JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.8.145.3

194.8.145.3 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 55%: ?

55%

ISP	PE Voloschenko Olexandr Volodumirovich
Usage Type	Fixed Line ISP
ASN	AS59497
Hostname(s)	ip-194-8-145-3.intelekt.cv.ua
Domain Name	intelekt.cv.ua
Country	🇺🇦 Ukraine
City	Chernivtsi, Chernivtsi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.8.145.3

Whois 194.8.145.3

IP Abuse Reports for 194.8.145.3:

This IP address has been reported a total of 15 times from 10 distinct sources. 194.8.145.3 was first reported on June 20th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 AvonleaConsulting	2026-07-09 22:59:42 (2 days ago)	Attempts to probe web pages for vulnerable PHP or other applications	Web App Attack
🇫🇮 inlink.ltd	2026-07-09 21:11:11 (2 days ago)	Known malicious PHP file or CMS probe	Web App Attack
🇬🇧 AvonleaConsulting	2026-07-09 13:41:17 (2 days ago)	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	Bad Web Bot Web App Attack
🇳🇱 wlt-blocker	2026-07-06 21:04:56 (5 days ago)	Unauthorized access to webpage admin	Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 20:04:01 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 194.8.145.3 (ip-194-8-145-3.intelekt.cv.ua): 1 ... show more (mod_security) mod_security (id:225170) triggered by 194.8.145.3 (ip-194-8-145-3.intelekt.cv.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 16:03:52.989545 2026] [security2:error] [pid 27024:tid 27024] [client 194.8.145.3:50730] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|natickvillagerentals.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "natickvillagerentals.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akbEKOL_6W3KxT5vwpUKFgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-06-29 20:31:15 (1 week ago)	Try to access /xmlrpc.php	Web App Attack
🇨🇭 4server	2026-06-28 23:12:09 (1 week ago)	[MonJun2901:12:06.7246022026][security2:error][pid3879010:tid3879021][client194.8.145.3:0]ModSecurit ... show more [MonJun2901:12:06.7246022026][security2:error][pid3879010:tid3879021][client194.8.145.3:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"cybertelgroup.com\"][uri\"/xmlrpc.php\"][unique_id\"akGqRteZvoTd7ay7SY-WQgAAAUg\"] show less	Hacking Web App Attack
🇳🇱 wlt-blocker	2026-06-27 22:10:21 (2 weeks ago)	Unauthorized access to webpage admin	Web App Attack
Anonymous	2026-06-27 16:36:05 (2 weeks ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇩🇪 4server	2026-06-25 15:52:27 (2 weeks ago)	[ThuJun2517:52:22.8434102026][security2:error][pid1542835:tid1543009][client194.8.145.3:0]ModSecurit ... show more [ThuJun2517:52:22.8434102026][security2:error][pid1542835:tid1543009][client194.8.145.3:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"jrtradeinnovation.ch\"][uri\"/xmlrpc.php\"][unique_id\"aj1OtsHYvZKs6lmPYf6rtAAAAQ0\"] show less	Port Scan Brute-Force Web App Attack
🇧🇷 Francisco Carlos	2026-06-25 15:50:40 (2 weeks ago)	Honeypot captured 1 automated attack/scan requests (JR Save Tech). Types: shell-upload, wordpress. S ... show more Honeypot captured 1 automated attack/scan requests (JR Save Tech). Types: shell-upload, wordpress. Sample: GET /xmlrpc.php show less	Hacking Bad Web Bot Web App Attack
Anonymous	2026-06-24 08:44:00 (2 weeks ago)	A user with IP address 194.8.145.3 has been locked out from signing in or using the password recover ... show more A user with IP address 194.8.145.3 has been locked out from signing in or using the password recovery form for the following reason: Exceeded the maximum number of login failures which is: 10. show less	Brute-Force Web App Attack
🇬🇧 Artelis	2026-06-22 00:12:38 (2 weeks ago)	194.8.145.3 - - [22/Jun/2026:00:12:37 +0000] "POST /xmlrpc.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (W ... show more 194.8.145.3 - - [22/Jun/2026:00:12:37 +0000] "POST /xmlrpc.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 4server	2026-06-21 10:25:59 (2 weeks ago)	[SunJun2112:25:56.7618322026][security2:error][pid200298:tid200309][client194.8.145.3:0]ModSecurity: ... show more [SunJun2112:25:56.7618322026][security2:error][pid200298:tid200309][client194.8.145.3:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"gagspettacolo.ch\"][uri\"/xmlrpc.php\"][unique_id\"aje8NNslJn-sq9sE9aei2AAAAMg\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-20 17:44:03 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 194.8.145.3 (ip-194-8-145-3.intelekt.cv.ua): 1 ... show more (mod_security) mod_security (id:225170) triggered by 194.8.145.3 (ip-194-8-145-3.intelekt.cv.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 13:43:57.314850 2026] [security2:error] [pid 18247:tid 18252] [client 194.8.145.3:59609] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|nabsci.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nabsci.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajbRXUQ4C9cU-H-GNahHlwAAAQM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇿 109.248.156.49

🇨🇳 180.168.60.146

🇭🇰 154.83.12.89

🇫🇮 147.185.133.175

🇮🇳 122.187.234.54

🇯🇵 104.28.157.42

🇺🇸 66.132.186.245

🇺🇸 57.141.0.59

🇶🇦 34.18.62.244

🇷🇴 2.57.122.150

🇭🇰 223.197.145.146

🇹🇼 198.235.24.69

🇪🇬 197.59.134.102

🇺🇸 147.185.132.160

🇧🇷 138.122.236.239

🇧🇷 69.6.222.101

🇩🇪 69.5.169.93

🇩🇪 69.5.169.91

🇩🇪 69.5.169.40

🇺🇸 64.62.197.86