JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

194.195.91.39

Recent Activity

Abuse confidence score ?

59% Elevated

123 reports

71 reporters · latest 6 days ago

ISP	TerraTransit AG
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	terratransit.de
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 194.195.91.39

Export CSV

This IP address has been reported a total of 123 times from 71 distinct sources. 194.195.91.39 was first reported on September 2nd 2021, and the most recent report was 6 days ago. In the last 60 days, the top reporter locations were: Australia with 4 reports; Germany with 4 reports; France with 4 reports. The most common categories in these recent reports were: Web App Attack 10 times; Web Spam 5 times; Hacking 5 times; Brute-Force 4 times; Bad Web Bot 4 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ut-addicted.com	2026-10-11 13:28:12 (6 days ago)	\[11/Oct/2026:15:28:09 +0200\] asuO6c8f5qFCym3yyqFfHQAAAMM 194.195.91.39 35291 78.46.187.162 443 \[1 ... show more \[11/Oct/2026:15:28:09 +0200\] asuO6c8f5qFCym3yyqFfHQAAAMM 194.195.91.39 35291 78.46.187.162 443 \[11/Oct/2026:15:28:10 +0200\] asuO6s8f5qFCym3yyqFfHgAAAMo 194.195.91.39 35291 78.46.187.162 443 \[11/Oct/2026:15:28:11 +0200\] asuO688f5qFCym3yyqFfHwAAAMA 194.195.91.39 35291 78.46.187.162 443 show less	Brute-Force Web App Attack
🇩🇪 Nightreaver	2026-10-11 05:06:30 (1 week ago)	194.195.91.39 - - [11/Oct/2026:07:06:28 0200] "GET /redmine/.env HTTP/1.1" 404 493 "-" "Mozilla/5.0 ... show more 194.195.91.39 - - [11/Oct/2026:07:06:28 0200] "GET /redmine/.env HTTP/1.1" 404 493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0" 194.195.91.39 - - [11/Oct/2026:07:06:28 0200] "GET /__tests__/test-become/.env HTTP/1.1" 404 493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 194.195.91.39 - - [11/Oct/2026:07:06:29 0200] "GET /frontend_dev.php/$ HTTP/1.1" 404 493 "-" "Mozilla/5.0 (Windows NT 10.0; rv:105.0) Gecko/20100101 Firefox/105.0" 194.195.91.39 - - [11/Oct/2026:07:06:30 0200] "GET /debug/default/view?panel=config/frontend_dev.php HTTP/1.1" 404 493 "-" "Mozilla/5.0 (Windows NT 10.0; rv:105.0) Gecko/20100101 Firefox/105.0" 194.195.91.39 - - [11/Oct/2026:07:06:30 0200] "GET /debug/default/view?panel=config HTTP/1.1" 404 493 "-" "Mozilla/5.0 (Windows NT 10.0; rv:105.0) Gecko/20100101 Firefox/105.0"[...] show less	Bad Web Bot Web App Attack
🇦🇺 Starburst SysOp Team	2026-10-10 20:37:43 (1 week ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-syd2-4)	Hacking Bad Web Bot
🇫🇷 Kejult	2026-10-10 14:35:42 (1 week ago)	Honeypot Finding: repeated HTTP/web-application probing captured by Tanner on TCP/80; 73 request eve ... show more Honeypot Finding: repeated HTTP/web-application probing captured by Tanner on TCP/80; 73 request event(s), 67 distinct path(s), 13 request(s) to suspicious path(s). Examples: /.env, /info.php, /owncloud/apps/graphapi/vendor/microsoft/microsoft-graph/tests/GetPhpInfo.php, /phpinfo.php, /.env.prod. show less	Hacking Bad Web Bot Web App Attack
🇧🇪 sid3windr	2026-10-09 17:58:56 (1 week ago)	POST /.env (Tarpitted for 19m44s, wasted 69.49kB)	Web App Attack
🇱🇹 NotACaptcha	2026-10-09 09:42:50 (1 week ago)	webserver:80 [09/Oct/2026] "GET /config/config.js HTTP/1.1" 404 396 "-" "Mozilla/5.0 (Macintosh; In ... show more webserver:80 [09/Oct/2026] "GET /config/config.js HTTP/1.1" 404 396 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:105.0) Gecko/20100101 Firefox/105.0" webserver:80 [09/Oct/2026] "GET / HTTP/1.1" 200 445 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0" show less	Web App Attack
🇺🇸 lostswordfish.com	2026-09-30 14:56:03 (2 weeks ago)	Wordfence waf block on lostswordfish	Web App Attack
🇩🇪 ger-stg-sifi1	2026-09-28 02:17:50 (2 weeks ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇧🇪 cmbplf	2026-09-28 01:36:39 (2 weeks ago)	1.403 requests with url.path //xmlrpc.php	Brute-Force Bad Web Bot
🇩🇪 big-cloud.nl	2026-09-28 00:23:18 (2 weeks ago)	Try to access /dorpskrant//xmlrpc.php?rsd	Web App Attack
🇮🇹 VHosting	2026-09-27 23:50:04 (2 weeks ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
Anonymous	2026-09-27 21:52:42 (2 weeks ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇦🇺 oncord	2026-09-12 16:08:08 (1 month ago)	Form spam	Web Spam
🇬🇧 oncord	2026-09-10 23:07:06 (1 month ago)	Form spam	Web Spam
🇫🇷 masterguru	2026-09-09 11:21:30 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 194.195.91.39 (SE/Sweden/-): 1 in the last 360 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 194.195.91.39 (SE/Sweden/-): 1 in the last 3600 secs (0-196) show less	Hacking

Showing 1 to 15 of 123 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.226.114.202

🇮🇳 103.204.93.205

🇺🇸 68.235.46.77

🇻🇪 38.188.52.128

🇳🇱 35.204.20.136

🇬🇧 35.203.211.230

🇩🇪 217.181.93.92

🇧🇷 186.192.67.12

🇩🇪 134.209.252.42

🇨🇳 112.26.30.212

🇷🇺 89.250.167.237

🇺🇸 68.235.46.74

🇨🇳 27.185.68.75

🇺🇸 20.38.34.153

🇺🇸 2a03:2880:f32b:4:face:b00c:0:79f4

🇧🇷 205.210.31.212

🇬🇧 200.138.46.249

🇱🇦 183.182.120.178

🇺🇸 155.2.191.122

🇺🇸 98.98.79.38