JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.14.4.145

185.14.4.145 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 48%: ?

48%

ISP	Innovative Telecommunications LLC RU, Rostov-na-Donu
Usage Type	Fixed Line ISP
ASN	AS62040
Domain Name	itk-rus.ru
Country	🇷🇺 Russian Federation
City	Rostov-on-Don, Rostov

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.14.4.145

Whois 185.14.4.145

IP Abuse Reports for 185.14.4.145:

This IP address has been reported a total of 9 times from 8 distinct sources. 185.14.4.145 was first reported on April 1st 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-19 15:43:09 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 185.14.4.145 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 185.14.4.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 11:43:05.814109 2026] [security2:error] [pid 6925:tid 6945] [client 185.14.4.145:25086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "faimreps.com"] [uri "/.env"] [unique_id "alzwieKIRSuBy9ipSAffGAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-07-19 02:06:09 (19 hours ago)	Too many Status 40X (12)	Brute-Force Web App Attack
🇫🇷 conseilgouz	2026-07-18 17:55:04 (1 day ago)	joe-7 : Trying access unauthorized files/dir=>/tmp/619619.pht	Hacking
🇳🇱 Mangelot Hosting	2026-07-18 14:59:43 (1 day ago)	(php_susp_dir) srv102 PHP in suspicious dir 185.14.4.145 (RU/Russia/-): 1 in the last 3600 secs; Por ... show more (php_susp_dir) srv102 PHP in suspicious dir 185.14.4.145 (RU/Russia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇪 marten_o	2026-07-18 09:30:17 (1 day ago)	185.14.4.145 - - [18/Jul/2026:11:30:17 +0200] "GET /tmp/249249.pht HTTP/1.1" 500 576 "https://iff-ge ... show more 185.14.4.145 - - [18/Jul/2026:11:30:17 +0200] "GET /tmp/249249.pht HTTP/1.1" 500 576 "https://iff-gevelsberg.de/index.php?option=com_jce&task=profiles.import" "Mozilla/5.0 (Windows NT 5.1; rv:48.0) Gecko/20100101 Firefox/48.0" 557 774 ... show less	Web App Attack
🇩🇪 John Chrys.	2026-07-18 03:40:58 (1 day ago)	185.14.4.145 - - [18/Jul/2026:06:40:55 +0300] "POST /index.php?option=com_jce&task=profiles.import H ... show more 185.14.4.145 - - [18/Jul/2026:06:40:55 +0300] "POST /index.php?option=com_jce&task=profiles.import HTTP/1.1" 403 2218 "https://iaveris.gr/index.php?option=com_users" "Mozilla/5.0 (X11; Linux i686 on x86_64; rv:50.0) Gecko/20100101 Firefox/50.0" 185.14.4.145 - - [18/Jul/2026:06:40:55 +0300] "POST /index.php?option=com_jce&task=profiles.import HTTP/1.1" 403 2218 "https://iaveris.gr/index.php?option=com_users" "Mozilla/5.0 (X11; Linux i686 on x86_64; rv:50.0) Gecko/20100101 Firefox/50.0" 185.14.4.145 - - [18/Jul/2026:06:40:55 +0300] "POST /index.php?option=com_jce&task=profiles.import HTTP/1.1" 403 2819 "https://iaveris.gr/index.php?option=com_users" "Mozilla/5.0 (X11; Linux i686 on x86_64; rv:50.0) Gecko/20100101 Firefox/50.0" 185.14.4.145 - - [18/Jul/2026:06:40:55 +0300] "POST /index.php?option=com_jce&task=profiles.import HTTP/1.1" 403 2819 "https://iaveris.gr/index.php?option=com_users" "Mozilla/5.0 (X11; Linux i686 on x86_64; rv:50.0) Gecko/20100101 Firefox/50.0" 185.14.4.145 - - [18 ... show less	Brute-Force Web App Attack
🇩🇪 4server	2026-07-17 20:42:15 (2 days ago)	[FriJul1722:42:13.0182152026][security2:error][pid2208404:tid2208420][client185.14.4.145:0]ModSecuri ... show more [FriJul1722:42:13.0182152026][security2:error][pid2208404:tid2208420][client185.14.4.145:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"giftech.ch\"][uri\"/index.php\"][unique_id\"alqTpWY4eWRblx-Gmk_eqQAAAE0\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 12:50:52 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 185.14.4.145 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 185.14.4.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 08:50:47.618102 2026] [security2:error] [pid 3051573:tid 3051573] [client 185.14.4.145:21125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danged.com"] [uri "/.env"] [unique_id "alolJzHi8r5uCaDcakUIjgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 vtchost.com	2026-04-01 07:04:29 (3 months ago)	Apr 1 09:04:28 vtchost kernel: [132859.466864] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:1 ... show more Apr 1 09:04:28 vtchost kernel: [132859.466864] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:2a:b3:08:00 SRC=185.14.4.145 DST=161.97.181.152 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=8167 DF PROTO=TCP SPT=18077 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.61

🇿🇦 102.64.45.119

🇳🇱 91.92.40.48

🇬🇧 87.106.65.126

🇨🇦 20.151.225.23

🇰🇷 220.88.220.59

🇬🇧 198.244.183.207

🇹🇼 198.235.24.36

🇨🇳 221.228.10.226

🇩🇪 167.94.145.18

🇨🇳 112.65.211.222

🇳🇱 77.239.124.241

🇺🇸 68.8.241.4

🇮🇹 5.89.75.194

🇺🇸 192.158.140.24

🇮🇳 183.82.111.224

🇰🇪 105.164.128.18

🇷🇴 92.118.39.49

🇨🇦 85.217.149.70

🇺🇸 66.249.73.167