JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.165.46.45

194.165.46.45 was found in our database!

This IP was reported 96 times. Confidence of Abuse is 44%: ?

44%

ISP	PP Kabel-Plus
Usage Type	Fixed Line ISP
ASN	AS39222
Domain Name	Unknown
Country	🇺🇦 Ukraine
City	Solotvyno, Zakarpattia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.165.46.45

Whois 194.165.46.45

IP Abuse Reports for 194.165.46.45:

This IP address has been reported a total of 96 times from 48 distinct sources. 194.165.46.45 was first reported on February 28th 2025, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 big-cloud.nl	2026-10-23 00:37:10 (5 hours ago)	Try to access /xmlrpc.php	Web App Attack
Anonymous	2026-10-22 20:41:06 (9 hours ago)	1792701665 - 10/22/2026 22:41:05 Host: 194.165.46.45/194.165.46.45 Port: 443 UDP Blocked ...	Port Scan
🇺🇸 TPI-Abuse	2026-10-22 19:10:17 (10 hours ago)	(mod_security) mod_security (id:225170) triggered by 194.165.46.45 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 194.165.46.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 15:10:06.485617 2026] [security2:error] [pid 23971:tid 23971] [client 194.165.46.45:41736] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|achildsspace.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "achildsspace.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atpfjuwwpzRDUgq9GMCUoQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 01:28:31 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 194.165.46.45 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 194.165.46.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 21:28:22.331226 2026] [security2:error] [pid 4322:tid 4322] [client 194.165.46.45:23136] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|monmouthcountydanceclasses.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "monmouthcountydanceclasses.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atlmtrfVfVoyIeCJOOeN0AAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 01:03:12 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 194.165.46.45 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 194.165.46.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 21:03:02.741725 2026] [security2:error] [pid 7827:tid 7827] [client 194.165.46.45:42176] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|frogdesignmexico.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "frogdesignmexico.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atlgxrexUpgvetiVOm6icgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-20 23:18:22 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 194.165.46.45 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 194.165.46.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 19:18:07.567805 2026] [security2:error] [pid 4279:tid 4279] [client 194.165.46.45:54194] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.jesussotoca.bigchus.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.jesussotoca.bigchus.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atf2r_IC8iLS7UpdOit3WwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 22:12:45 (6 days ago)	(mod_security) mod_security (id:225170) triggered by 194.165.46.45 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 194.165.46.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 18:12:35.242891 2026] [security2:error] [pid 1262:tid 1262] [client 194.165.46.45:59290] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|buanamegah.kairoslogammakmur.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "buanamegah.kairoslogammakmur.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atKhU6hSE-P85EPRoMVaeQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 Mugen	2026-10-14 12:43:11 (1 week ago)	Unauthorized VPN login attempts	Brute-Force
🇲🇹 Malta	2026-10-09 22:51:10 (1 week ago)	194.165.46.45 - - [10/Oct/2026:00:51:09 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ... show more 194.165.46.45 - - [10/Oct/2026:00:51:09 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇩🇪 karger	2026-10-09 17:11:40 (1 week ago)	Wordpress attack - soft filter	Brute-Force Web App Attack
🇨🇿 lp	2026-09-29 00:25:41 (3 weeks ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 194.165.46.45 2026-09-28T23:26:21+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 194.165.46.45 2026-09-28T23:26:21+02:00 vpn Access-Reject 'zelena' station: 194.165.46.45 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇺🇸 鬼影233	2026-08-30 09:19:14 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-30 01:36:59 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-26 16:58:28 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 Zkillu	2026-08-20 18:46:47 (2 months ago)	DDoS flood attack against 31.56.58.0 (2026-08-20 18:41:47 -> 2026-08-20 18:56:47 UTC) targeting AS21 ... show more DDoS flood attack against 31.56.58.0 (2026-08-20 18:41:47 -> 2026-08-20 18:56:47 UTC) targeting AS215599. This IP (AS39222) sent ~356302 packets (506.30 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host

Showing 1 to 15 of 96 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 141.98.83.48

🇺🇸 104.152.52.228

🇫🇷 91.231.89.148

🇸🇪 90.225.220.127

🇮🇹 84.33.165.252

🇲🇽 189.189.82.82

🇮🇹 151.115.180.71

🇺🇿 109.94.173.8

🇺🇸 104.131.83.111

🇺🇸 104.28.166.26

🇰🇪 102.215.12.245

🇫🇷 91.231.89.252

🇺🇸 74.101.96.215

🇺🇸 66.132.172.247

🇮🇳 49.42.166.222

🇺🇸 31.134.13.139

🇫🇷 207.180.224.228

🇳🇱 195.178.110.227

🇺🇦 194.44.41.133

🇨🇷 186.177.188.121