JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.44.96.108

194.44.96.108 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 51%: ?

51%

ISP	United Bukovinian Networks
Usage Type	Fixed Line ISP
ASN	AS59497
Domain Name	intelekt.cv.ua
Country	🇺🇦 Ukraine
City	Chernivtsi, Chernivtsi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.44.96.108

Whois 194.44.96.108

IP Abuse Reports for 194.44.96.108:

This IP address has been reported a total of 22 times from 16 distinct sources. 194.44.96.108 was first reported on July 28th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 guldkage	2026-10-22 13:16:01 (2 hours ago)	Unauthorized connection attempt detected from IP address 194.44.96.108 to port 23 (ger-03) [H]	Brute-Force Exploited Host
🇺🇸 TPI-Abuse	2026-10-21 17:26:52 (22 hours ago)	(mod_security) mod_security (id:225170) triggered by 194.44.96.108 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 194.44.96.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 13:26:48.266635 2026] [security2:error] [pid 20554:tid 20554] [client 194.44.96.108:43072] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|engineeringarts.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "engineeringarts.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atj12J65npCRXK90pgV3ywAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-21 11:27:28 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 194.44.96.108 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 194.44.96.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 07:27:23.246502 2026] [security2:error] [pid 6472:tid 6472] [client 194.44.96.108:38900] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|gegkal.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gegkal.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atihm1hTYZcnr1gPYPrwGQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 security.rdmc.fr	2026-10-19 10:16:22 (3 days ago)	Port Scan Attack proto:TCP src:29866 dst:23	Port Scan
Anonymous	2026-10-17 18:51:37 (4 days ago)	2026-10-17T18:51:34.229517+00:00 HongKong1 sshd-session[2267330]: Connection closed by 194.44.96.108 ... show more 2026-10-17T18:51:34.229517+00:00 HongKong1 sshd-session[2267330]: Connection closed by 194.44.96.108 port 54468 [preauth] 2026-10-17T18:51:36.675914+00:00 HongKong1 sshd-session[2267497]: Connection closed by 194.44.96.108 port 54946 [preauth] ... show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-10-09 18:22:29 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 194.44.96.108 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 194.44.96.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 14:22:21.747600 2026] [security2:error] [pid 23504:tid 23504] [client 194.44.96.108:44354] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|magnoliahillproductions.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "magnoliahillproductions.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "askw3dSd_tw-7gdnFibvfAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 bart@	2026-10-08 13:12:40 (2 weeks ago)	Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection dark_ ... show more Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection dark_ip show less	Port Scan
Anonymous	2026-10-08 09:36:01 (2 weeks ago)	denied SSH access attempt. destination port 22.	Port Scan Brute-Force SSH
🇫🇷 security.rdmc.fr	2026-10-07 20:18:44 (2 weeks ago)	Port Scan Attack proto:TCP src:50490 dst:23	Port Scan
🇫🇷 security.rdmc.fr	2026-10-06 11:42:40 (2 weeks ago)	Port Scan Attack proto:TCP src:40580 dst:23	Port Scan
🇫🇷 security.rdmc.fr	2026-10-04 13:05:54 (2 weeks ago)	Port Scan Attack proto:TCP src:51982 dst:23	Port Scan
🇺🇸 MPL	2026-10-01 06:34:44 (3 weeks ago)	tcp/23	Port Scan
🇨🇿 Countryman	2026-10-01 00:10:02 (3 weeks ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇩🇪 DasDuo	2026-09-30 09:21:16 (3 weeks ago)	Attempt on port 22 (SSH) - potential remote access / brute-force attempt. Blocked by firewall (unsol ... show more Attempt on port 22 (SSH) - potential remote access / brute-force attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection). show less	Port Scan Brute-Force SSH
Anonymous	2026-09-30 04:41:17 (3 weeks ago)	denied traffic to a honeypot network. destination port 22.	Port Scan Hacking

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.26.121.155

🇵🇭 180.194.230.241

🇺🇸 172.234.222.168

🇵🇱 162.158.172.136

🇨🇳 116.179.33.213

🇺🇸 43.135.133.30

🇬🇧 3.9.144.38

🇰🇷 220.78.85.92

🇦🇷 201.254.142.33

🇧🇷 201.17.158.89

🇵🇱 195.3.223.157

🇵🇰 182.188.24.243

🇨🇴 181.49.8.57

🇸🇬 150.109.11.158

🇨🇳 116.179.33.10

🇸🇮 102.220.161.170

🇮🇳 61.1.116.149

🇨🇳 39.105.53.92

🇧🇷 16.5.0.218

🇲🇦 196.64.88.151