JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.156.66.99

94.156.66.99 was found in our database!

This IP was reported 767 times. Confidence of Abuse is 0%: ?

ISP	Al-Kam Telecommunication and Information Technology Co. LLC.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS50837
Domain Name	v2.com.sa
Country	🇸🇦 Saudi Arabia
City	Jeddah, Mecca Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.156.66.99

Whois 94.156.66.99

IP Abuse Reports for 94.156.66.99:

This IP address has been reported a total of 767 times from 173 distinct sources. 94.156.66.99 was first reported on August 1st 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 kumiko	2024-09-01 00:01:11 (1 year ago)	[2024-09-01 00:00:56] Persistent attack/probing over several days.	Port Scan Brute-Force Bad Web Bot
🇪🇸 Gem	2024-08-31 08:35:00 (1 year ago)	Unauthorized web scan.	Web App Attack
Anonymous	2024-08-30 11:55:16 (1 year ago)	[29/Aug/2024:16:15:24 -0400] \"GET /.env HTTP/1.1\" \"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US ... show more [29/Aug/2024:16:15:24 -0400] \"GET /.env HTTP/1.1\" \"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/534.7 (KHTML, like Gecko) Chrome/7.0.514.0 Safari/534.7\" [29/Aug/2024:16:17:10 -0400] \"GET /.env HTTP/1.1\" \"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.87 Safari/537.36\" show less	Hacking
🇵🇱 mkey	2024-08-30 05:50:56 (1 year ago)	WEB-REQ-ATACK: Invalid URI in request [GET /.env]	Hacking Web App Attack
🇯🇵 Rcat	2024-08-29 22:21:32 (1 year ago)	94.156.66.99 - - [29/Aug/2024:08:15:13 +0900] "GET /.env HTTP/1.1" 400 552 "-" "Mozilla/5.0 (Linux; ... show more 94.156.66.99 - - [29/Aug/2024:08:15:13 +0900] "GET /.env HTTP/1.1" 400 552 "-" "Mozilla/5.0 (Linux; Android 8.0.0; HTC U11 plus) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 94.156.66.99 - - [29/Aug/2024:08:19:18 +0900] "GET /.env HTTP/1.1" 400 150 "-" "Mozilla/5.0 (Windows NT 6.2; rv:20.0) Gecko/20121202 Firefox/20.0" 94.156.66.99 - - [30/Aug/2024:07:21:31 +0900] "GET /.env HTTP/1.1" 400 150 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1 Safari/605.1.15" ... show less	DDoS Attack Port Scan Brute-Force Bad Web Bot Web App Attack IoT Targeted
🇩🇪 barbarella	2024-08-29 22:12:57 (1 year ago)	Multiple (2) times attack on https port 443: Configuration snooping with .env file (GET /.env) 22 ... show more Multiple (2) times attack on https port 443: Configuration snooping with .env file (GET /.env) 22:21:05 Configuration snooping with .env file (GET /.env) show less	Hacking Web App Attack
🇬🇧 SecondEdge	2024-08-29 22:07:29 (1 year ago)	A web attack was detected from 94.156.66.99 (Bulgaria / Plovdiv / Karlovo) against 52.215.230.232 (G ... show more A web attack was detected from 94.156.66.99 (Bulgaria / Plovdiv / Karlovo) against 52.215.230.232 (Git Variable Scan). show less	Web App Attack
🇫🇷 Flo Flo	2024-08-29 22:07:09 (1 year ago)	94.156.66.99 - - - [30/Aug/2024:00:07:08 +0200] "82.66.117.16" "GET /.env HTTP/1.1" 444 0 "-" "Mozil ... show more 94.156.66.99 - - - [30/Aug/2024:00:07:08 +0200] "82.66.117.16" "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36" 0.000 ... show less	Web App Attack
🇫🇷 Duggy_Tuxy🧱	2024-08-29 22:06:27 (1 year ago)	Unauthorized connection attempt detected from IP address 94.156.66.99 on port TCP/443 ... show more Unauthorized connection attempt detected from IP address 94.156.66.99 on port TCP/443 Check us on : https://github.com/duggytuxy/malicious_ip_addresses show less	Port Scan Web App Attack
🇫🇷 Username01	2024-08-29 22:06:27 (1 year ago)	Unauthorized connection attempt detected from IP address 94.156.66.99 on port TCP/443 ... show more Unauthorized connection attempt detected from IP address 94.156.66.99 on port TCP/443 Check us on : https://github.com/duggytuxy/malicious_ip_addresses show less	Port Scan Web App Attack
🇩🇪 ut-addicted.com	2024-08-29 22:00:29 (1 year ago)	\[Fri Aug 30 00:00:27.949437 2024\] \[:error\] \[pid 12083:tid 140449331230464\] \[client 94.156.66. ... show more \[Fri Aug 30 00:00:27.949437 2024\] \[:error\] \[pid 12083:tid 140449331230464\] \[client 94.156.66.99:39102\] \[client 94.156.66.99\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 8\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/.env"\] \[unique_id "ZtDveyIRa1NwUVfj9KgNpgAAAM4"\] show less	Brute-Force Web App Attack
🇺🇸 thefoofighter	2024-08-29 21:43:23 (1 year ago)	[Thu Aug 29 21:42:26.158702 2024] [:error] [pid 1999767] [client 94.156.66.99:58716] [client 94.156. ... show more [Thu Aug 29 21:42:26.158702 2024] [:error] [pid 1999767] [client 94.156.66.99:58716] [client 94.156.66.99] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/.env"] [unique_id "ZtDrQur5q0RHDChG7XckPgAAAAA"] [Thu Aug 29 21:43:22.876400 2024] [:error] [pid 1999769] [client 94.156.66.99:50138] [client 94.156.66.99] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [t ... show less	Bad Web Bot Web App Attack
🇺🇸 PulseServers	2024-08-29 21:29:12 (1 year ago)	Probing a honeypot for vulnerabilities. Ignored robots.txt - US10 Honeypot ...	Hacking Web App Attack
🇫🇷 Security_Whaller	2024-08-29 21:28:17 (1 year ago)	Malicious activity detected on Honeypot.	Hacking Brute-Force Web App Attack
🇫🇷 someone	2024-08-29 21:26:18 (1 year ago)	:443 94.156.66.99 - - [29/Aug/2024:23:26:17 +0200] "GET /.env HTTP/1.1" 404 13404 "-" "Mozilla/5.0 ... show more :443 94.156.66.99 - - [29/Aug/2024:23:26:17 +0200] "GET /.env HTTP/1.1" 404 13404 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36" show less	Web App Attack

Showing 1 to 15 of 767 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 220.246.41.171

🇳🇱 195.178.110.26

🇺🇸 172.236.96.75

🇺🇸 170.247.220.63

🇩🇪 104.28.197.15

🇮🇳 103.165.115.233

🇫🇷 91.231.89.82

🇳🇱 91.92.42.120

🇧🇷 179.157.212.109

🇮🇹 172.253.13.144

🇮🇳 143.110.251.21

🇨🇳 101.96.192.45

🇺🇸 100.29.192.56

🇨🇦 40.176.63.228

🇪🇸 196.196.150.4

🇩🇪 193.32.248.139

🇵🇱 176.53.159.198

🇩🇪 167.94.145.21

🇺🇸 162.217.100.196

🇮🇳 122.163.160.119