JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.156.14.27

94.156.14.27 was found in our database!

This IP was reported 101 times. Confidence of Abuse is 0%: ?

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	netutils.io
Country	🇷🇴 Romania
City	Bucharest, Bucharest

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.156.14.27

Whois 94.156.14.27

IP Abuse Reports for 94.156.14.27:

This IP address has been reported a total of 101 times from 60 distinct sources. 94.156.14.27 was first reported on September 2nd 2022, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-01-30 01:44:28 (4 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇩🇪 stinpriza	2026-01-23 12:05:02 (4 months ago)	Web App Attack	Web App Attack
🇺🇸 xmission.com	2026-01-12 07:33:01 (5 months ago)	Blocked by UFW (TCP on 59249) Source port: 13360 TTL: 50 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 59249) Source port: 13360 TTL: 50 Packet length: 60 TOS: 0x00 This report (for 94.156.14.27) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇭🇺 Lacika555	2026-01-08 22:49:40 (5 months ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇧🇷 SvrAdmin	2025-12-29 02:34:26 (5 months ago)	[101] (smtpauth) Failed SMTP AUTH login from 94.156.14.27 (BG/Bulgaria/-): 5 in the last 3600 secs; ... show more [101] (smtpauth) Failed SMTP AUTH login from 94.156.14.27 (BG/Bulgaria/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2025-12-28 23:30:43 dovecot_login authenticator failed for (ADMIN) [94.156.14.27]:21199: 535 Incorrect authentication data ([email protected]) 2025-12-28 23:30:43 dovecot_login authenticator failed for (ADMIN) [94.156.14.27]:18964: 535 Incorrect authentication data ([email protected]) 2025-12-28 23:30:43 dovecot_login authenticator failed for (ADMIN) [94.156.14.27]:42611: 535 Incorrect authentication data ([email protected]) 2025-12-28 23:34:23 dovecot_login authenticator failed for (ADMIN) [94.156.14.27]:50992: 535 Incorrect authentication data ([email protected]) 2025-12-28 23:34:23 dovecot_login authenticator failed for (ADMIN) [94.156.14.27]:30230: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
🇭🇺 Lacika555	2025-12-24 11:12:02 (5 months ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇭🇺 Lacika555	2025-12-20 04:46:15 (5 months ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇮🇹 VHosting	2025-11-26 18:02:43 (6 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇦🇺 screwlooseit.com.au	2025-11-25 03:04:34 (6 months ago)	Blocked by CSF 13 firewall - Rule: mysaslmatch BG/Bulgaria/-	Web App Attack
Anonymous	2025-11-21 09:18:43 (6 months ago)	scanning http requests from known botnet	Web App Attack
🇩🇪 mailox	2025-11-19 15:22:55 (6 months ago)	94.156.14.27 - - [19/Nov/2025:16:22:54 +0100] "GET / HTTP/1.1" 400 248 "-" "WanScannerBot/1.1" "-" . ... show more 94.156.14.27 - - [19/Nov/2025:16:22:54 +0100] "GET / HTTP/1.1" 400 248 "-" "WanScannerBot/1.1" "-" ... show less	Port Scan Bad Web Bot Web App Attack
🇺🇸 www.winos.me	2025-11-14 03:46:50 (7 months ago)	stream fail	Web App Attack
🇩🇪 neverdown.eu	2025-11-11 04:54:35 (7 months ago)	(smtpauth) Failed SMTP AUTH login from 94.156.14.27 (BG/Bulgaria/-): 5 in the last 60 secs; Ports: * ... show more (smtpauth) Failed SMTP AUTH login from 94.156.14.27 (BG/Bulgaria/-): 5 in the last 60 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2025-11-11 06:54:29 dovecot_login authenticator failed for (ADMIN) [94.156.14.27]:4331: 535 Incorrect authentication data ([email protected]) 2025-11-11 06:54:29 dovecot_login authenticator failed for (ADMIN) [94.156.14.27]:48441: 535 Incorrect authentication data ([email protected]) 2025-11-11 06:54:29 dovecot_login authenticator failed for (ADMIN) [94.156.14.27]:23363: 535 Incorrect authentication data ([email protected]) 2025-11-11 06:54:29 dovecot_login authenticator failed for (ADMIN) [94.156.14.27]:11984: 535 Incorrect authentication data ([email protected]) 2025-11-11 06:54:29 dovecot_login authenticator failed for (ADMIN) [94.156.14.27]:39038: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇺🇸 nodepile	2025-11-09 21:03:09 (7 months ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/browse-by-car-model.html ua ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/browse-by-car-model.html ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 11_0_1) AppleWebKit/537.36 (KHTML, like Gecko) Brave Chrome/88.0.4324.192 Safari/537.36') show less	Exploited Host Web App Attack
🇺🇸 nodepile	2025-11-04 15:27:50 (7 months ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/brands.html ua='Mozilla/5.0 ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/brands.html ua='Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.83 Safari/537.36') show less	Exploited Host Web App Attack

Showing 1 to 15 of 101 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇿 2a02:598:64:8a00::302:5c3

🇫🇮 147.185.133.200

🇨🇳 101.96.200.79

🇧🇷 45.188.156.169

🇺🇸 195.184.76.83

🇳🇱 195.178.110.199

🇺🇸 173.234.225.158

🇨🇳 144.123.78.193

🇮🇳 122.176.122.24

🇸🇬 47.84.130.53

🇱🇹 45.227.254.170

🇳🇱 45.148.10.141

🇨🇦 45.44.66.52

🇧🇪 198.235.24.234

🇧🇪 198.235.24.215

🇧🇷 190.115.89.152

🇺🇸 98.102.148.242

🇳🇱 92.63.197.5

🇺🇸 91.230.168.11

🇸🇬 45.78.198.199