JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.46.13.80

94.46.13.80 was found in our database!

This IP was reported 123 times. Confidence of Abuse is 0%: ?

ISP	ALMOUROLTEC - Lda dba PTisp
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24768
Domain Name	ptisp.pt
Country	🇵🇹 Portugal
City	Lisbon, Lisbon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.46.13.80

Whois 94.46.13.80

IP Abuse Reports for 94.46.13.80:

This IP address has been reported a total of 123 times from 42 distinct sources. 94.46.13.80 was first reported on March 7th 2021, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 hbrks	2024-04-25 22:44:05 (2 years ago)	HEAD http://techtronicgambia.com/restore/techtronicgambia.com.tar.gz * statusCode: 503 *	Web Spam Hacking Bad Web Bot
🇩🇪 hbrks	2024-04-25 22:06:20 (2 years ago)	HEAD http://techtronicgambia.com/bak/techtronicgambia.com.rar * statusCode: 503 *	Web Spam Hacking Bad Web Bot
🇧🇷 diego	2024-04-16 09:09:53 (2 years ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack
🇺🇸 TPI-Abuse	2024-04-15 17:50:38 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 94.46.13.80 (ffletter.com): 1 in the last 300 s ... show more (mod_security) mod_security (id:210730) triggered by 94.46.13.80 (ffletter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 15 13:50:30.653839 2024] [security2:error] [pid 4689] [client 94.46.13.80:31561] [client 94.46.13.80] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|chewlas.brandpumice.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "chewlas.brandpumice.com"] [uri "/www.sql"] [unique_id "Zh1o5pWy5JoKq0BVvGOHvQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-04-14 01:22:04 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 94.46.13.80 (ffletter.com): 1 in the last 300 s ... show more (mod_security) mod_security (id:210730) triggered by 94.46.13.80 (ffletter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 13 21:21:57.585288 2024] [security2:error] [pid 10280] [client 94.46.13.80:53655] [client 94.46.13.80] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|jfexpressfr8.com\|F\|2"] [data ".com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jfexpressfr8.com"] [uri "/backups/hotshotfr8.com.sql"] [unique_id "ZhsvtdzD0YDL89KyVkZeOQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 hbrks	2024-04-14 01:17:22 (2 years ago)	HEAD http://ncs.guru/public_html.tar * statusCode: 503 *	Web Spam Hacking Bad Web Bot
🇩🇪 hbrks	2024-04-13 04:38:08 (2 years ago)	HEAD http://techtronicgambia.com/backup/.well-known.zip * statusCode: 503 *	Web Spam Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2024-04-13 04:25:59 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 94.46.13.80 (ffletter.com): 1 in the last 300 s ... show more (mod_security) mod_security (id:210492) triggered by 94.46.13.80 (ffletter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 13 00:25:50.809226 2024] [security2:error] [pid 31739] [client 94.46.13.80:29903] [client 94.46.13.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gcigmbh.com"] [uri "/sftp-config.json"] [unique_id "ZhoJTv2hmZKjzm5xmbtFVwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-04-08 21:51:44 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 94.46.13.80 (ffletter.com): 1 in the last 300 s ... show more (mod_security) mod_security (id:210730) triggered by 94.46.13.80 (ffletter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 08 17:51:41.222757 2024] [security2:error] [pid 19283] [client 94.46.13.80:22885] [client 94.46.13.80] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|lusocleaningservice.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lusocleaningservice.com"] [uri "/bak/backup.sql"] [unique_id "ZhRm7UiD9U5zR1JLCWtCSAAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-04-08 21:02:51 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 94.46.13.80 (ffletter.com): 1 in the last 300 s ... show more (mod_security) mod_security (id:210730) triggered by 94.46.13.80 (ffletter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 08 17:02:44.407008 2024] [security2:error] [pid 11219] [client 94.46.13.80:37387] [client 94.46.13.80] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mapleleaf-marketing.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mapleleaf-marketing.com"] [uri "/bak/dump.sql"] [unique_id "ZhRbdA0eFTRHVTcH2lk6vgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 hbrks	2024-04-07 22:55:48 (2 years ago)	HEAD http://crm.marche-be.com/bak/sql.sql * statusCode: 503 *	Web Spam Hacking Bad Web Bot
🇩🇪 hbrks	2024-04-07 22:20:02 (2 years ago)	HEAD http://crm.marche-be.com/back/config.json * statusCode: 503 *	Web Spam Hacking Bad Web Bot
🇩🇪 hbrks	2024-04-07 18:56:12 (2 years ago)	HEAD http://crm.marche-be.com/backups/backup.zip * statusCode: 503 *	Web Spam Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2024-04-01 09:48:17 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 94.46.13.80 (ffletter.com): 1 in the last 300 s ... show more (mod_security) mod_security (id:210730) triggered by 94.46.13.80 (ffletter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 01 05:48:12.409403 2024] [security2:error] [pid 2123507] [client 94.46.13.80:13201] [client 94.46.13.80] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|firejasstrio.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "firejasstrio.com"] [uri "/bak/dump.sql"] [unique_id "ZgqC3EGuv5LCKwVSbFtZtwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-31 16:38:27 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 94.46.13.80 (ffletter.com): 1 in the last 300 s ... show more (mod_security) mod_security (id:210492) triggered by 94.46.13.80 (ffletter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 31 12:38:20.363684 2024] [security2:error] [pid 23804] [client 94.46.13.80:11991] [client 94.46.13.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrepoch.art"] [uri "/restore/.env"] [unique_id "ZgmRfANXDSKOEHtQCKlqRgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 123 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 164.92.109.155

🇧🇩 103.158.132.161

🇨🇳 123.174.189.25

🇺🇸 107.175.244.79

🇳🇱 45.148.10.152

🇩🇪 152.53.185.81

🇨🇳 117.183.139.90

🇫🇷 65.111.31.240

🇮🇳 103.203.210.23

🇳🇴 87.120.104.29

🇸🇪 84.13.145.234

🇧🇬 79.124.62.126

🇫🇷 65.111.31.22

🇮🇷 2.180.32.104

🇨🇳 218.202.143.68

🇨🇳 117.34.125.173

🇫🇷 104.207.62.41

🇻🇳 14.225.217.138

🇱🇹 213.176.26.41

🇺🇸 109.105.210.102