JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.177.94.52

195.177.94.52 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 100%: ?

100%

ISP	Pitline Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS214961
Hostname(s)	52.94.177.195.in-addr.arpa
Domain Name	pitline.net
Country	🇫🇷 France
City	Marseille, Provence-Alpes-Cote d'Azur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.177.94.52

Whois 195.177.94.52

IP Abuse Reports for 195.177.94.52:

This IP address has been reported a total of 32 times from 30 distinct sources. 195.177.94.52 was first reported on February 9th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Sling	2026-07-07 04:06:45 (1 day ago)	Automated detection: IP accessed 18 sensitive endpoints within 30s on slingexe.com. Paths: /.aws/cre ... show more Automated detection: IP accessed 18 sensitive endpoints within 30s on slingexe.com. Paths: /.aws/credentials, /web.config, /backup.sql, /.DS_Store, /.env, /dump.sql, /config.json, /config/database.php, /application.properties, /aws/credentials. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36. show less	Web App Attack Bad Web Bot Hacking
🇨🇦 Mediashaker	2026-07-07 04:05:03 (1 day ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 195.177.94.52 (FR/France ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 195.177.94.52 (FR/France/52.94.177.195.in-addr.arpa) show less	Port Scan
Anonymous	2026-07-07 03:35:52 (2 days ago)	(mod_security) mod_security triggered on hostname [redacted] 195.177.94.52 (FR/France/52.94.177.195. ... show more (mod_security) mod_security triggered on hostname [redacted] 195.177.94.52 (FR/France/52.94.177.195.in-addr.arpa) show less	SQL Injection
🇳🇱 Site.eu	2026-07-07 03:11:29 (2 days ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 conseilgouz	2026-07-07 03:09:52 (2 days ago)	sle-17 : Block hidden directories=>/.env(/)	Hacking
🇺🇸 ArturShelby	2026-07-07 03:03:54 (2 days ago)	Honeypot triggered: /debug.php	Web App Attack
🇫🇮 xyz.rip	2026-07-07 02:39:25 (2 days ago)	WAF Violation ...	Hacking Web App Attack
🇲🇽 impra	2026-07-07 02:25:05 (2 days ago)	Detected 8 connection attempts.	Port Scan Hacking Web App Attack
Anonymous	2026-07-07 02:05:19 (2 days ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (18/60 min)'; Requests=18	Port Scan
🇩🇪 maxpower	2026-07-07 02:05:13 (2 days ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 195.177.94.52 (FR/France/52.94.177.195.i ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 195.177.94.52 (FR/France/52.94.177.195.in-addr.arpa): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 195.177.94.52 - - [07/Jul/2026:04:05:05 +0200] "GET /wp-config.php HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" host=spacehosting.ovh 195.177.94.52 - - [07/Jul/2026:04:05:05 +0200] "GET /wp-config.php.bak HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" host=spacehosting.ovh show less	Port Scan
🇩🇪 roxyapi	2026-07-07 01:23:29 (2 days ago)	Honeypot: automated vulnerability scan / web app attack. Last probe: GET /debug/test	Web App Attack Bad Web Bot
🇬🇧 thetomtaylor.co.uk	2026-07-07 01:07:02 (2 days ago)	Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [wa01,wa02]	Hacking SQL Injection Web App Attack
🇫🇷 Hippoline	2026-07-07 00:41:11 (2 days ago)	[Tue Jul 07 02:41:08.547072 2026] [authz_core:error] [pid 18265] [client 195.177.94.52:61046] AH0163 ... show more [Tue Jul 07 02:41:08.547072 2026] [authz_core:error] [pid 18265] [client 195.177.94.52:61046] AH01630: client denied by server configuration: /var/www/deppefest.lu/web/profiler.php [Tue Jul 07 02:41:08.831764 2026] [authz_core:error] [pid 18258] [client 195.177.94.52:61515] AH01630: client denied by server configuration: /var/www/deppefest.lu/web/test.php [Tue Jul 07 02:41:08.840228 2026] [authz_core:error] [pid 18265] [client 195.177.94.52:60934] AH01630: client denied by server configuration: /var/www/deppefest.lu/web/debug.php [Tue Jul 07 02:41:08.866817 2026] [authz_core:error] [pid 18235] [client 195.177.94.52:61185] AH01630: client denied by server configuration: /var/www/deppefest.lu/web/php_info.php [Tue Jul 07 02:41:08.958841 2026] [authz_core:error] [pid 18253] [client 195.177.94.52:61132] AH01630: client denied by server configuration: /var/www/deppefest.lu/web/php-info.php [Tue Jul 07 02:41:08.959310 2026] [authz_core:error] [pid 18262] [client 195.177.94.52:61531] AH01630: ... show less	Brute-Force Web App Attack
Anonymous	2026-07-07 00:36:53 (2 days ago)	[07/Jul/2026:03:36:43 +0300] 178338460316.546231 195.177.94.52 55997 148.251.76.218 443 [07/Jul/2026 ... show more [07/Jul/2026:03:36:43 +0300] 178338460316.546231 195.177.94.52 55997 148.251.76.218 443 [07/Jul/2026:03:36:52 +0300] 178338461298.293402 195.177.94.52 55997 148.251.76.218 443 show less	Web App Attack
🇺🇸 wordpresshosting.solutions	2026-07-07 00:16:50 (2 days ago)	Web app vulnerability scanning detected. Evidence: 195.177.94.52 - - [07/Jul/2026:00:16:43 +0000] "G ... show more Web app vulnerability scanning detected. Evidence: 195.177.94.52 - - [07/Jul/2026:00:16:43 +0000] "GET /.env HTTP/1.1" 404 5569 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 195.177.94.52 - - [07/Jul/2026:00:16:50 +0000] "GET /.git/config HTTP/1.1" 404 5569 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" show less	Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.86.176.134

🇸🇮 176.65.134.3

🇺🇸 165.154.163.240

🇬🇧 154.16.44.246

🇺🇸 146.88.240.139

🇨🇳 121.40.20.65

🇨🇳 117.14.153.153

🇫🇷 85.217.140.15

🇺🇸 81.30.98.81

🇺🇸 66.132.186.136

🇩🇪 47.91.87.204

🇧🇿 45.227.254.152

🇧🇷 45.164.251.106

🇺🇸 40.124.184.7

🇬🇧 5.226.140.73

🇰🇷 220.125.120.231

🇺🇿 213.230.92.2

🇬🇧 193.32.209.243

🇧🇷 186.247.243.18

🇬🇧 159.65.60.103