JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.32.122.49

194.32.122.49 was found in our database!

This IP was reported 159 times. Confidence of Abuse is 12%: ?

12%

ISP	Cyberghost SRL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS61272
Domain Name	cyberghostvpn.com
Country	🇱🇹 Lithuania
City	Vilnius, Vilnius

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.32.122.49

Whois 194.32.122.49

IP Abuse Reports for 194.32.122.49:

This IP address has been reported a total of 159 times from 80 distinct sources. 194.32.122.49 was first reported on December 16th 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-11 15:50:59 (1 day ago)	Blocked by UFW (TCP on 20625) Source port: 10797 TTL: 45 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 20625) Source port: 10797 TTL: 45 Packet length: 60 TOS: 0x08 This report (for 194.32.122.49) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-10 07:07:22 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 194.32.122.49 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 194.32.122.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 03:07:15.975927 2026] [security2:error] [pid 18112:tid 18112] [client 194.32.122.49:1432] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|modalsoftware.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "modalsoftware.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "agAuo5dOUz0JjRyjesjnZAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 AustrianSimon	2026-04-01 21:04:14 (2 months ago)	01 Apr 2026 21:04:14UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ... show more 01 Apr 2026 21:04:14UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 194.32.122.49 show less	Brute-Force
🇺🇸 nowyouknow	2026-03-31 15:11:36 (2 months ago)	(From [email protected])(From [email protected]) Hi there, I’m Cara with VettedVAs, and we help ... show more (From [email protected])(From [email protected]) Hi there, I’m Cara with VettedVAs, and we help business owners secure more booked appointments using our Lead Found system. On average, our clients see 10+ new appointments every day. Would you be interested in bringing in more qualified leads for your business? Just reply “yes” with your number, and we’ll take it from there. Cara Love show less	Phishing Web Spam
🇺🇸 nowyouknow	2026-03-31 14:48:56 (2 months ago)	(From [email protected]) Hi there, I’m Cara with VettedVAs, and we help business owners secure m ... show more (From [email protected]) Hi there, I’m Cara with VettedVAs, and we help business owners secure more booked appointments using our Lead Found system. On average, our clients see 10+ new appointments every day. Would you be interested in bringing in more qualified leads for your business? Just reply “yes” with your number, and we’ll take it from there. Cara Love show less	Phishing Web Spam
🇮🇹 VHosting	2026-03-28 23:55:33 (2 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
Anonymous	2026-02-21 11:50:22 (3 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-01-24 23:00:13 (4 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-01-21 22:55:16 (4 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇨🇿 lp	2026-01-12 02:54:13 (5 months ago)	Email account brute force: 4 attempts were recorded from 194.32.122.49 2026-01-12T02:27:40+01:00 war ... show more Email account brute force: 4 attempts were recorded from 194.32.122.49 2026-01-12T02:27:40+01:00 warning: unknown[194.32.122.49]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-01-12T02:27:40+01:00 warning: unknown[194.32.122.49]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-01-12T02:27:40+01:00 warning: unknown[194.32.122.49]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-01-12T02:27:40+01:00 warning: unknown[194.32.122.49]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
Anonymous	2025-12-11 14:37:02 (6 months ago)	Web Server atack ...	DDoS Attack Web Spam Bad Web Bot Web App Attack
🇧🇪 cmbplf	2025-12-11 06:22:03 (6 months ago)	47 requests with user_agent.original Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7. ... show more 47 requests with user_agent.original Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.6) Gecko/20050319 39 requests with user_agent.original Mozilla/5.0 (iPhone; CPU iPhone OS 15_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/19G82 Instagram 306.0.0.20.118 (iPhone12,1; iOS 15_6_1; en_GB; en; scale=2.00; 828x1792; 529083166) NW/3 39 requests with user_agent.original Mozilla/5.0 (iPhone; CPU iPhone OS 16_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 [LinkedInApp]/9.28.7586 34 requests with user_agent.original Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.0.0) Gecko/20020623 Debian/1.0.0-0.woody.1 32 requests with user_agent.original Dalvik/2.1.0 (Linux; U; Android 11; Tibuta_MasterPad-E100 Build/RP1A.201005.006) 27 requests with user_agent.original Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2.1) Gecko/20021208 Debian/1.2.1-2 25 requests with user_agent.original Mozilla/5.0 (Macintosh; U; PPC; en-US; rv:0.9.3) Gecko/20010802 24 requests with u show less	Brute-Force Bad Web Bot
🇦🇺 screwlooseit.com.au	2025-12-05 07:26:51 (6 months ago)	Blocked by CSF 13 firewall - Rule: mysaslmatch MD/Republic of Moldova/-	Web App Attack
🇮🇹 VHosting	2025-11-11 06:37:30 (7 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
Anonymous	2025-11-09 04:10:12 (7 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking

Showing 1 to 15 of 159 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 209.85.218.69

🇺🇸 209.85.210.182

🇧🇷 189.50.142.78

🇮🇶 176.241.83.187

🇳🇱 164.92.212.216

🇩🇪 162.19.243.145

🇱🇹 62.60.130.238

🇳🇱 34.178.84.247

🇺🇸 23.95.20.168

🇮🇷 5.237.86.198

🇦🇺 3.106.164.104

🇺🇸 2607:f8b0:4864:20::f2c

🇮🇳 206.189.130.156

🇳🇱 193.176.31.194

🇨🇳 182.151.22.173

🇺🇸 154.197.57.220

🇻🇳 125.212.244.35

🇧🇬 91.191.209.9

🇺🇸 65.49.20.93

🇨🇳 39.174.42.18