JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

94.183.190.52

Recent Activity

Abuse confidence score ?

100% Critical

41 reports

27 reporters · latest 1 hour ago

ISP	CGI GLOBAL LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS56971
Domain Name	cloudbackbone.net
Country	🇱🇻 Latvia
City	Riga, Riga

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 94.183.190.52

Export CSV

This IP address has been reported a total of 41 times from 27 distinct sources. 94.183.190.52 was first reported on October 14th 2026, and the most recent report was 1 hour ago. In the last 60 days, the top reporter locations were: United States of America with 15 reports; Germany with 10 reports; Brazil with 4 reports. The most common categories in these recent reports were: Web App Attack 32 times; Bad Web Bot 21 times; Brute-Force 18 times; Hacking 12 times; Port Scan 3 times; Other 5 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 altenglaner	2026-10-16 04:52:49 (1 hour ago)	Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ... show more Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban. show less	Hacking Web App Attack
🇺🇸 Lee Daniel	2026-10-16 04:30:32 (1 hour ago)	94.183.190.52 - - [16/Oct/2026:00:30:32 -0400] "GET /.env HTTP/1.1" 403 344 "-" "Mozilla/5.0 (X11; L ... show more 94.183.190.52 - - [16/Oct/2026:00:30:32 -0400] "GET /.env HTTP/1.1" 403 344 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/13.0" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇩🇪 paissangroup	2026-10-16 02:30:57 (3 hours ago)	Multiple WAF Violations	Web App Attack
🇫🇷 Stara	2026-10-15 18:55:47 (11 hours ago)	Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kinesk ... show more Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kineskinja) show less	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 18:54:36 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 94.183.190.52 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 94.183.190.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 14:54:29.519513 2026] [security2:error] [pid 15157:tid 15157] [client 94.183.190.52:34444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dudleyanddudley.com"] [uri "/.git/index"] [unique_id "atEhZTqQgskAeXY0NX_9ewAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-15 17:40:00 (12 hours ago)	Repeated automated web requests: 3 HTTP 403 responses within 10 minutes.	Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-15 16:06:07 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 94.183.190.52 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 94.183.190.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 12:05:59.464146 2026] [security2:error] [pid 11450:tid 11450] [client 94.183.190.52:51538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ssion.com"] [uri "/.git/config"] [unique_id "atD556LmMm3i7kplYpACxAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 IVski.com	2026-10-15 14:38:59 (15 hours ago)	IVski WAF \| Sensitive file probe detected - looking for .env	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 14:32:39 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 94.183.190.52 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 94.183.190.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:32:34.313000 2026] [security2:error] [pid 25903:tid 25903] [client 94.183.190.52:42772] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quakeprediction.com"] [uri "/.git/logs/HEAD"] [unique_id "atDkAq9Vgs7aJmoWMzJ4_AAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 radardatelecom	2026-10-15 14:17:03 (16 hours ago)	Blocked by Radar da Telecom firewall — abuseipdb	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-10-15 12:57:39 (17 hours ago)	[15/Oct/2026:15:57:38 +0300] -- 94.183.190.52 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git ... show more [15/Oct/2026:15:57:38 +0300] -- 94.183.190.52 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/config HTTP/1.1 show less	Bad Web Bot Web App Attack
Anonymous	2026-10-15 12:47:12 (17 hours ago)	94.183.190.52 - - [15/Oct/2026:09:47:11 -0300] "GET /.git/config HTTP/1.1" 403 874 "-" "Mozilla/5.0 ... show more 94.183.190.52 - - [15/Oct/2026:09:47:11 -0300] "GET /.git/config HTTP/1.1" 403 874 "-" "Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" ... show less	Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host
Anonymous	2026-10-15 11:17:32 (19 hours ago)	Sensitive file access attempt	Hacking
🇩🇪 BlueWire Hosting	2026-10-15 07:13:40 (23 hours ago)	High-confidence malicious configuration/VCS probe	Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 05:51:43 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 94.183.190.52 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 94.183.190.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 01:51:37.387758 2026] [security2:error] [pid 18314:tid 18314] [client 94.183.190.52:57012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clarktec.com"] [uri "/.git/config"] [unique_id "atBp6fxVbG0WSeODWG0ejgAAABs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 2a00:1450:401b::6

🇧🇪 198.235.24.206

🇨🇳 183.207.0.126

🇺🇸 172.104.19.160

🇩🇪 164.30.17.82

🇭🇰 150.5.148.103

🇳🇱 77.239.124.78

🇳🇱 45.148.10.151

🇺🇸 2a10:4a02:903a:2fdf:bc3c:83db:8c4d:8064

🇺🇸 217.177.128.229

🇮🇩 202.138.242.83

🇧🇪 198.235.24.172

🇺🇸 184.186.73.93

🇺🇸 147.182.200.94

🇰🇷 119.192.128.163

🇫🇷 85.217.140.51

🇯🇵 34.97.117.187

🇺🇸 20.65.217.174

🇨🇳 14.103.75.9

🇺🇸 203.100.220.123