JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

94.156.253.57

Neutral Activity

Abuse Confidence Score

0% Low Risk

31 reports

24 reporters · latest 3 years ago

ISP: SPARKS COMMUNICATIONS LTD
Usage Type: Fixed Line ISP
ASN: AS208893
Domain Name: sparks.travel
Country: 🇬🇧 United Kingdom of Great Britain and Northern Ireland
City: London, England

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

94.156.253.57 has been reported 31 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

31 from 24 distinct reporters

First reported

October 13th 2023

Most recent report

3 years ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MogBox	2023-10-30 01:48:20 UTC · (3 years ago)	(mod_security) mod_security (id:210492) triggered by 94.156.253.57 (NL/Netherlands/-): 1 in the last 3600 secs (CF_ENABLE); Ports: ; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Oct 29 21:48:18.670876 2023] [security2:error] [pid 37417:tid 47335 ... show more (mod_security) mod_security (id:210492) triggered by 94.156.253.57 (NL/Netherlands/-): 1 in the last 3600 secs (CF_ENABLE); Ports: ; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Oct 29 21:48:18.670876 2023] [security2:error] [pid 37417:tid 47335275042560] [client 94.156.253.57:33736] [client 94.156.253.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "67.225.186.60"] [uri "/.env"] [unique_id "ZT8LYhaOfbTqUEfPhIcwYQAAAAE"] show less	Hacking
🇷🇸 Smel	2023-10-29 05:45:46 UTC · (3 years ago)	MH/MP Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 Block_Steady_Crew	2023-10-28 23:40:41 UTC · (3 years ago)	Honeypot snared from 94.156.253.57	Port Scan Web App Attack
🇦🇺 ozisp.com.au	2023-10-28 19:41:25 UTC · (3 years ago)	BG_MNT-NETERRA_<33>1698522084 [1:2031502:4] ET INFO Request to Hidden Environment File - Inbound [Classification: Misc activity] [Priority: 3] {TCP} 94.156.253.57:60198	Hacking
🇬🇧 ASPAN	2023-10-28 17:02:06 UTC · (3 years ago)	Unsolicited connection attempt(s), port:80.	Port Scan
🇬🇧 ASPAN	2023-10-28 17:02:06 UTC · (3 years ago)	Unsolicited connection attempt(s), port:80.	Port Scan
Anonymous	2023-10-28 16:09:22 UTC · (3 years ago)	94.156.253.57 - - [28/Oct/2023:18:09:21 +0200] "GET /.env.local HTTP/1.1" 460 0 "-" "python-requests/2.28.2" 94.156.253.57 - - [28/Oct/2023:18:09:21 +0200] "GET /.env.dev HTTP/1.1" 460 0 "-" "python-requests/2.28.2" 94.156.253.57 - - [28/Oct/2023:18: ... show more 94.156.253.57 - - [28/Oct/2023:18:09:21 +0200] "GET /.env.local HTTP/1.1" 460 0 "-" "python-requests/2.28.2" 94.156.253.57 - - [28/Oct/2023:18:09:21 +0200] "GET /.env.dev HTTP/1.1" 460 0 "-" "python-requests/2.28.2" 94.156.253.57 - - [28/Oct/2023:18:09:21 +0200] "GET /.env.prod HTTP/1.1" 460 0 "-" "python-requests/2.28.2" 94.156.253.57 - - [28/Oct/2023:18:09:21 +0200] "GET /.aws/config HTTP/1.1" 460 0 "-" "python-requests/2.28.2" 94.156.253.57 - - [28/Oct/2023:18:09:21 +0200] "GET /?pp=env HTTP/1.1" 460 0 "-" "python-requests/2.28.2" 94.156.253.57 - - [28/Oct/2023:18:09:21 +0200] "GET /cgi-bin/printenv.pl HTTP/1.1" 460 0 "-" "python-requests/2.28.2" 94.156.253.57 - - [28/Oct/2023:18:09:21 +0200] "GET /config.properties HTTP/1.1" 460 0 "-" "python-requests/2.28.2" ... show less	Web App Attack
🇺🇸 Block_Steady_Crew	2023-10-27 05:50:45 UTC · (3 years ago)	Honeypot snared from 94.156.253.57	Port Scan Web App Attack
🇦🇺 Bay13	2023-10-27 05:49:08 UTC · (3 years ago)	f2b http-unavailable	Hacking Web App Attack
🇬🇧 blik2108	2023-10-26 13:40:20 UTC · (3 years ago)	wight.blacknell.co.uk:80 94.156.253.57 - - [26/Oct/2023:14:40:19 +0100] "GET /config/.aws/config HTTP/1.1" 404 492 "-" "python-requests/2.28.2" wight.blacknell.co.uk:80 94.156.253.57 - - [26/Oct/2023:14:40:19 +0100] "GET /config/?pp=env HTTP/1.1" 404 ... show more wight.blacknell.co.uk:80 94.156.253.57 - - [26/Oct/2023:14:40:19 +0100] "GET /config/.aws/config HTTP/1.1" 404 492 "-" "python-requests/2.28.2" wight.blacknell.co.uk:80 94.156.253.57 - - [26/Oct/2023:14:40:19 +0100] "GET /config/?pp=env HTTP/1.1" 404 492 "-" "python-requests/2.28.2" wight.blacknell.co.uk:80 94.156.253.57 - - [26/Oct/2023:14:40:19 +0100] "GET /config/docker-compose.yaml HTTP/1.1" 404 492 "-" "python-requests/2.28.2" wight.blacknell.co.uk:80 94.156.253.57 - - [26/Oct/2023:14:40:19 +0100] "GET /config/docker-compose.ymlDockerfile HTTP/1.1" 404 492 "-" "python-requests/2.28.2" wight.blacknell.co.uk:80 94.156.253.57 - - [26/Oct/2023:14:40:19 +0100] "GET /config/application/configs/application.ini HTTP/1.1" 404 492 "-" "python-requests/2.28.2" ... show less	Brute-Force Web App Attack
🇺🇸 kelliwic.net	2023-10-26 03:35:00 UTC · (3 years ago)	Excessive WAF anomalies detected (F2B)	Web App Attack
🇨🇳 ThreatBook.io	2023-10-25 23:03:19 UTC · (3 years ago)	ThreatBook Intelligence: Spam,Exploit more details on https://threatbook.io/ip/94.156.253.57 2023-10-25 03:26:11 /config/application/configs/application.ini 2023-10-25 03:26:08 /?pp=env 2023-10-25 03:26:09 /docker-compose.yaml 2023-10-25 03:26:10 /do ... show more ThreatBook Intelligence: Spam,Exploit more details on https://threatbook.io/ip/94.156.253.57 2023-10-25 03:26:11 /config/application/configs/application.ini 2023-10-25 03:26:08 /?pp=env 2023-10-25 03:26:09 /docker-compose.yaml 2023-10-25 03:26:10 /docker-compose.ymlDockerfile 2023-10-25 03:26:10 /application/configs/application.ini 2023-10-25 03:26:08 /config/.aws/config 2023-10-25 03:26:09 /config/docker-compose.yaml 2023-10-25 03:26:10 /config/docker-compose.ymlDockerfile 2023-10-25 03:26:08 /.aws/config 2023-10-25 03:26:09 /config/?pp=env show less	Web App Attack
🇦🇺 Ross Wheatley	2023-10-25 20:28:05 UTC · (3 years ago)	GET /.msmtprc HTTP/1.1 404 492 - python-requests/2.28.2	Brute-Force Web App Attack
🇷🇸 Smel	2023-10-25 09:18:12 UTC · (3 years ago)	Unauthorized Probe/Connection, Hack -	Port Scan Hacking
🇹🇭 Sawasdee	2023-10-25 04:15:08 UTC · (3 years ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 123.14.122.13

🇸🇬 104.23.175.99

🇺🇸 67.205.134.252

🇫🇷 62.171.159.186

🇺🇸 34.149.76.49

🇧🇪 34.140.134.245

🇫🇮 178.20.210.151

🇺🇸 136.38.143.170

🇺🇸 98.16.14.160

🇳🇱 45.148.10.141

🇨🇦 34.130.49.77

🇺🇸 34.117.147.68

🇺🇸 2604:a880:400:d1:0:5:6d8a:d001

🇨🇳 223.86.148.242

🇷🇺 213.33.182.183

🇧🇷 200.11.13.62

🇷🇺 178.178.194.135

🇦🇹 146.70.116.238

🇸🇬 47.236.167.82

🇺🇸 35.227.120.10