JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.156.68.104

94.156.68.104 was found in our database!

This IP was reported 1,451 times. Confidence of Abuse is 0%: ?

ISP	METER.AC (C.lab)
Usage Type	Commercial
ASN	AS212023
Domain Name	uni-plovdiv.bg
Country	🇧🇬 Bulgaria
City	Karlovo, Plovdiv

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.156.68.104

Whois 94.156.68.104

IP Abuse Reports for 94.156.68.104:

This IP address has been reported a total of 1,451 times from 210 distinct sources. 94.156.68.104 was first reported on January 23rd 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 SecondEdge	2024-10-02 00:37:30 (1 year ago)	A web attack was detected from 94.156.68.104 (Bulgaria / Plovdiv / Karlovo) against 52.215.230.232 ( ... show more A web attack was detected from 94.156.68.104 (Bulgaria / Plovdiv / Karlovo) against 52.215.230.232 (Git Variable Scan). show less	Web App Attack
🇩🇪 mxinfra	2024-10-01 14:00:09 (1 year ago)	Blocked by Fail2Ban (plesk-modsecurity)	Hacking Brute-Force Web App Attack
🇩🇪 barbarella	2024-10-01 13:47:30 (1 year ago)	Configuration snooping with .env file (GET /.env)	Hacking Web App Attack
🇩🇪 ut-addicted.com	2024-10-01 13:41:08 (1 year ago)	\[Tue Oct 01 15:41:06.687708 2024\] \[:error\] \[pid 11330:tid 140449446618880\] \[client 94.156.68. ... show more \[Tue Oct 01 15:41:06.687708 2024\] \[:error\] \[pid 11330:tid 140449446618880\] \[client 94.156.68.104:50778\] \[client 94.156.68.104\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 8\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/.env"\] \[unique_id "Zvv78mHSTJGmR1YkC7DzNAAAAIM"\] show less	Brute-Force Web App Attack
🇫🇷 Vaction	2024-10-01 13:09:27 (1 year ago)	94.156.68.104 - - [01/Oct/2024:15:09:26 +0200] "GET /.env HTTP/1.1" 404 360 "-" "SonyEricssonK550i/R ... show more 94.156.68.104 - - [01/Oct/2024:15:09:26 +0200] "GET /.env HTTP/1.1" 404 360 "-" "SonyEricssonK550i/R1JD Browser/NetFront/3.3 Profile/MIDP-2.0 Configuration/CLDC-1.1" show less	Hacking Bad Web Bot Web App Attack
🇩🇪 Roper123	2024-10-01 13:08:46 (1 year ago)	Web exploits	Web App Attack
🇬🇧 PulseServers	2024-10-01 13:07:13 (1 year ago)	Probing a honeypot for vulnerabilities. Ignored robots.txt - UK10 Honeypot ...	Hacking Web App Attack
🇫🇮 Ba-Yu	2024-10-01 12:58:27 (1 year ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
Anonymous	2024-10-01 12:39:39 (1 year ago)	fail2ban_hh apache-modsecurity [msg "Inbound Anomaly Score Exceeded (Total Score: 13)"] [uri "/.env" ... show more fail2ban_hh apache-modsecurity [msg "Inbound Anomaly Score Exceeded (Total Score: 13)"] [uri "/.env"] show less	Web App Attack
🇩🇪 Trueforce Threat Report	2024-10-01 11:39:04 (1 year ago)	Automated report, trolling for resource vulnerabilities	Bad Web Bot Web App Attack
Anonymous	2024-10-01 11:08:47 (1 year ago)	[30/Sep/2024:11:45:22 -0400] \"GET /.env HTTP/1.1\" \"Mozilla/5.0 (iPad; U; CPU iPad OS 5_0_1 like M ... show more [30/Sep/2024:11:45:22 -0400] \"GET /.env HTTP/1.1\" \"Mozilla/5.0 (iPad; U; CPU iPad OS 5_0_1 like Mac OS X; en-us) AppleWebKit/535.1+ (KHTML like Gecko) Version/7.2.0.0 Safari/6533.18.5\" [30/Sep/2024:18:56:11 -0400] \"GET /.env HTTP/1.1\" \"Mozilla/5.0 (X11; Linux i686; rv:20.0) Gecko/20100101 Firefox/20.0\" show less	Hacking
Anonymous	2024-10-01 11:00:17 (1 year ago)	Http Port:80 (http_status:403) - /.env - Agent:Mozilla/5.0 (X11; U; Linux x86_64; sv-SE; rv:1.8.1.12 ... show more Http Port:80 (http_status:403) - /.env - Agent:Mozilla/5.0 (X11; U; Linux x86_64; sv-SE; rv:1.8.1.12) Gecko/20080207 Ubuntu/7.10 (gutsy) Firefox/2.0.0.12 show less	Web App Attack
🇩🇪 krys-abuseip	2024-10-01 10:55:07 (1 year ago)	94.156.68.104 - - [01/Oct/2024:12:54:04 +0200] "GET /.env HTTP/1.1" 404 4031 "-" "Mozilla/5.0 (Linux ... show more 94.156.68.104 - - [01/Oct/2024:12:54:04 +0200] "GET /.env HTTP/1.1" 404 4031 "-" "Mozilla/5.0 (Linux; Android 8.1.0; Mi Note 3 Build/OPM1.171019.019; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/67.0.3396.87 XWEB/882 MMWEBSDK/190505 Mobile Safari/537.36 MMWEBID/358 MicroMessenger/7.0.5.1440(0x27000537) Process/tools NetType/4G Language/zh_CN" show less	Hacking Bad Web Bot Web App Attack
🇩🇪 sdos.es	2024-10-01 10:50:59 (1 year ago)	"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env"	Web App Attack
🇹🇷 rtbh.com.tr	2024-10-01 04:54:08 (1 year ago)	list.rtbh.com.tr report: tcp/443	Brute-Force

Showing 1 to 15 of 1451 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 212.132.120.41

🇧🇬 193.24.211.76

🇨🇱 190.5.36.254

🇧🇷 151.244.242.185

🇮🇳 103.210.45.226

🇳🇵 103.148.23.185

🇬🇧 35.203.210.243

🇧🇪 34.14.53.188

🇺🇸 205.210.31.45

🇷🇺 178.20.43.173

🇬🇧 172.69.224.52

🇺🇸 91.230.168.29

🇺🇸 66.132.186.209

🇳🇱 45.156.87.13

🇷🇺 5.172.22.97

🇩🇪 213.209.159.241

🇳🇱 34.34.103.195

🇳🇱 195.178.110.26

🇬🇧 185.170.109.116

🇳🇱 172.239.238.22