JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.46.167.6

94.46.167.6 was found in our database!

This IP was reported 143 times. Confidence of Abuse is 0%: ?

ISP	LIS DEDICATED SERVERS IP SPACE
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24768
Domain Name	ptisp.pt
Country	🇵🇹 Portugal
City	Lisbon, Lisbon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.46.167.6

Whois 94.46.167.6

IP Abuse Reports for 94.46.167.6:

This IP address has been reported a total of 143 times from 56 distinct sources. 94.46.167.6 was first reported on April 17th 2021, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 diego	2024-04-29 15:48:42 (2 years ago)	Events: TCP SYN Discovery or Flooding, Seen 4 times in the last 10800 seconds	DDoS Attack
🇩🇪 hbrks	2024-04-25 19:18:15 (2 years ago)	HEAD http://techtronicgambia.com/backups/dump.sql * statusCode: 503 *	Web Spam Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2024-04-23 18:14:05 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 94.46.167.6 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 94.46.167.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 23 14:14:00.521190 2024] [security2:error] [pid 15037] [client 94.46.167.6:61241] [client 94.46.167.6] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|wethepeoplealliance.network\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "wethepeoplealliance.network"] [uri "/restore/www.sql"] [unique_id "Zif6aABiP37LDFkJgWFHGAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-04-18 19:56:13 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 94.46.167.6 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 94.46.167.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 18 15:56:05.593735 2024] [security2:error] [pid 13990] [client 94.46.167.6:44941] [client 94.46.167.6] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|cryptoedge.net\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cryptoedge.net"] [uri "/backups/wallet.dat"] [unique_id "ZiF61VnmHcgP0OBOe_ThcgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 hbrks	2024-04-17 21:29:01 (2 years ago)	HEAD http://crm.marche-be.com/marche-be.com.tar.gz * statusCode: 503 *	Web Spam Hacking Bad Web Bot
🇩🇪 hbrks	2024-04-17 12:15:44 (2 years ago)	HEAD http://crm.marche-be.com/back/public_html.zip * statusCode: 503 *	Web Spam Hacking Bad Web Bot
🇩🇪 hbrks	2024-04-17 11:57:26 (2 years ago)	HEAD http://crm.marche-be.com/backups/config.json * statusCode: 503 *	Web Spam Hacking Bad Web Bot
🇩🇪 hbrks	2024-04-17 11:38:17 (2 years ago)	HEAD http://marche-be.com/back/marche-be.com.rar * statusCode: 503 *	Web Spam Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2024-04-15 08:03:55 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 94.46.167.6 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 94.46.167.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 15 04:03:49.894237 2024] [security2:error] [pid 6652] [client 94.46.167.6:34563] [client 94.46.167.6] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|boat-accessories.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "boat-accessories.net"] [uri "/restore/www.sql"] [unique_id "ZhzfZY9PpmFQijVuRByCUgAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 hbrks	2024-04-13 14:14:14 (2 years ago)	HEAD http://techtronicgambia.com/backups/dump.sql * statusCode: 503 *	Web Spam Hacking Bad Web Bot
🇩🇪 hbrks	2024-04-13 13:56:25 (2 years ago)	HEAD http://techtronicgambia.com/restore/directory.rar * statusCode: 503 *	Web Spam Hacking Bad Web Bot
🇩🇪 hbrks	2024-04-07 19:40:03 (2 years ago)	HEAD http://marche-be.com/back/backup.gz * statusCode: 503 *	Web Spam Hacking Bad Web Bot
🇩🇪 hbrks	2024-04-07 18:46:45 (2 years ago)	HEAD http://crm.marche-be.com/bak/public_html.zip * statusCode: 503 *	Web Spam Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2024-04-05 02:07:33 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 94.46.167.6 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 94.46.167.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 04 22:07:26.244175 2024] [security2:error] [pid 23403] [client 94.46.167.6:33745] [client 94.46.167.6] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ccbank.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ccbank.net"] [uri "/back/dump.sql"] [unique_id "Zg9c3o_U8eGoqofMx0DQaAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-04-03 05:46:47 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 94.46.167.6 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 94.46.167.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 03 01:46:43.293707 2024] [security2:error] [pid 11293] [client 94.46.167.6:55537] [client 94.46.167.6] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bayareamustangs.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bayareamustangs.com"] [uri "/restore/dump.sql"] [unique_id "ZgztQwBV3axaQlMU77GsygAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 143 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.239.251.12

🇺🇸 48.47.33.237

🇺🇸 34.148.192.82

🇦🇷 201.158.124.120

🇹🇼 198.235.24.87

🇦🇷 186.22.94.17

🇳🇱 185.223.235.18

🇲🇲 180.235.119.195

🇺🇸 172.253.219.153

🇺🇸 147.185.132.58

🇧🇪 104.155.11.28

🇳🇱 5.61.209.224

🇨🇦 216.26.239.184

🇨🇦 216.26.239.105

🇺🇦 192.166.132.95

🇨🇱 186.79.246.86

🇺🇸 147.185.132.162

🇩🇪 130.61.50.75

🇨🇦 104.207.48.60

🇺🇸 104.204.206.157