JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.59.30.140

194.59.30.140 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 57%: ?

57%

ISP	Virtuo Networks France SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS399486
Domain Name	virtuo.net
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.59.30.140

Whois 194.59.30.140

IP Abuse Reports for 194.59.30.140:

This IP address has been reported a total of 34 times from 25 distinct sources. 194.59.30.140 was first reported on August 27th 2024, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-01 12:05:59 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 194.59.30.140 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 194.59.30.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 08:05:54.576100 2026] [security2:error] [pid 4364:tid 4364] [client 194.59.30.140:57734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thermalsoftware.com"] [uri "/.env"] [unique_id "apa_ovPmKFPYfYmn13dWLQAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 10:44:11 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 194.59.30.140 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 194.59.30.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:44:03.981619 2026] [security2:error] [pid 4313:tid 4313] [client 194.59.30.140:49371] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sailyourkayak.com"] [uri "/.env"] [unique_id "apasc5Qv9JJqRtKiGeR0qAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-01 10:35:23 (9 hours ago)	"GET /.env HTTP/1.1"	Hacking Web App Attack
Anonymous	2026-09-01 09:42:59 (9 hours ago)	Web App Attack	Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 08:53:22 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 194.59.30.140 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 194.59.30.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 04:53:17.605935 2026] [security2:error] [pid 28325:tid 28325] [client 194.59.30.140:49963] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.solutiongroove.com"] [uri "/.env"] [unique_id "apaSfWIKhHkKIVTr-7DFtQAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 london2038.com	2026-09-01 02:59:04 (16 hours ago)	Probing for exploits 194.59.30.140 - - [01/Sep/2026:04:59:00 +0200] "GET /.env HTTP/1.1" 422 0 "-" " ... show more Probing for exploits 194.59.30.140 - - [01/Sep/2026:04:59:00 +0200] "GET /.env HTTP/1.1" 422 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.59.30.140 - - [01/Sep/2026:04:59:03 +0200] "GET /sendgrid/.env HTTP/1.1" 422 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Hacking Web App Attack
🇩🇪 MusicLibrary	2026-09-01 01:40:25 (18 hours ago)	Attempted access to sensitive configuration files (.env, .git, etc.)	Bad Web Bot Web App Attack
Anonymous	2026-08-31 23:18:51 (20 hours ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇬🇧 SilverZippo	2026-08-31 22:14:04 (21 hours ago)	Web App Attack	Web App Attack
Anonymous	2026-08-31 19:49:54 (23 hours ago)	Unauthorized access (80/tcp/http)	Port Scan Web App Attack
Anonymous	2026-08-31 18:36:19 (1 day ago)	Sensitive file access attempt	Hacking
🇹🇷 rtbh.com.tr	2024-09-01 16:55:04 (2 years ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2024-08-29 20:55:09 (2 years ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2024-08-28 20:55:11 (2 years ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇬🇧 openstrike.co.uk	2024-08-27 22:51:18 (2 years ago)	SMTP auth failures (2)	Brute-Force

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 91.230.168.138

🇩🇪 64.89.163.178

🇹🇼 59.126.123.132

🇮🇳 43.228.239.82

🇫🇷 2a01:e0a:f6e:4f90:d84e:e861:a322:8c8a

🇨🇳 202.107.164.66

🇧🇷 200.219.200.16

🇻🇳 103.69.96.120

🇧🇷 45.225.54.32

🇺🇸 35.255.183.69

🇫🇷 31.36.251.233

🇹🇼 198.235.24.39

🇬🇧 193.163.125.59

🇷🇴 193.46.255.157

🇨🇿 185.252.88.247

🇨🇳 122.230.32.167

🇫🇷 77.193.147.26

🇩🇪 69.5.169.163

🇱🇻 62.60.130.242

🇨🇳 60.223.251.132