JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 46.224.93.94

46.224.93.94 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 95%: ?

95%

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	static.94.93.224.46.clients.your-server.de
Domain Name	hetzner.com
Country	🇩🇪 Germany
City	Nuremberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 46.224.93.94

Whois 46.224.93.94

IP Abuse Reports for 46.224.93.94:

This IP address has been reported a total of 17 times from 17 distinct sources. 46.224.93.94 was first reported on October 21st 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 Bay13	2026-10-22 14:45:18 (1 day ago)	CrowdSec:custom/http-probing	Web App Attack
🇫🇷 Bensay	2026-10-22 14:34:58 (1 day ago)	Repeated suspicious HTTP service scan against a blocked web sinkhole; threshold=3 events/10m; result ... show more Repeated suspicious HTTP service scan against a blocked web sinkhole; threshold=3 events/10m; result=blocked; user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 show less	Port Scan
🇬🇷 setupgr	2026-10-22 13:25:29 (1 day ago)	(mod_security) mod_security (id:11000011) triggered by 46.224.93.94 (DE/Germany/Bavaria/Nuremberg/-/ ... show more (mod_security) mod_security (id:11000011) triggered by 46.224.93.94 (DE/Germany/Bavaria/Nuremberg/-/[AS24940 Hetzner Online GmbH]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Thu Oct 22 16:25:25.783875 2026] [security2:error] [pid 407731:tid 407872] [client 46.224.93.94:57702] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "clients.your-server.de" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: static.94.93.224.46.clients.your-server.de"] [severity "CRITICAL"] [hostname "villa-izabela.com"] [uri "/actuator"] [unique_id "atoOxc8FJEpg0Q_ioDafGwAAANE"] show less	Port Scan
🇳🇴 jad-abuse	2026-10-22 13:20:24 (1 day ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: actuator. ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: actuator. Observed by 1 sensor(s); 3 hits. show less	Hacking Web App Attack
🇨🇳 Peter Yu	2026-10-22 11:05:11 (1 day ago)		Bad Web Bot Web App Attack
Anonymous	2026-10-22 10:05:36 (1 day ago)	Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=26	Hacking
🇩🇪 findlab	2026-10-22 09:00:02 (1 day ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇯🇵 beon	2026-10-22 08:47:11 (1 day ago)	[DateTime=>2026-10-22T08:47:11Z to 2026-10-22T08:47:13Z (UTC)] , [404targets=>/actuator, /api/actuat ... show more [DateTime=>2026-10-22T08:47:11Z to 2026-10-22T08:47:13Z (UTC)] , [404targets=>/actuator, /api/actuator] , [total_Hits=>twice] show less	Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-10-22 08:23:56 (1 day ago)	Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels an ... show more Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels and known vulnerability paths. show less	Hacking Brute-Force Web App Attack
🇨🇱 Fernando Soto	2026-10-22 07:25:01 (1 day ago)	WAF propio vps1 (CL): sensx3 score 12 en 1h. sondeo rutas sensibles.	Web App Attack
🇫🇷 ELYAZ	2026-10-22 06:01:49 (1 day ago)	(y3) Failed access -byebye- from 46.224.93.94 (DE/Germany/static.94.93.224.46.clients.your-server.de ... show more (y3) Failed access -byebye- from 46.224.93.94 (DE/Germany/static.94.93.224.46.clients.your-server.de): (CF_ENABLE) show less	Hacking
🇬🇧 consul.to	2026-10-22 05:25:00 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 grassau.com	2026-10-22 04:56:28 (1 day ago)	Port Scan detected from 46.224.93.94 (DE/Germany/Bavaria/Nuremberg/static.94.93.224.46.clients.you ... show more Port Scan detected from 46.224.93.94 (DE/Germany/Bavaria/Nuremberg/static.94.93.224.46.clients.your-server.de). show less	Port Scan
🇳🇱 tr1n	2026-10-22 04:13:37 (1 day ago)	Triggered Cloudflare WAF (botFight) from DE. Action: MANAGED_CHALLENGE \| ASN: 24940 (Hetzner Online ... show more Triggered Cloudflare WAF (botFight) from DE. Action: MANAGED_CHALLENGE \| ASN: 24940 (Hetzner Online GmbH) \| Protocol: HTTP/1.1 (GET) \| Endpoint: /actuator \| Timestamp: 2026-10-22T04:13:37Z \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-10-21 17:32:41 (2 days ago)	Repeated requests for suspicious nonexistent URLs, for example: /api/actuator (HTTP/1.1 port 443, us ... show more Repeated requests for suspicious nonexistent URLs, for example: /api/actuator (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36") show less	Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.173

🇮🇩 182.8.161.160

🇪🇨 181.188.237.216

🇨🇳 180.165.3.223

🇩🇪 176.65.139.40

🇭🇰 172.71.218.74

🇭🇰 162.158.178.149

🇯🇵 133.88.99.250

🇺🇸 66.132.186.247

🇩🇪 64.89.163.137

🇸🇬 43.156.79.172

🇺🇸 23.234.108.171

🇺🇸 3.91.44.157

🇺🇸 96.78.175.36

🇷🇴 84.232.150.59

🇮🇳 74.225.146.100

🇨🇳 47.115.62.150

🇳🇱 45.148.10.151

🇧🇪 34.52.165.129

🇺🇸 23.234.107.83