JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.154.46.249

94.154.46.249

Recent Activity

284 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Omegatech LTD

Usage Type

Data Center/Web Hosting/Transit

ASN

AS202412

Domain Name

omegatech.sc

Country

🇳🇱 Netherlands

City

Kerkrade, Limburg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 94.154.46.249:

This IP address has been reported a total of 284 times from 216 distinct sources. 94.154.46.249 was first reported on January 9th 2026, and the most recent report was 34 minutes ago. In the last 60 days, the top reporter locations were: Germany with 70 reports; United States of America with 63 reports; France with 23 reports. The most common categories in these recent reports were: Web App Attack 202 times; Hacking 64 times; Brute-Force 58 times; Bad Web Bot 54 times; Port Scan 44 times; Other 40 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-09-05 17:07:12 (34 minutes ago)	Brute force	Brute-Force
🇫🇷 Lunix	2026-09-05 16:45:59 (55 minutes ago)		Brute-Force Web App Attack
🇺🇸 paulo.apoloni	2026-09-05 16:05:42 (1 hour ago)	94.154.46.249 - - [05/Sep/2026:13:05:42 -0300] "GET /.aws/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (c ... show more 94.154.46.249 - - [05/Sep/2026:13:05:42 -0300] "GET /.aws/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 94.154.46.249 - - [05/Sep/2026:13:05:42 -0300] "GET /docker/compose/withMongo/.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 94.154.46.249 - - [05/Sep/2026:13:05:42 -0300] "GET /.docker/.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 94.154.46.249 - - [05/Sep/2026:13:05:42 -0300] "GET /backend/.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 94.154.46.249 - - [05/Sep/2026:13:05:42 -0300] "GET /www/.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Bad Web Bot Web App Attack
🇺🇸 legionMCCXV	2026-09-05 16:03:17 (1 hour ago)	PHP/WordPress shell scanner on non-PHP site — repeated requests to .php paths returning 404.	Bad Web Bot
🇩🇪 paissangroup	2026-09-05 15:32:56 (2 hours ago)	Multiple WAF Violations	Web App Attack
🇵🇱 Budyn	2026-09-05 14:56:48 (2 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: 51.83.237.XX \| URI: /wp-config.php.old \| UA: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇩🇪 EnthecSolutions	2026-09-05 14:00:52 (3 hours ago)	Detected by Enthec Solutions. \| Attempts: 56 in 24h \| Target port: 80	Web App Attack
Anonymous	2026-09-05 13:48:10 (3 hours ago)	[Sat Sep 05 15:48:09.916383 2026] [authz_core:error] [pid 661:tid 673] [client 94.154.46.249:41678] ... show more [Sat Sep 05 15:48:09.916383 2026] [authz_core:error] [pid 661:tid 673] [client 94.154.46.249:41678] AH01630: client denied by server configuration: /var/www/html/config.js [Sat Sep 05 15:48:09.916384 2026] [authz_core:error] [pid 662:tid 719] [client 94.154.46.249:41624] AH01630: client denied by server configuration: /var/www/html/docker-compose.yml [Sat Sep 05 15:48:09.916853 2026] [authz_core:error] [pid 661:tid 673] [client 94.154.46.249:41556] AH01630: client denied by server configuration: /var/www/html/wp-config.php [Sat Sep 05 15:48:09.917130 2026] [authz_core:error] [pid 661:tid 681] [client 94.154.46.249:41686] AH01630: client denied by server configuration: /var/www/html/.npmrc [Sat Sep 05 15:48:09.918774 2026] [authz_core:error] [pid 662:tid 704] [client 94.154.46.249:41536] AH01630: client denied by server configuration: /var/www/html/.git ... show less	Web App Attack
🇮🇹 madaello	2026-09-05 13:27:08 (4 hours ago)	94.154.46.249 - - [05/Sep/2026:15:27:07 +0200] "GET /.git/index HTTP/1.1" 301 4676 "-" "Mozilla/5.0 ... show more 94.154.46.249 - - [05/Sep/2026:15:27:07 +0200] "GET /.git/index HTTP/1.1" 301 4676 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 94.154.46.249 - - [05/Sep/2026:15:27:07 +0200] "GET /wp-config.php~ HTTP/1.1" 301 4684 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 94.154.46.249 - - [05/Sep/2026:15:27:07 +0200] "GET /wp-config.php.bak HTTP/1.1" 301 4690 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 94.154.46.249 - - [05/Sep/2026:15:27:07 +0200] "GET /wp-config.php HTTP/1.1" 301 4682 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Hacking
🇺🇸 jormaster3k	2026-09-05 12:51:39 (4 hours ago)	Attack against Apache (too many 404s)	Web App Attack
🇺🇸 MPL	2026-09-05 12:28:50 (5 hours ago)	tcp ports: 443,80 (4 or more attempts)	Port Scan
🇺🇸 crooze.net	2026-09-05 11:44:18 (5 hours ago)	94.154.46.249 - - [05/Sep/2026:07:44:17 -0400] "GET /wp-config.php~ HTTP/1.1" 444 0 "-" "Mozilla/5.0 ... show more 94.154.46.249 - - [05/Sep/2026:07:44:17 -0400] "GET /wp-config.php~ HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Web App Attack
🇫🇮 mnazibo	2026-09-05 11:00:06 (6 hours ago)	Date: 05/Sep/2026 13:58:10 \| Reported IP: 94.154.46.249 mod_security \| id: 930130 \| NL/group.my_doma ... show more Date: 05/Sep/2026 13:58:10 \| Reported IP: 94.154.46.249 mod_security \| id: 930130 \| NL/group.my_domain/- \| Connections: 120 \| Blocked: Permanent Block: [LF_MODSEC] \| URIs: /api/.env; /api/.env.local; /app/.env.local; /app/.env.production; /.aws/config.bak; /.aws/credentials.bak; /.aws/credentials.old; /backend/.env.local; /.circleci/config.yml.bak; /client/.env.local; /compose/.env; /composer.json; /composer.json.bak; /composer.lock; /conf/.env; /config/config.php; /config/database.yml.default; /config/.env; /config.inc.php.bak; /config.inc.php.swp; /config.json; /config.php.bak; /config.py; /config/secrets.yml.bak; /database.yml; /docker-compose/.env; /docker/compose/.env; /docker/compose/withMongo/.env; /docker/compose/withMySQL/.env; /docker/compose/withPostgres/.env; /docker/compose/withRedis/.env; /docker-compose.yaml; /docker-compose.yml; /.docker/.env; /.dockerenv; /docker/.env; /.env~; /.env.0; /.env.1.bak; /.env.20231201; /.env show less	SQL Injection Brute-Force Bad Web Bot
🇧🇾 lns.bz	2026-09-05 10:43:16 (6 hours ago)	Too many 404 requests [BY]	Web App Attack
🇫🇷 LoneRider	2026-09-05 10:35:40 (7 hours ago)	[05/Sep/2026:12:35:39.946133 +0200] apvwe7hFlIDjjWdFOE8RpQAAAAw 94.154.46.249 36732 127.0.0.1 7081 [ ... show more [05/Sep/2026:12:35:39.946133 +0200] apvwe7hFlIDjjWdFOE8RpQAAAAw 94.154.46.249 36732 127.0.0.1 7081 [05/Sep/2026:12:35:39.948752 +0200] apvwe_8s2YpLA6SBUzvsvQAAAAA 94.154.46.249 36766 127.0.0.1 7081 [05/Sep/2026:12:35:39.961576 +0200] apvwe0KsQiTjxhuk_wXtXwAAAAY 94.154.46.249 36790 127.0.0.1 7081 ... show less	Hacking

Showing 1 to 15 of 284 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 213.128.78.213

🇷🇴 193.32.162.84

🇧🇷 187.91.166.143

🇧🇷 187.17.228.218

🇫🇷 185.207.251.65

🇮🇩 180.253.51.240

🇲🇽 158.23.147.79

🇲🇽 158.23.18.78

🇭🇰 152.32.131.245

🇨🇳 121.62.236.88

🇷🇴 92.118.39.14

🇷🇺 82.162.56.186

🇺🇸 34.45.49.116

🇳🇱 176.65.148.226

🇺🇸 173.236.251.231

🇺🇸 157.230.171.20

🇸🇪 157.22.73.23

🇳🇱 138.226.239.233

🇧🇬 109.160.32.11

🇫🇷 91.196.152.88