JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.46.23.41

154.46.23.41 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 65%: ?

65%

ISP	PROIP, S.R.L.
Usage Type	Fixed Line ISP
ASN	AS275000
Domain Name	proiprd.com
Country	🇩🇴 Dominican Republic
City	Santo Domingo, Nacional

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.46.23.41

Whois 154.46.23.41

IP Abuse Reports for 154.46.23.41:

This IP address has been reported a total of 36 times from 27 distinct sources. 154.46.23.41 was first reported on July 29th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 security.rdmc.fr	2026-10-22 08:45:58 (11 hours ago)	Port Scan Attack proto:TCP src:49686 dst:23	Port Scan
🇩🇪 Hazzard	2026-10-21 04:23:55 (1 day ago)	(wordpress) Failed wordpress login from 154.46.23.41 (DO/Dominican Republic/Nacional/Santo Domingo/- ... show more (wordpress) Failed wordpress login from 154.46.23.41 (DO/Dominican Republic/Nacional/Santo Domingo/-/[redacted]): (CF_ENABLE) show less	Brute-Force
🇩🇰 swrlly	2026-10-19 00:57:20 (3 days ago)	1 ssh bruteforce attempt	Brute-Force SSH
🇫🇷 security.rdmc.fr	2026-10-18 11:20:38 (4 days ago)	Port Scan Attack proto:TCP src:37112 dst:23	Port Scan
🇺🇸 TPI-Abuse	2026-10-17 15:58:11 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 154.46.23.41 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 154.46.23.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 11:58:05.285971 2026] [security2:error] [pid 27339:tid 27339] [client 154.46.23.41:54620] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ussthresher.com.arsenaultartistmanagement.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ussthresher.com.arsenaultartistmanagement.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atObDV84UXevHFAazeAa5AAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 09:04:16 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 154.46.23.41 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 154.46.23.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 05:04:12.217073 2026] [security2:error] [pid 5153:tid 5153] [client 154.46.23.41:51868] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|diegogamazo.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "diegogamazo.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atCXDK3M6MgUivD3qG4LLwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 18:22:52 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 154.46.23.41 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 154.46.23.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 14:22:46.511289 2026] [security2:error] [pid 7766:tid 7766] [client 154.46.23.41:48840] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|yerevanpress.am\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "yerevanpress.am"] [uri "/wp-json/wp/v2/users"] [unique_id "as_IdlPhD14n6NpJTqvYMAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-12 20:39:12 (1 week ago)	Unauthorized connection to SSH port 22	Port Scan SSH
🇹🇷 pashait	2026-10-12 17:29:36 (1 week ago)	Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (6 events in 5 ... show more Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (6 events in 5min) at 2026-10-12 17:29 show less	Hacking
🇩🇪 EGP Abuse Dept	2026-10-01 10:52:30 (3 weeks ago)	Scanning for port/service exploits on tpc-053.mach3builders.nl	Port Scan Hacking
🇺🇸 鬼影233	2026-09-26 20:16:11 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 19:02:27 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 RAP	2026-09-22 13:12:37 (1 month ago)	2026-09-22 13:12:37 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇳🇱 EGP Abuse Dept	2026-09-22 08:24:32 (1 month ago)	Unauthorized connection to Telnet port 23	Port Scan Hacking
🇺🇸 sumnone	2026-09-19 03:53:46 (1 month ago)	Port probing on unauthorized port 22	Port Scan Hacking Exploited Host

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a06:4883:7000::86

🇦🇫 103.132.98.160

🇯🇵 103.62.49.154

🇹🇼 61.60.216.157

🇭🇰 40.83.93.179

🇪🇸 34.175.55.141

🇨🇳 14.18.113.233

🇩🇪 2a00:fbc:f1c7:3a9d:7073:ed4e:6f79:becb

🇩🇪 2a00:fbc:f1c7:3a9d:4d3a:9cbc:77eb:d43f

🇻🇳 210.245.30.140

🇧🇷 177.223.38.77

🇺🇸 162.216.150.10

🇳🇱 138.226.239.234

🇺🇸 66.249.64.75

🇺🇸 66.132.172.114

🇧🇬 62.60.134.134

🇦🇺 52.187.230.78

🇰🇷 121.184.128.107

🇨🇳 116.179.32.67

🇧🇩 103.101.250.217