13:13:56 (11 hours ago)	cloudlinux2 fail2ban: 2026-10-22 15:09:12,147 fail2ban.filter [1488]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-10-22 15:09:12,147 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 194.169.163.56 - 2026-10-22 15:09:12cloudlinux2 fail2ban: 2026-10-22 15:09:13,768 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 194.169.163.56 - 2026-10-22 15:09:13cloudlinux2 fail2ban: 2026-10-22 15:11:56,516 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 146.70.130.137 - 2026-10-22 15:11:56cloudlinux2 fail2ban: 2026-10-22 15:11:56,997 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 146.70.130.137 - 2026-10-22 15:11:56cloudlinux2 fail2ban: 2026-10-22 15:12:48,714 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 189.203.158.6 - 2026-10-22 15:12:48cloudlinux2 fail2ban: 2026-10-22 15:13:27,641 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 34.17.145.54 - 2026-10-22 15:13:27cloudlinux2 fail2ban: 2026-10-22 15:13:27,561 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 34.17.145.54 - 2026-10-22 1 show less	Brute-Force
🇺🇸 WellSpring	2026-10-22 12:51:02 (11 hours ago)	env leak on wellspr.ing/.env — WellSpr.ing/NetSentinel civic-AI security layer	Web App Attack
🇵🇱 Budyn	2026-10-22 12:22:47 (12 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: radius.budyn.xyz \| URI: /.env \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Edge/125.0.2535.51 \| BODY: [Empty / GET Request] \| HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"RU","Cf-Connecting-Ip":"194.169.163.56","Cdn-Loop":"cloudflare; loops=1","Connection":"Keep-Alive","Cf-Ray":"a4e87831a83f8066-ARN","Accept":"text\/plain,text\/html,application\/xhtml+xml,application\/xml;q=0.9,\/;q= show less	Bad Web Bot Web App Attack
Anonymous	2026-10-22 12:22:36 (12 hours ago)	sensitive path probe detected by fail2ban ...	Port Scan Web App Attack
Anonymous	2026-10-22 08:54:05 (15 hours ago)	Email spam	Email Spam
🇿🇦 conure.sh	2026-10-22 01:02:36 (23 hours ago)	csagent: score 20.5: 404 noise floor x2, secrets grab x2; 2 domain(s) in 0s	Web App Attack
🇳🇱 Alt255	2026-10-22 01:01:32 (23 hours ago)	[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 194.169.163.56 - - [22/Oct/2026:03:01:13 +0200] "GET /.env.local HTTP/1.1" 301 6286 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Edge/125.0.2535.51" ... show less	Bad Web Bot Web App Attack
🇦🇺 FireGuard Server	2026-10-22 00:05:40 (1 day ago)	Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=465	Port Scan Hacking
🇨🇳 Peter Yu	2026-10-21 19:54:46 (1 day ago)		Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-21 19:37:30 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 194.169.163.56 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 194.169.163.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 15:37:20.740339 2026] [security2:error] [pid 27501:tid 27501] [client 194.169.163.56:41514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hei-tx.com.swhinc.net"] [uri "/.env"] [unique_id "atkUcL0NjAX4jVwKPxYkbwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-21 19:16:00 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 194.169.163.56 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 194.169.163.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 15:15:53.900967 2026] [security2:error] [pid 29198:tid 29198] [client 194.169.163.56:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.785insulation.com"] [uri "/.env"] [unique_id "atkPaQ8NybW_OFuewF11JwAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 conure.sh	2026-10-21 19:02:40 (1 day ago)	csagent: score 20.2: secrets grab x2, 404 noise floor x1; 1 domain(s) in 0s	Web App Attack
🇵🇱 Budyn	2026-10-21 18:41:43 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cpanel.teddypot.cloud \| URI: /.env \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Edge/125.0.2535.51 \| BODY: [Empty / GET Request] \| HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"RU","Cf-Connecting-Ip":"194.169.163.56","Cdn-Loop":"cloudflare; loops=1","Connection":"Keep-Alive","Cf-Ray":"a4e265e2edc61806-ARN","Accept":"text\/plain,text\/html,application\/xhtml+xml,application\/xml;q=0.9,*\ show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇴 200.105.172.184

🇨🇴 191.92.150.56

🇺🇸 185.238.231.209

🇺🇸 140.235.169.229

🇨🇳 101.96.221.200

🇨🇳 101.96.203.141

🇺🇸 99.146.116.67

🇫🇷 91.196.152.16

🇫🇷 85.217.140.34

🇵🇱 80.238.120.50

🇷🇴 80.94.92.239

🇺🇸 40.119.25.141

🇭🇰 8.210.41.4

🇺🇸 4.4.96.204

🇮🇩 202.158.36.50

🇺🇸 195.184.76.169

🇺🇸 195.63.9.212

🇧🇷 186.237.125.196

🇬🇧 172.237.117.50

🇮🇳 150.107.43.56