JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.44.96.108

194.44.96.108 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 51%: ?

51%

ISP	United Bukovinian Networks
Usage Type	Fixed Line ISP
ASN	AS59497
Domain Name	intelekt.cv.ua
Country	🇺🇦 Ukraine
City	Chernivtsi, Chernivtsi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.44.96.108

Whois 194.44.96.108

IP Abuse Reports for 194.44.96.108:

This IP address has been reported a total of 22 times from 16 distinct sources. 194.44.96.108 was first reported on July 28th 2025, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 guldkage	2026-10-22 13:16:01 (19 hours ago)	Unauthorized connection attempt detected from IP address 194.44.96.108 to port 23 (ger-03) [H]	Brute-Force Exploited Host
🇺🇸 TPI-Abuse	2026-10-21 17:26:52 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 194.44.96.108 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 194.44.96.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 13:26:48.266635 2026] [security2:error] [pid 20554:tid 20554] [client 194.44.96.108:43072] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|engineeringarts.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "engineeringarts.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atj12J65npCRXK90pgV3ywAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-21 11:27:28 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 194.44.96.108 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 194.44.96.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 07:27:23.246502 2026] [security2:error] [pid 6472:tid 6472] [client 194.44.96.108:38900] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|gegkal.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gegkal.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atihm1hTYZcnr1gPYPrwGQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 security.rdmc.fr	2026-10-19 10:16:22 (3 days ago)	Port Scan Attack proto:TCP src:29866 dst:23	Port Scan
Anonymous	2026-10-17 18:51:37 (5 days ago)	2026-10-17T18:51:34.229517+00:00 HongKong1 sshd-session[2267330]: Connection closed by 194.44.96.108 ... show more 2026-10-17T18:51:34.229517+00:00 HongKong1 sshd-session[2267330]: Connection closed by 194.44.96.108 port 54468 [preauth] 2026-10-17T18:51:36.675914+00:00 HongKong1 sshd-session[2267497]: Connection closed by 194.44.96.108 port 54946 [preauth] ... show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-10-09 18:22:29 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 194.44.96.108 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 194.44.96.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 14:22:21.747600 2026] [security2:error] [pid 23504:tid 23504] [client 194.44.96.108:44354] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|magnoliahillproductions.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "magnoliahillproductions.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "askw3dSd_tw-7gdnFibvfAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 bart@	2026-10-08 13:12:40 (2 weeks ago)	Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection dark_ ... show more Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection dark_ip show less	Port Scan
Anonymous	2026-10-08 09:36:01 (2 weeks ago)	denied SSH access attempt. destination port 22.	Port Scan Brute-Force SSH
🇫🇷 security.rdmc.fr	2026-10-07 20:18:44 (2 weeks ago)	Port Scan Attack proto:TCP src:50490 dst:23	Port Scan
🇫🇷 security.rdmc.fr	2026-10-06 11:42:40 (2 weeks ago)	Port Scan Attack proto:TCP src:40580 dst:23	Port Scan
🇫🇷 security.rdmc.fr	2026-10-04 13:05:54 (2 weeks ago)	Port Scan Attack proto:TCP src:51982 dst:23	Port Scan
🇺🇸 MPL	2026-10-01 06:34:44 (3 weeks ago)	tcp/23	Port Scan
🇨🇿 Countryman	2026-10-01 00:10:02 (3 weeks ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇩🇪 DasDuo	2026-09-30 09:21:16 (3 weeks ago)	Attempt on port 22 (SSH) - potential remote access / brute-force attempt. Blocked by firewall (unsol ... show more Attempt on port 22 (SSH) - potential remote access / brute-force attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection). show less	Port Scan Brute-Force SSH
Anonymous	2026-09-30 04:41:17 (3 weeks ago)	denied traffic to a honeypot network. destination port 22.	Port Scan Hacking

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇸 109.245.37.191

🇺🇸 162.216.149.105

🇲🇾 161.142.168.4

🇰🇷 121.134.185.211

🇳🇱 93.123.109.204

🇮🇶 91.205.42.41

🇵🇹 78.137.211.237

🇬🇧 35.203.211.187

🇧🇷 35.199.80.206

🇬🇧 31.94.6.37

🇪🇸 5.182.83.231

🇰🇷 222.116.46.123

🇭🇰 216.118.231.170

🇰🇷 210.95.176.243

🇹🇭 203.156.108.110

🇲🇾 202.165.22.173

🇭🇰 198.20.133.119

🇧🇷 190.115.84.25

🇺🇸 187.40.235.155

🇺🇸 184.186.114.60