AbuseIPDB » 45.94.31.138

45.94.31.138 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 70%: ?

70%

ISP	1337 Services GmbH
Usage Type	Data Center/Web Hosting/Transit
Domain Name	as210558.net
Country	Netherlands
City	Amsterdam, North Holland

Report 45.94.31.138

Whois 45.94.31.138

IP Abuse Reports for 45.94.31.138:

This IP address has been reported a total of 51 times from 34 distinct sources. 45.94.31.138 was first reported on August 10th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-12-10 08:40:40 (2 days ago)	Malicious activity detected	DDoS Attack Bad Web Bot Web App Attack
www.unitiz.com	2024-11-30 04:04:08 (1 week ago)	Probing non-existent URLs	Bad Web Bot Web App Attack
dpinse	2024-11-28 04:36:15 (2 weeks ago)	teler detected Directory Bruteforce against resource /.env from 45.94.31.138	Bad Web Bot
netfactotum	2024-11-28 00:24:27 (2 weeks ago)		Hacking Web App Attack
fstap	2024-11-19 08:57:37 (3 weeks ago)	"GET /.env HTTP/1.1" "POST / HTTP/1.1" "GET /_profiler/phpinfo HTTP/1.1" "GET /php ... show more"GET /.env HTTP/1.1" "POST / HTTP/1.1" "GET /_profiler/phpinfo HTTP/1.1" "GET /phpinfo.php HTTP/1.1" "GET /info.php HTTP/1.1" "GET /aws.yml HTTP/1.1" "GET /.env.bak HTTP/1.1" "GET /config/aws.yml HTTP/1.1" "GET /symfony/_profiler/phpinfo HTTP/1.1" "GET /phpinfo HTTP/1.1" "GET /login?pp=enable&pp=env HTTP/1.1" "GET /?pp=enable&pp=env HTTP/1.1" "GET /?pp=env HTTP/1.1" "GET /.aws/credentials HTTP/1.1" "GET /config.js HTTP/1.1" "GET /helpers/utility.js HTTP/1.1" "GET /config/config.json HTTP/1.1" "GET /sms.py HTTP/1.1" "GET /php.php HTTP/1.1" "GET /infophp.php HTTP/1.1" "GET /php_info.php HTTP/1.1" "GET /test.php HTTP/1.1" "GET /i.php HTTP/1.1" "GET /asdf.php HTTP/1.1" "GET /pinfo.php HTTP/1.1" "GET /phpversion.php HTTP/1.1" "GET /time.php HTTP/1.1" "GET /index.php HTTP/1.1" "GET /temp.php HTTP/1.1" "GET /old_phpinfo.php HTTP/1.1" "GET /infos.php HTTP/1.1" "GET /linusadmin-phpinfo.php HTTP/1.1" "GET /php-info.php HTTP/1.1" "GET /dashboard/phpinfo.php HTTP/1.1" "GET /a.php HTTP/1.1" "GET /php1.php HTTP/1.1" "GET / show less	Bad Web Bot Web App Attack
sthoyer.de	2024-11-19 07:32:20 (3 weeks ago)	45.94.31.138 - - [19/Nov/2024:08:32:18 +0100] "GET /_profiler/phpinfo HTTP/1.1" 404 711 "-" "Mozlila ... show more45.94.31.138 - - [19/Nov/2024:08:32:18 +0100] "GET /_profiler/phpinfo HTTP/1.1" 404 711 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.94.31.138 - - [19/Nov/2024:08:32:18 +0100] "GET /phpinfo.php HTTP/1.1" 404 711 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.94.31.138 - - [19/Nov/2024:08:32:18 +0100] "GET /info.php HTTP/1.1" 404 711 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" ... show less	Web App Attack
juguemosalacarioca.com	2024-11-19 07:24:34 (3 weeks ago)	Multiple HTTP calls attempting to GET resources using common API calls or formats on port 8080	Web App Attack
Sipo Chutão	2024-11-13 01:00:01 (4 weeks ago)	/wp-config.php.bak	Hacking
Rip	2024-11-12 22:28:35 (4 weeks ago)	⚠️ Bad bot identified by user-agent banned for attempts to access to restricted assets. .. ... show more⚠️ Bad bot identified by user-agent banned for attempts to access to restricted assets. ... show less	Bad Web Bot
MPL	2024-11-12 11:45:43 (1 month ago)	tcp/443 (3 or more attempts)	Port Scan
sid3windr	2024-11-12 10:56:51 (1 month ago)	GET /.env (Tarpitted for , wasted 0B)	Web App Attack
zorrigas	2024-11-12 10:02:22 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 45.94.31.138 (NL/The Netherlands/-): 5 in the l ... show more(mod_security) mod_security (id:210492) triggered by 45.94.31.138 (NL/The Netherlands/-): 5 in the last 3600 secs show less	Brute-Force
lavnet.net	2024-11-12 08:17:43 (1 month ago)	[Tue Nov 12 08:17:43.284706 2024] [authz_core:error] [pid 3094001:tid 3094001] [client 45.94.31.138: ... show more[Tue Nov 12 08:17:43.284706 2024] [authz_core:error] [pid 3094001:tid 3094001] [client 45.94.31.138:58637] AH01630: client denied by server configuration: /var/www/a0a0.org/web/index.php [Tue Nov 12 08:17:43.284949 2024] [authz_core:error] [pid 3094001:tid 3094001] [client 45.94.31.138:58637] AH01630: client denied by server configuration: /var/www/a0a0.org/web/index.php [Tue Nov 12 08:17:43.537825 2024] [authz_core:error] [pid 3094001:tid 3094001] [client 45.94.31.138:58637] AH01630: client denied by server configuration: /var/www/a0a0.org/web/phpinfo.php ... show less	Brute-Force
debaba	2024-11-12 07:24:49 (1 month ago)	3	Brute-Force Web App Attack
MPL	2024-11-12 05:34:39 (1 month ago)	tcp/443 (3 or more attempts)	Port Scan