JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.156.152.8

94.156.152.8 was found in our database!

This IP was reported 325 times. Confidence of Abuse is 82%: ?

82%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	Internet Magnate (Pty) Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS214209
Domain Name	magnates.co.za
Country	🇷🇴 Romania
City	Bucharest, Bucharest

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.156.152.8

Whois 94.156.152.8

IP Abuse Reports for 94.156.152.8:

This IP address has been reported a total of 325 times from 96 distinct sources. 94.156.152.8 was first reported on June 10th 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 oncord	2026-03-06 06:23:32 (2 months ago)	Form spam	Web Spam
🇺🇸 xmission.com	2026-03-06 06:21:08 (2 months ago)	Blocked by UFW (TCP on 51665) Source port: 53922 TTL: 47 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 51665) Source port: 53922 TTL: 47 Packet length: 60 TOS: 0x00 This report (for 94.156.152.8) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-03-06 01:46:43 (2 months ago)	Mar 6 01:46:37 ubuntu sshd[167599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Mar 6 01:46:37 ubuntu sshd[167599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.156.152.8 Mar 6 01:46:39 ubuntu sshd[167599]: Failed password for invalid user ftp from 94.156.152.8 port 61104 ssh2 Mar 6 01:46:43 ubuntu sshd[167599]: Failed password for invalid user ftp from 94.156.152.8 port 61104 ssh2 ... show less	Brute-Force SSH
🇩🇪 LRob.fr	2026-03-05 07:15:13 (2 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-05 03:36:45 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 94.156.152.8 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 94.156.152.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 22:36:38.073354 2026] [security2:error] [pid 18438:tid 18438] [client 94.156.152.8:23902] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|accordionstars.com\|F\|2"] [data ".accordionfactory.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "accordionstars.com"] [uri "/www.accordionfactory.com"] [unique_id "aaj6RpML1jcys_1kYLTQMAAAAAU"], referer: http://accordionstars.com/www.accordionfactory.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-03-04 22:01:48 (2 months ago)	Blocked by UFW (TCP on 43014) Source port: 63160 TTL: 47 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 43014) Source port: 63160 TTL: 47 Packet length: 60 TOS: 0x00 This report (for 94.156.152.8) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇵🇱 sefinek.net	2026-03-04 15:07:35 (2 months ago)	Honeypot hit: HTTP/1.1 request on 8332 POST / User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:4 ... show more Honeypot hit: HTTP/1.1 request on 8332 POST / User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate POST Data: {"jsonrpc": "1.0", "id":"curltest", "method": "getbalance", "params": [] }; 8332 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 xmission.com	2026-03-04 00:34:28 (3 months ago)	Blocked by UFW (TCP on 22067) Source port: 12674 TTL: 47 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 22067) Source port: 12674 TTL: 47 Packet length: 60 TOS: 0x00 This report (for 94.156.152.8) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 big-cloud.nl	2026-03-03 20:46:33 (3 months ago)	Try to access /xmlrpc.php?rsd	Web App Attack
🇺🇸 xmission.com	2026-03-03 08:55:48 (3 months ago)	Blocked by UFW (TCP on 45340) Source port: 13978 TTL: 47 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 45340) Source port: 13978 TTL: 47 Packet length: 60 TOS: 0x00 This report (for 94.156.152.8) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇺 oncord	2026-03-03 03:34:02 (3 months ago)	Form spam	Web Spam
🇺🇸 xmission.com	2026-03-02 20:05:28 (3 months ago)	Blocked by UFW (TCP on 18731) Source port: 30746 TTL: 47 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 18731) Source port: 30746 TTL: 47 Packet length: 60 TOS: 0x00 This report (for 94.156.152.8) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-03-02 06:00:48 (3 months ago)	Blocked by UFW (TCP on 1) Source port: 44796 TTL: 47 Packet length: 60 TOS: 0x00 This report (for 9 ... show more Blocked by UFW (TCP on 1) Source port: 44796 TTL: 47 Packet length: 60 TOS: 0x00 This report (for 94.156.152.8) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-03-01 12:39:48 (3 months ago)	Blocked by UFW (TCP on 37834) Source port: 11480 TTL: 47 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 37834) Source port: 11480 TTL: 47 Packet length: 60 TOS: 0x00 This report (for 94.156.152.8) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Nicolmn	2026-03-01 10:35:40 (3 months ago)	Web form spam ( id mmcs.l )	Web Spam

Showing 106 to 120 of 325 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 191.242.70.30

🇺🇸 147.182.241.81

🇨🇳 124.221.163.189

🇻🇳 116.110.158.220

🇸🇬 2a04:c607:33:11:9999::142

🇺🇸 216.218.206.121

🇺🇸 216.73.104.112

🇨🇳 183.236.130.182

🇵🇹 176.79.103.149

🇸🇪 171.25.158.82

🇺🇸 162.216.150.63

🇸🇪 83.145.42.126

🇱🇰 220.247.224.226

🇮🇩 202.165.46.42

🇷🇺 156.229.16.142

🇩🇪 139.19.117.129

🇨🇳 117.81.212.152

🇩🇪 77.91.71.11

🇰🇷 220.92.117.221

🇳🇱 195.178.110.30