JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.5.237.145

194.5.237.145 was found in our database!

This IP was reported 869 times. Confidence of Abuse is 0%: ?

ISP	Genc BT Bilisim Teknolojileri Limited Sirketi
Usage Type	Data Center/Web Hosting/Transit
ASN	AS209828
Hostname(s)	mail.kitapkocum.com
Domain Name	gencbt.com
Country	🇹🇷 Turkey
City	Bursa, Bursa Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.5.237.145

Whois 194.5.237.145

IP Abuse Reports for 194.5.237.145:

This IP address has been reported a total of 869 times from 107 distinct sources. 194.5.237.145 was first reported on September 17th 2023, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Dolutech.com	2024-10-22 22:06:55 (1 year ago)	WAF Block - Dolutech AI	Port Scan Brute-Force Web App Attack
🇩🇪 eminovic.ba	2024-10-07 19:30:07 (1 year ago)	Wordpress attack ...	Hacking Brute-Force Web App Attack
🇺🇸 nationaleventpros.com	2024-10-07 17:26:02 (1 year ago)	WordPress login attempt	Brute-Force
🇦🇺 QT	2024-10-07 17:11:43 (1 year ago)	Unauthorised WordPress admin login attempted at 2024-10-08 03:11:37 +1000	Web App Attack
Anonymous	2024-10-07 09:07:56 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇬🇧 Swiptly	2024-10-04 22:05:13 (1 year ago)	WordPress xmlrpc spam or enumeration ...	Web Spam Bad Web Bot Web App Attack
🇩🇪 eminovic.ba	2024-10-04 18:27:28 (1 year ago)	Wordpress attack ...	Hacking Brute-Force Web App Attack
Anonymous	2024-10-04 16:45:51 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇩🇪 SpaceHost-Server	2024-10-04 02:06:05 (1 year ago)	194.5.237.145 - - [04/Oct/2024:04:05:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 ... show more 194.5.237.145 - - [04/Oct/2024:04:05:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.237.145 - - [04/Oct/2024:04:05:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:24.0) Gecko/20100101 Firefox/24.0" 194.5.237.145 - - [04/Oct/2024:04:06:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" show less	Hacking Web App Attack
🇩🇪 SpaceHost-Server	2024-10-03 23:02:21 (1 year ago)	194.5.237.145 - - [04/Oct/2024:01:01:35 +0200] "POST /xmlrpc.php HTTP/1.1" 200 1143 "-" "Mozilla/5.0 ... show more 194.5.237.145 - - [04/Oct/2024:01:01:35 +0200] "POST /xmlrpc.php HTTP/1.1" 200 1143 "-" "Mozilla/5.0 (Linux; Android 10; SM-A102U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Mobile Safari/537.36" 194.5.237.145 - - [04/Oct/2024:01:01:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 1143 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10; rv:33.0) Gecko/20100101 Firefox/33.0" 194.5.237.145 - - [04/Oct/2024:01:02:20 +0200] "POST /xmlrpc.php HTTP/1.1" 200 1143 "-" "Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36" show less	Hacking Web App Attack
🇩🇪 SpaceHost-Server	2024-10-03 15:40:43 (1 year ago)	194.5.237.145 - - [03/Oct/2024:17:40:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 ... show more 194.5.237.145 - - [03/Oct/2024:17:40:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:54.0) Gecko/20100101 Firefox/54.0" 194.5.237.145 - - [03/Oct/2024:17:40:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Linux; Android 10; LM-Q710(FGN)) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Mobile Safari/537.36" 194.5.237.145 - - [03/Oct/2024:17:40:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Linux; Android 10; LM-X420) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Mobile Safari/537.36" show less	Hacking Web App Attack
🇩🇪 bsoft.de	2024-10-03 15:39:36 (1 year ago)	194.5.237.145 - - [03/Oct/2024:17:39:20 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 ... show more 194.5.237.145 - - [03/Oct/2024:17:39:20 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 194.5.237.145 - - [03/Oct/2024:17:39:30 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.237.145 - - [03/Oct/2024:17:39:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" show less	Web App Attack
Anonymous	2024-10-03 14:50:38 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇩🇪 bsoft.de	2024-10-03 04:12:03 (1 year ago)	194.5.237.145 - - [03/Oct/2024:04:37:11 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 ... show more 194.5.237.145 - - [03/Oct/2024:04:37:11 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.237.145 - - [03/Oct/2024:06:11:28 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Linux; Android 10; LM-X420) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Mobile Safari/537.36" 194.5.237.145 - - [03/Oct/2024:06:12:02 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:54.0) Gecko/20100101 Firefox/54.0" show less	Web App Attack
🇩🇰 buusbudde.dk	2024-10-03 01:33:36 (1 year ago)	[Thu Oct 03 03:33:33.765851 2024] [security2:error] [pid 1289505:tid 1289505] [client 194.5.237.145: ... show more [Thu Oct 03 03:33:33.765851 2024] [security2:error] [pid 1289505:tid 1289505] [client 194.5.237.145:44514] [client 194.5.237.145] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "juliabudde.com"] [uri "/xmlrpc.php"] [unique_id "Zv30bR_bM91T84czv9FJGQAAAAM"] [Thu Oct 03 03:33:36.186609 2024] [security2:error] [pid 1272649:tid 1272649] [client 194.5.237.145:44910] [client 194.5.237.145] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5) ... show less	Web App Attack

Showing 1 to 15 of 869 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇳 165.50.61.101

🇩🇪 151.243.11.8

🇮🇳 144.48.225.222

🇸🇬 136.110.63.218

🇻🇳 116.110.16.226

🇧🇪 104.199.33.142

🇸🇬 97.74.92.144

🇫🇷 91.231.89.49

🇳🇱 77.239.124.177

🇱🇹 62.60.130.242

🇰🇷 61.79.248.19

🇪🇬 41.38.109.55

🇺🇦 194.8.56.238

🇷🇴 193.46.255.86

🇧🇬 193.24.211.247

🇧🇷 186.250.218.99

🇻🇳 116.105.226.187

🇻🇳 58.187.58.198

🇰🇷 219.248.65.30

🇧🇪 198.235.24.201