JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.194.146.40

104.194.146.40 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 81%: ?

81%

ISP	RouterHosting LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS198983
Domain Name	cloudzy.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.194.146.40

Whois 104.194.146.40

IP Abuse Reports for 104.194.146.40:

This IP address has been reported a total of 19 times from 15 distinct sources. 104.194.146.40 was first reported on July 24th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 DumaNet	2026-07-25 07:17:00 (2 days ago)	Web app attack attempts, scanning for vulnerability. Date: 2026 Jul 25. 05:18:36 Source IP: 104.19 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Jul 25. 05:18:36 Source IP: 104.194.146.40 Portion of the log(s): 104.194.146.40 - [25/Jul/2026:05:18:36 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 500 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" show less	Web App Attack
🇩🇪 tinect	2026-07-25 05:12:59 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-cve-probing	Web App Attack
🇷🇺 DZBOT	2026-07-25 03:37:57 (2 days ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇱🇻 garmtech.com	2026-07-25 03:06:39 (2 days ago)	IM360 WAF: WordPress wp2shell REST batch endpoint before 7.0.2 or 6.9.5 (CVE-2026-63030) MV:12	Hacking
🇺🇦 URAN Publishing Service	2026-07-25 02:55:50 (2 days ago)	104.194.146.40 - - [25/Jul/2026:05:55:49 +0300] "POST /wp-json/batch/v1 HTTP/1.1" 404 4696 "-" "Mozi ... show more 104.194.146.40 - - [25/Jul/2026:05:55:49 +0300] "POST /wp-json/batch/v1 HTTP/1.1" 404 4696 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 Phenix Info	2026-07-25 02:15:11 (2 days ago)	SmallGuard.fr - HoneyPot	Web App Attack
🇨🇭 Origon	2026-07-25 01:52:09 (2 days ago)	http-cve-probing - IP: 104.194.146.40 - time="2026-07-25T03:52:09+02:00" level=info msg="(555f66b4f ... show more http-cve-probing - IP: 104.194.146.40 - time="2026-07-25T03:52:09+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-cve-probing by ip 104.194.146.40 (GB/198983) : 4h ban on Ip 104.194.146.40" module=db show less	Web App Attack
🇺🇸 mnsf	2026-07-25 01:05:36 (2 days ago)	Too many Status 50X (11)	Brute-Force Web App Attack
Anonymous	2026-07-25 00:40:57 (2 days ago)	Attack detected: 104.194.146.40 [2026-07-25] Categories: 21 --- wp2shell/batch exploit (3 hits) --- ... show more Attack detected: 104.194.146.40 [2026-07-25] Categories: 21 --- wp2shell/batch exploit (3 hits) --- 104.194.146.40 - - [24/Jul/2026:23:22:17 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 207 4771 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" 104.194.146.40 - - [24/Jul/2026:23:22:19 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 4771 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" 104.194.146.40 - - [24/Jul/2026:23:22:20 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 5234 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-07-25 00:29:18 (2 days ago)	104.194.146.40 - - [25/Jul/2026:03:29:17 +0300] "POST /wp-json/batch/v1 HTTP/1.1" 404 4696 "-" "Mozi ... show more 104.194.146.40 - - [25/Jul/2026:03:29:17 +0300] "POST /wp-json/batch/v1 HTTP/1.1" 404 4696 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" ... show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-07-24 23:31:38 (2 days ago)	[Sat Jul 25 09:31:36.696138 2026] [security2:error] [pid 713652] [client 104.194.146.40:51360] [clie ... show more [Sat Jul 25 09:31:36.696138 2026] [security2:error] [pid 713652] [client 104.194.146.40:51360] [client 104.194.146.40] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ccideas.com.au"] [uri "/"] [unique_id "amP12BxBeoAa6blFLZkJIAAAAAk"] ... show less	Web App Attack
🇺🇸 OceanTreasure	2026-07-24 23:27:28 (2 days ago)	tcp/443; WordPress REST API enumeration: "POST /wp-json/batch/v1" @ 2026-07-24T23:23:51Z [proxy]	Brute-Force
🇺🇦 URAN Publishing Service	2026-07-24 22:59:18 (2 days ago)	104.194.146.40 - - [25/Jul/2026:01:56:14 +0300] "POST /wp-json/batch/v1 HTTP/1.1" 404 4692 "-" "Mozi ... show more 104.194.146.40 - - [25/Jul/2026:01:56:14 +0300] "POST /wp-json/batch/v1 HTTP/1.1" 404 4692 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" 104.194.146.40 - - [25/Jul/2026:01:59:17 +0300] "POST /wp-json/batch/v1 HTTP/1.1" 404 3320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇮 inlink.ltd	2026-07-24 22:43:25 (2 days ago)	Known malicious PHP file or CMS probe	Web App Attack
🇭🇺 bcsaba	2026-07-24 22:05:12 (2 days ago)	Going for WP CVE-2026-63030 104.194.146.40 - - [25/Jul/2026:00:05:10 +0200] "POST /wp-json/batch/v1 ... show more Going for WP CVE-2026-63030 104.194.146.40 - - [25/Jul/2026:00:05:10 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" show less	Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 178.16.55.50

🇻🇳 116.110.218.151

🇳🇱 45.148.10.147

🇨🇭 20.199.183.73

🇺🇸 155.2.191.146

🇫🇷 91.196.152.191

🇫🇮 74.125.46.147

🇹🇭 1.20.156.28

🇰🇷 210.204.137.38

🇲🇽 189.139.105.137

🇻🇳 113.177.27.200

🇺🇸 107.170.54.160

🇨🇳 60.16.209.220

🇩🇪 4.184.121.217

🇵🇭 2001:4456:14c:2500:bddb:7d07:e351:a15a

🇦🇹 152.53.0.56

🇨🇦 138.197.164.175

🇻🇳 116.110.211.241

🇺🇸 100.50.17.159

🇺🇸 66.175.220.105