JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

94.41.65.78

Neutral Activity

Abuse Confidence Score

0% Low Risk

307 reports

124 reporters · latest 9 months ago

ISP: JSC Ufanet
Usage Type: Fixed Line ISP
ASN: AS24955
Domain Name: ufanet.ru
Country: 🇷🇺 Russian Federation
City: Ufa, Bashkortostan Republic

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

94.41.65.78 has been reported 307 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

307 from 124 distinct reporters

First reported

June 10th 2022

Most recent report

9 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 Maximus.it	2023-11-21 18:59:32 UTC · (2 years ago)	User [] from [94.41.65.78] failed to log in via [DSM] due to authorization failure.	Brute-Force
🇮🇹 Maximus.it	2023-11-21 13:43:49 UTC · (2 years ago)	User [admin] from [94.41.65.78] failed to sign in to [DSM] via [password] due to authorization failure.	Brute-Force
🇵🇱 kaCza	2023-10-25 20:12:23 UTC · (3 years ago)	Brute-Force WEB App Attack. Failed to log in via user account "admin".	Hacking Brute-Force Web App Attack
🇮🇩 Burayot	2023-10-09 13:34:44 UTC · (3 years ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 94.41.65.78 (RU/Russia/94.41.65.78.dynamic.ufanet.ru): 2 in the last 3600 secs	Web App Attack
🇩🇪 ut-addicted.com	2023-10-09 09:14:01 UTC · (3 years ago)	\[Mon Oct 09 11:13:59.372160 2023\] \[:error\] \[pid 17493:tid 140497429456640\] \[client 94.41.65.78:58995\] \[client 94.41.65.78\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/a ... show more \[Mon Oct 09 11:13:59.372160 2023\] \[:error\] \[pid 17493:tid 140497429456640\] \[client 94.41.65.78:58995\] \[client 94.41.65.78\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "crx.it"\] \[uri "/pass.sql"\] \[unique_id "ZSPEVwYcCSrphHgUQE9JRAAAAMM"\] show less	Brute-Force Web App Attack
Anonymous	2023-10-08 11:30:59 UTC · (3 years ago)	Request blocked on 2023/10/08 @ 06:12:25 pm: Blocked Count: 43 Pattern Match: .sql Request URI: //pepper.sql The Request: //pepper.sql Query String: Referrer: Protocol: HTTP/1.1 IP Address: 94.41.65.78 User Agent: Mozilla/5.0 (X11; Ubu ... show more Request blocked on 2023/10/08 @ 06:12:25 pm: Blocked Count: 43 Pattern Match: .sql Request URI: //pepper.sql The Request: //pepper.sql Query String: Referrer: Protocol: HTTP/1.1 IP Address: 94.41.65.78 User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0 show less	Hacking SQL Injection Web App Attack
🇩🇪 ut-addicted.com	2023-10-08 07:58:24 UTC · (3 years ago)	\[Sun Oct 08 09:58:23.010096 2023\] \[:error\] \[pid 21187:tid 140218917181184\] \[client 94.41.65.78:59003\] \[client 94.41.65.78\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/a ... show more \[Sun Oct 08 09:58:23.010096 2023\] \[:error\] \[pid 21187:tid 140218917181184\] \[client 94.41.65.78:59003\] \[client 94.41.65.78\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "crx.it"\] \[uri "/michelle.sql"\] \[unique_id "ZSJhH2jigP3rhGRJq7mnVQAAAMU"\] show less	Brute-Force Web App Attack
🇲🇩 Deny_IP	2023-10-08 04:22:18 UTC · (3 years ago)	RU bad_bot	Web App Attack
🇩🇪 ut-addicted.com	2023-10-07 22:20:01 UTC · (3 years ago)	\[Sun Oct 08 00:19:59.642951 2023\] \[:error\] \[pid 29187:tid 140422435235584\] \[client 94.41.65.78:59329\] \[client 94.41.65.78\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/a ... show more \[Sun Oct 08 00:19:59.642951 2023\] \[:error\] \[pid 29187:tid 140422435235584\] \[client 94.41.65.78:59329\] \[client 94.41.65.78\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "crx.it"\] \[uri "/112233.sql"\] \[unique_id "ZSHZj3mYQqERS9e4@GBBJwAAANU"\] show less	Brute-Force Web App Attack
🇧🇬 pa4080	2023-10-07 13:24:53 UTC · (3 years ago)	Detected by ModSecurity. Request URI: //ranger.sql	Hacking Web App Attack
🇮🇩 Burayot	2023-10-07 05:29:31 UTC · (3 years ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 94.41.65.78 (RU/Russia/94.41.65.78.dynamic.ufanet.ru): 2 in the last 3600 secs	Web App Attack
Anonymous	2023-10-07 02:18:56 UTC · (3 years ago)	Request blocked on 2023/10/07 @ 06:57:09 am: Blocked Count: 32 Pattern Match: .sql Request URI: //2000.sql The Request: //2000.sql Query String: Referrer: Protocol: HTTP/1.1 IP Address: 94.41.65.78 User Agent: Mozilla/5.0 (X11; Ubuntu; ... show more Request blocked on 2023/10/07 @ 06:57:09 am: Blocked Count: 32 Pattern Match: .sql Request URI: //2000.sql The Request: //2000.sql Query String: Referrer: Protocol: HTTP/1.1 IP Address: 94.41.65.78 User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0 IP Lookup: https://ipinfo.io/94.41.65.78 IP Lookup: https://whatismyipaddress.com/ip/94.41.65.78 show less	Hacking SQL Injection Web App Attack
🇦🇺 MAGIC	2023-10-06 11:00:39 UTC · (3 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇨🇳 ThreatBook.io	2023-10-03 22:37:31 UTC · (3 years ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/94.41.65.78 2023-10-03 14:14:08 /nas/v1/locale	Web App Attack
🇨🇳 ThreatBook.io	2023-07-30 22:44:12 UTC · (3 years ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/94.41.65.78 2023-07-30 20:52:43 ///webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=123qwe!@ 2023-07-30 20:08:39 ///webapi/auth.cgi?api=S ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/94.41.65.78 2023-07-30 20:52:43 ///webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=123qwe!@ 2023-07-30 20:08:39 ///webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=antonio 2023-07-30 19:38:26 ///webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=bee 2023-07-30 18:05:22 ///webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=user show less	Web App Attack

Showing 61 to 75 of 307 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 221.228.203.3

🇲🇾 115.135.196.137

🇺🇸 104.207.38.142

🇮🇹 101.57.212.156

🇬🇧 90.217.168.159

🇧🇬 78.128.114.162

🇺🇸 69.116.60.32

🇺🇸 66.132.172.211

🇸🇪 46.246.96.73

🇬🇧 35.203.211.225

🇳🇱 31.20.176.196

🇩🇪 8.211.27.88

🇺🇸 192.190.221.7

🇦🇷 186.19.66.227

🇷🇺 178.34.150.8

🇮🇩 103.116.13.131

🇺🇸 66.240.223.208

🇺🇸 64.62.197.56

🇨🇦 40.85.229.173

🇧🇪 35.210.19.110