JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.46.23.41

154.46.23.41 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 65%: ?

65%

ISP	PROIP, S.R.L.
Usage Type	Fixed Line ISP
ASN	AS275000
Domain Name	proiprd.com
Country	🇩🇴 Dominican Republic
City	Santo Domingo, Nacional

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.46.23.41

Whois 154.46.23.41

IP Abuse Reports for 154.46.23.41:

This IP address has been reported a total of 36 times from 27 distinct sources. 154.46.23.41 was first reported on July 29th 2026, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 security.rdmc.fr	2026-10-22 08:45:58 (16 hours ago)	Port Scan Attack proto:TCP src:49686 dst:23	Port Scan
🇩🇪 Hazzard	2026-10-21 04:23:55 (1 day ago)	(wordpress) Failed wordpress login from 154.46.23.41 (DO/Dominican Republic/Nacional/Santo Domingo/- ... show more (wordpress) Failed wordpress login from 154.46.23.41 (DO/Dominican Republic/Nacional/Santo Domingo/-/[redacted]): (CF_ENABLE) show less	Brute-Force
🇩🇰 swrlly	2026-10-19 00:57:20 (4 days ago)	1 ssh bruteforce attempt	Brute-Force SSH
🇫🇷 security.rdmc.fr	2026-10-18 11:20:38 (4 days ago)	Port Scan Attack proto:TCP src:37112 dst:23	Port Scan
🇺🇸 TPI-Abuse	2026-10-17 15:58:11 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 154.46.23.41 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 154.46.23.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 11:58:05.285971 2026] [security2:error] [pid 27339:tid 27339] [client 154.46.23.41:54620] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ussthresher.com.arsenaultartistmanagement.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ussthresher.com.arsenaultartistmanagement.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atObDV84UXevHFAazeAa5AAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 09:04:16 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 154.46.23.41 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 154.46.23.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 05:04:12.217073 2026] [security2:error] [pid 5153:tid 5153] [client 154.46.23.41:51868] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|diegogamazo.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "diegogamazo.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atCXDK3M6MgUivD3qG4LLwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 18:22:52 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 154.46.23.41 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 154.46.23.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 14:22:46.511289 2026] [security2:error] [pid 7766:tid 7766] [client 154.46.23.41:48840] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|yerevanpress.am\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "yerevanpress.am"] [uri "/wp-json/wp/v2/users"] [unique_id "as_IdlPhD14n6NpJTqvYMAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-12 20:39:12 (1 week ago)	Unauthorized connection to SSH port 22	Port Scan SSH
🇹🇷 pashait	2026-10-12 17:29:36 (1 week ago)	Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (6 events in 5 ... show more Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (6 events in 5min) at 2026-10-12 17:29 show less	Hacking
🇩🇪 EGP Abuse Dept	2026-10-01 10:52:30 (3 weeks ago)	Scanning for port/service exploits on tpc-053.mach3builders.nl	Port Scan Hacking
🇺🇸 鬼影233	2026-09-26 20:16:11 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 19:02:27 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 RAP	2026-09-22 13:12:37 (1 month ago)	2026-09-22 13:12:37 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇳🇱 EGP Abuse Dept	2026-09-22 08:24:32 (1 month ago)	Unauthorized connection to Telnet port 23	Port Scan Hacking
🇺🇸 sumnone	2026-09-19 03:53:46 (1 month ago)	Port probing on unauthorized port 22	Port Scan Hacking Exploited Host

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 3.85.49.226

🇳🇱 194.88.98.117

🇩🇪 185.201.139.213

🇯🇵 172.104.105.194

🇧🇬 109.160.113.77

🇮🇪 98.71.8.129

🇨🇭 82.21.4.93

🇺🇸 64.62.197.180

🇺🇸 45.156.129.203

🇮🇩 34.50.110.129

🇰🇷 220.124.231.28

🇩🇪 213.209.159.238

🇫🇷 201.4.78.3

🇰🇷 183.109.124.136

🇺🇸 154.30.74.133

🇳🇱 138.226.239.90

🇸🇬 104.248.148.88

🇫🇷 91.196.152.231

🇸🇬 85.203.21.239

🇺🇦 79.143.45.75