JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.23.78.49

94.23.78.49 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 100%: ?

100%

ISP	OVH Hosting LD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	novosite.alfacoop.pt
Domain Name	ovh.net
Country	🇫🇷 France
City	Gravelines, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.23.78.49

Whois 94.23.78.49

IP Abuse Reports for 94.23.78.49:

This IP address has been reported a total of 51 times from 34 distinct sources. 94.23.78.49 was first reported on August 23rd 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 eryilmaz	2026-09-01 02:00:59 (1 hour ago)	Automated attack blocked by eryilmaz WAF/fail2ban: 1 event(s) [waf.block] in the last 1 days, e.g. / ... show more Automated attack blocked by eryilmaz WAF/fail2ban: 1 event(s) [waf.block] in the last 1 days, e.g. /wp-login.php show less	Web App Attack Hacking
🇦🇹 joe-abuse	2026-09-01 01:36:36 (1 hour ago)	Automated report from fail2ban on www.fitzgerald.eu. Jail: apache-badpaths. First seen: 2026-08-30 2 ... show more Automated report from fail2ban on www.fitzgerald.eu. Jail: apache-badpaths. First seen: 2026-08-30 22:30:15. Events: 1. Reported by ipdb-security/fitzgerald.eu show less	Web App Attack
🇫🇷 solution.it	2026-08-31 20:43:57 (6 hours ago)	[Mon Aug 31 22:43:57.772757 2026] [php7:error] [pid 3630369:tid 3630369] [client 94.23.78.49:52172] ... show more [Mon Aug 31 22:43:57.772757 2026] [php7:error] [pid 3630369:tid 3630369] [client 94.23.78.49:52172] script '/var/www/html/wp-login.php' not found or unable to stat show less	Web App Attack
🇺🇸 etu brutus	2026-08-31 20:34:00 (6 hours ago)	94.23.78.49 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇮🇩 Burayot	2026-08-31 20:18:22 (6 hours ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 94.23.78.49 (FR/France/novosite.alf ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 94.23.78.49 (FR/France/novosite.alfacoop.pt): 1 in the last 3600 secs show less	Web App Attack
Anonymous	2026-08-31 19:45:44 (7 hours ago)	Web attack blocked by Wordfence on www.gerhuntjens.nl (1 hit). Reported by CRMON.	Web App Attack
Anonymous	2026-08-31 19:21:44 (7 hours ago)	PSCSERV WPSCAN 94.23.78.49	Bad Web Bot Web App Attack
🇳🇱 MyGlobalFlowers	2026-08-31 15:38:24 (11 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 kosada.com	2026-08-31 15:34:50 (11 hours ago)	Web vulnerability probing: /wp-login.php	Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 12:21:02 (14 hours ago)	(mod_security) mod_security (id:225170) triggered by 94.23.78.49 (novosite.alfacoop.pt): 1 in the la ... show more (mod_security) mod_security (id:225170) triggered by 94.23.78.49 (novosite.alfacoop.pt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 08:20:57.500637 2026] [security2:error] [pid 23373:tid 23382] [client 94.23.78.49:52798] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|inal.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "inal.org"] [uri "/wp-json/wp/v2/users"] [unique_id "apVxqR9Mfsg17UHBea9OKQAAAUY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-31 12:17:02 (14 hours ago)	Bot / scanning and/or hacking attempts: GET /wp-login.php HTTP/2.0, [1/1] done	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 11:35:30 (15 hours ago)	(mod_security) mod_security (id:225170) triggered by 94.23.78.49 (novosite.alfacoop.pt): 1 in the la ... show more (mod_security) mod_security (id:225170) triggered by 94.23.78.49 (novosite.alfacoop.pt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 07:35:22.345645 2026] [security2:error] [pid 2442:tid 2442] [client 94.23.78.49:50852] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ardath.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ardath.net"] [uri "/wp-json/wp/v2/users"] [unique_id "apVm-s_jTwFymA_glvJrCgAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 SkyDancer	2026-08-31 10:15:46 (16 hours ago)	Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ... show more Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X). show less	Hacking Brute-Force
🇬🇧 SilverZippo	2026-08-31 10:06:33 (17 hours ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 10:05:07 (17 hours ago)	(mod_security) mod_security (id:225170) triggered by 94.23.78.49 (novosite.alfacoop.pt): 1 in the la ... show more (mod_security) mod_security (id:225170) triggered by 94.23.78.49 (novosite.alfacoop.pt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 06:05:01.339260 2026] [security2:error] [pid 32439:tid 32439] [client 94.23.78.49:33912] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bethanpearce.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bethanpearce.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apVRzaw2KwxraeMppeEC2gAAABo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 171.12.10.196

🇺🇸 162.216.150.173

🇺🇸 147.185.132.150

🇺🇸 91.230.168.128

🇺🇸 35.254.76.10

🇨🇦 34.47.29.148

🇩🇪 34.40.15.66

🇹🇼 198.235.24.41

🇧🇷 189.90.55.243

🇧🇷 187.110.238.50

🇵🇾 181.94.210.127

🇫🇮 178.20.210.152

🇺🇸 104.238.222.26

🇮🇩 103.181.255.219

🇮🇩 103.94.11.185

🇳🇱 94.154.43.129

🇺🇦 91.203.63.14

🇫🇮 35.228.67.75

🇳🇱 35.204.26.252

🇧🇷 35.198.12.206