JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.156.67.99

94.156.67.99 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 0%: ?

ISP	GRID TELECOM SINGLE MEMBER S.A
Usage Type	Fixed Line ISP
ASN	AS215804
Domain Name	grid-telecom.com
Country	🇬🇷 Greece
City	Athens, Attica

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.156.67.99

Whois 94.156.67.99

IP Abuse Reports for 94.156.67.99:

This IP address has been reported a total of 31 times from 14 distinct sources. 94.156.67.99 was first reported on July 1st 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 unifr	2024-09-27 18:12:30 (1 year ago)	Unauthorized IMAP connection attempt	Brute-Force
🇯🇵 polido	2024-09-26 22:41:55 (1 year ago)	Unauthorized connection attempt to port 80 from 94.156.67.99	Port Scan
🇫🇷 conseilgouz	2024-09-21 04:18:50 (1 year ago)	sae-17 : Block hidden directories=>/.env(/)	Hacking
🇯🇵 polido	2024-09-20 05:10:24 (1 year ago)	Unauthorized connection attempt to port 80 from 94.156.67.99	Port Scan
🇯🇵 polido	2024-09-17 14:52:18 (1 year ago)	Unauthorized connection attempt to port 80 from 94.156.67.99	Port Scan
🇺🇸 TPI-Abuse	2024-09-15 12:14:15 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 94.156.67.99 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 94.156.67.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 15 08:14:09.673214 2024] [security2:error] [pid 14775:tid 14775] [client 94.156.67.99:59656] [client 94.156.67.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "73.org"] [uri "/.env"] [unique_id "ZubPkZZbBOTjc0mBYJ7x-wAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-15 10:02:19 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 94.156.67.99 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 94.156.67.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 15 06:02:16.401853 2024] [security2:error] [pid 24207:tid 24207] [client 94.156.67.99:57493] [client 94.156.67.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rnance.com"] [uri "/.env"] [unique_id "ZuawqC0oGI10LduoOONkEQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-15 06:59:13 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 94.156.67.99 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 94.156.67.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 15 02:59:05.161022 2024] [security2:error] [pid 11783:tid 11909] [client 94.156.67.99:58913] [client 94.156.67.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "inal.org"] [uri "/.env"] [unique_id "ZuaFubyEGVPSFWrSbJ7iVAAAAgQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Tripwire	2024-09-15 03:39:34 (1 year ago)	Scanning for exploits - /.env	Web App Attack
🇧🇪 cmbplf	2024-09-15 01:38:30 (1 year ago)	430 requests to *.env	Brute-Force Bad Web Bot
🇺🇸 S.O.B.A. Dev.	2024-09-14 15:10:45 (1 year ago)	Threat Blocked by BeeHive from (ASN:394711) (Network:LIMENET) (Host:soba.dev) (Method:GET) (Protocol ... show more Threat Blocked by BeeHive from (ASN:394711) (Network:LIMENET) (Host:soba.dev) (Method:GET) (Protocol:HTTP/1.1) (Timestamp:2024-09-14T15:10:45Z) show less	Web Spam Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-09-14 14:47:54 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 94.156.67.99 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 94.156.67.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 14 10:47:49.678601 2024] [security2:error] [pid 1398:tid 1398] [client 94.156.67.99:60585] [client 94.156.67.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ssion.com"] [uri "/.env"] [unique_id "ZuWiFVwpm2GjF5WNZI8HggAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 HeliJP	2024-09-12 19:15:45 (1 year ago)	2024-09-12T00:49:03Z - Recognized attacks\bad behavior from IP address 94.156.67.99 on port 443\80 ( ... show more 2024-09-12T00:49:03Z - Recognized attacks\bad behavior from IP address 94.156.67.99 on port 443\80 (17 daily hits): SQL Injection Attack: Common Injection Testing Detected, SQL Injection Attack, SQL Injection Attack: SQL Tautology Detected, SQL Injection Attack Detected via libinjection, Missing User Agent Header show less	Hacking SQL Injection
🇯🇵 HeliJP	2024-09-12 18:15:40 (1 year ago)	2024-09-12T00:49:03Z - Recognized attacks\bad behavior from IP address 94.156.67.99 on port 443\80 ( ... show more 2024-09-12T00:49:03Z - Recognized attacks\bad behavior from IP address 94.156.67.99 on port 443\80 (17 daily hits): SQL Injection Attack, SQL Injection Attack: SQL Tautology Detected, SQL Injection Attack: Common Injection Testing Detected, SQL Injection Attack Detected via libinjection, Missing User Agent Header show less	Hacking SQL Injection
🇯🇵 HeliJP	2024-09-12 16:15:34 (1 year ago)	2024-09-12T00:49:03Z - Recognized attacks\bad behavior from IP address 94.156.67.99 on port 443\80 ( ... show more 2024-09-12T00:49:03Z - Recognized attacks\bad behavior from IP address 94.156.67.99 on port 443\80 (17 daily hits): SQL Injection Attack, SQL Injection Attack Detected via libinjection, Missing User Agent Header, SQL Injection Attack: Common Injection Testing Detected, SQL Injection Attack: SQL Tautology Detected show less	Hacking SQL Injection

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 204.76.203.206

🇳🇱 81.19.216.104

🇲🇾 60.50.25.121

🇲🇽 46.250.174.173

🇰🇷 221.161.235.168

🇺🇸 216.25.89.70

🇩🇪 213.209.159.241

🇷🇴 185.92.195.213

🇦🇹 152.53.0.56

🇧🇷 136.248.121.226

🇻🇳 116.99.168.232

🇳🇱 45.153.34.182

🇺🇸 34.106.104.163

🇺🇸 23.129.64.156

🇻🇳 14.191.45.9

🇭🇰 13.70.28.132

🇺🇸 216.25.89.115

🇦🇷 190.244.39.224

🇹🇭 182.52.90.106

🇪🇸 196.196.150.100