AbuseIPDB » 194.180.48.157

194.180.48.157 was found in our database!

This IP was reported 70 times. Confidence of Abuse is 14%: ?

14%

ISP	Neterra Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS201814
Domain Name	neterra.net
Country	Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 194.180.48.157

Whois 194.180.48.157

IP Abuse Reports for 194.180.48.157:

This IP address has been reported a total of 70 times from 19 distinct sources. 194.180.48.157 was first reported on May 19th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Linux-Tech	2023-05-27 05:47:05 (2 years ago)	194.180.48.157 - - [27/May/2023:07:47:04 +0200] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux ... show more194.180.48.157 - - [27/May/2023:07:47:04 +0200] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 194.180.48.157 - - [27/May/2023:07:47:04 +0200] "GET /.env HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" show less	Port Scan Bad Web Bot Web App Attack
ThreatBook.io	2023-05-27 00:51:41 (2 years ago)	ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/194.180.48.157 ... show moreThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/194.180.48.157 2023-05-26 07:34:15 /.env 2023-05-26 07:34:15 /,{"body":"0x%5B%5D=androxgh0st","content_type":"application/x-www-form-urlencoded","header":{"Accept":["*/*"],"Accept-Encoding":["gzip, deflate"],"Connection":["keep-alive"],"Content-Length":["20"],"Content-Type":["application/x-www-form-urlencoded"],"User-Agent":["Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"]},"host":"139.224.137.6","method":"POST","proto":"HTTP/1.1","remote_addr":"194.180.48.157:59537","status_code":200,"url":"/","user_agent":"Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"} show less	Web App Attack
tg_de	2023-05-25 23:54:23 (2 years ago)	6 attempts since 26.05.2023 01:54:22 CEST - last search for: /debug/default/view?panel=config	Web App Attack
ggb_st	2023-05-25 19:27:06 (2 years ago)	[Thu May 25 22:26:57.090102 2023] [authz_core:error] [pid 45347] [client 194.180.48.157:60405] AH016 ... show more[Thu May 25 22:26:57.090102 2023] [authz_core:error] [pid 45347] [client 194.180.48.157:60405] AH01630: client denied by server configuration: /media/gogo/RASP-DRIVE/WEBSITE_ROOT/DOCROOT/unsecure/.env [Thu May 25 22:26:57.193159 2023] [authz_core:error] [pid 41821] [client 194.180.48.157:60524] AH01630: client denied by server configuration: /media/gogo/RASP-DRIVE/WEBSITE_ROOT/DOCROOT/unsecure/ ... show less	Hacking Brute-Force Bad Web Bot Web App Attack
ThreatBook.io	2023-05-25 00:53:32 (2 years ago)	ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/194.180.48.157 ... show moreThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/194.180.48.157 2023-05-24 19:16:47 /.env 2023-05-24 19:16:48 /,{"body":"0x%5B%5D=androxgh0st","content_type":"application/x-www-form-urlencoded","header":{"Accept":["*/*"],"Accept-Encoding":["gzip, deflate"],"Connection":["keep-alive"],"Content-Length":["20"],"Content-Type":["application/x-www-form-urlencoded"],"User-Agent":["Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"]},"host":"15.164.155.60","method":"POST","proto":"HTTP/1.1","remote_addr":"194.180.48.157:57802","status_code":200,"url":"/","user_agent":"Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"} show less	Web App Attack
LRNP	2023-05-23 19:39:54 (2 years ago)	194.180.48.157 - - [23/May/2023:19:39:53 +0000] "GET /.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Linux ... show more194.180.48.157 - - [23/May/2023:19:39:53 +0000] "GET /.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" ... show less	Bad Web Bot Web App Attack
HoneyPotDu3	2023-05-23 15:13:03 (2 years ago)	194.180.48.157 - - [23/May/2023:17:12:33 +0200] "GET /.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Linux ... show more194.180.48.157 - - [23/May/2023:17:12:33 +0200] "GET /.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4 ... show less	Bad Web Bot Web App Attack
CTI-Beholder	2023-05-23 13:59:11 (2 years ago)	Directory fuzzing , Looking for .env file	Brute-Force
FEWA	2023-05-20 15:37:52 (2 years ago)	Fail2Ban Ban Triggered	Hacking Bad Web Bot Web App Attack
ThreatBook.io	2023-05-19 00:41:41 (2 years ago)	ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/194.180.48.157 ... show moreThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/194.180.48.157 2023-05-18 02:29:13 /vendor/phpunit/phpunit/phpunit.xml 2023-05-18 05:53:35 /.env 2023-05-18 02:29:12 /.env 2023-05-18 05:53:35 /vendor/phpunit/phpunit/phpunit.xml show less	Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩