JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.8.196.194

45.8.196.194 was found in our database!

This IP was reported 72 times. Confidence of Abuse is 100%: ?

100%

ISP	WERIDATA LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS208483
Domain Name	weridata.com.tr
Country	🇹🇷 Turkey
City	Istanbul, Istanbul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.8.196.194

Whois 45.8.196.194

IP Abuse Reports for 45.8.196.194:

This IP address has been reported a total of 72 times from 51 distinct sources. 45.8.196.194 was first reported on August 10th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Artelis	2026-08-26 12:13:58 (2 hours ago)	45.8.196.194 - - [26/Aug/2026:12:13:55 +0000] "GET //images/images/cache.php HTTP/1.1" 404 178 "www. ... show more 45.8.196.194 - - [26/Aug/2026:12:13:55 +0000] "GET //images/images/cache.php HTTP/1.1" 404 178 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.8.196.194 - - [26/Aug/2026:12:13:56 +0000] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/1.1" 404 178 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.8.196.194 - - [26/Aug/2026:12:13:56 +0000] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/1.1" 404 178 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.8.196.194 - - [26/Aug/2026:12:13:56 +0000] "GET //images/images/images/images/images/images/images/images/cache.php HTTP/1.1" 404 178 "www.google.com" "Mozlila/ ... show less	Web App Attack
🇩🇪 Hary74656	2026-08-26 12:07:37 (2 hours ago)	[Wed Aug 26 14:07:36.693716 2026] [core:info] [pid 55361:tid 55455] [client 45.8.196.194:54879] AH00 ... show more [Wed Aug 26 14:07:36.693716 2026] [core:info] [pid 55361:tid 55455] [client 45.8.196.194:54879] AH00128: File does not exist: /home/harald/www/cdh.aschi.at/blogs/media/media/cache.php, referer: www.google.com ... show less	Bad Web Bot
🇫🇮 oh.mg	2026-08-26 01:16:59 (13 hours ago)	[Wed Aug 26 03:16:53.364629 2026] [security2:error] [pid 1832053:tid 1832061] [client 45.8.196.194:6 ... show more [Wed Aug 26 03:16:53.364629 2026] [security2:error] [pid 1832053:tid 1832061] [client 45.8.196.194:64386] [client 45.8.196.194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "oh.ke"] [uri "/images/images/cache.php"] [unique_id "ao4-hf2h7DIsT4YqnbNlZAAAAAY"], referer: www.google.com [Wed Aug 26 03:16:58.903194 2026] [security2:error] [pid 1366258:tid 1366275] [client 45.8.196.194:58716] [client 45.8.196.194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ve ... show less	Web App Attack Bad Web Bot
🇬🇧 Artelis	2026-08-26 00:20:41 (13 hours ago)	45.8.196.194 - - [26/Aug/2026:00:20:40 +0000] "GET //wp-content/plugins/plugins/cache.php HTTP/1.1" ... show more 45.8.196.194 - - [26/Aug/2026:00:20:40 +0000] "GET //wp-content/plugins/plugins/cache.php HTTP/1.1" 301 162 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" ... show less	Web App Attack
🇳🇱 taivas.nl	2026-08-25 19:00:06 (19 hours ago)	web_app_attack	Email Spam
🇫🇷 sthoyer.de	2026-08-25 01:53:43 (1 day ago)	45.8.196.194 - - [25/Aug/2026:03:53:42 +0200] "GET //images/images/cache.php HTTP/1.1" 302 495 "www. ... show more 45.8.196.194 - - [25/Aug/2026:03:53:42 +0200] "GET //images/images/cache.php HTTP/1.1" 302 495 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" ... show less	Web App Attack
🇵🇱 nakordoni.eu	2026-08-24 02:00:05 (2 days ago)	Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matc ... show more Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matches. ISP: WERIDATA LLC (TR), Usage: Data Center/Web Hosting/Transit. Prior AbuseIPDB score at ban time: 100/100. show less	Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-08-23 22:55:29 (2 days ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possi ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possible exploited host). Evidence: AttackPattern: /[a-z0-9]{1,12}\.php (Match: /cache.php) show less	Hacking Exploited Host Web App Attack
Anonymous	2026-08-23 01:47:55 (3 days ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-admin/wplog.php	Web App Attack
🇫🇷 Baking333	2026-08-22 17:51:48 (3 days ago)	[redacted] 45.8.196.194 - - [22/Aug/2026:18:51:46 +0100] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/[red ... show more [redacted] 45.8.196.194 - - [22/Aug/2026:18:51:46 +0100] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/[redacted] HTTP/1.1" 301 656 0/119 "[redacted]" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" [redacted] 45.8.196.194 - - [22/Aug/2026:18:51:47 +0100] "GET /cgi-bin/cgi-bin/cgi-bin/cgi-bin/[redacted] HTTP/1.1" 302 6798 0/55375 "[redacted]" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" show less	Bad Web Bot Web App Attack
🇬🇧 Artelis	2026-08-22 15:37:40 (3 days ago)	45.8.196.194 - - [22/Aug/2026:15:37:40 +0000] "GET //wp-content/plugins/plugins/cache.php HTTP/1.1" ... show more 45.8.196.194 - - [22/Aug/2026:15:37:40 +0000] "GET //wp-content/plugins/plugins/cache.php HTTP/1.1" 301 162 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" ... show less	Web App Attack
🇫🇮 oh.mg	2026-08-22 09:43:35 (4 days ago)	[Sat Aug 22 11:43:34.345137 2026] [security2:error] [pid 1560024:tid 1560040] [client 45.8.196.194:5 ... show more [Sat Aug 22 11:43:34.345137 2026] [security2:error] [pid 1560024:tid 1560040] [client 45.8.196.194:51614] [client 45.8.196.194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "oh.ke"] [uri "/images/images/cache.php"] [unique_id "aolvRie2uoM3aX_FZQAs_gAAAI4"], referer: www.google.com ... show less	Web App Attack Bad Web Bot
🇫🇷 sthoyer.de	2026-08-22 09:25:05 (4 days ago)	45.8.196.194 - - [22/Aug/2026:11:25:04 +0200] "GET //images/images/cache.php HTTP/1.1" 302 495 "www. ... show more 45.8.196.194 - - [22/Aug/2026:11:25:04 +0200] "GET //images/images/cache.php HTTP/1.1" 302 495 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.8.196.194 - - [22/Aug/2026:11:25:04 +0200] "GET /images/images/cache.php HTTP/1.1" 302 495 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" ... show less	Web App Attack
🇫🇮 oh.mg	2026-08-21 21:52:20 (4 days ago)	[Fri Aug 21 23:52:19.404889 2026] [security2:error] [pid 2908388:tid 2908391] [client 45.8.196.194:5 ... show more [Fri Aug 21 23:52:19.404889 2026] [security2:error] [pid 2908388:tid 2908391] [client 45.8.196.194:51698] [client 45.8.196.194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "oh.ke"] [uri "/images/images/cache.php"] [unique_id "aojIk8k6S2ocRtTLOwKjAgAAAQE"], referer: www.google.com ... show less	Web App Attack Bad Web Bot
🇫🇮 oh.mg	2026-08-21 16:46:41 (4 days ago)	[Fri Aug 21 18:46:41.459012 2026] [security2:error] [pid 2251226:tid 2251277] [client 45.8.196.194:5 ... show more [Fri Aug 21 18:46:41.459012 2026] [security2:error] [pid 2251226:tid 2251277] [client 45.8.196.194:54202] [client 45.8.196.194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "oh.ke"] [uri "/images/images/cache.php"] [unique_id "aoiA8VlUyzQwqs1n5G7QEgAAARY"], referer: www.google.com ... show less	Web App Attack Bad Web Bot

Showing 1 to 15 of 72 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.21

🇺🇸 216.185.212.42

🇩🇪 213.209.159.20

🇩🇪 213.209.159.19

🇩🇪 213.209.159.17

🇩🇪 213.209.159.16

🇩🇪 213.209.159.15

🇸🇬 212.73.148.29

🇺🇸 66.132.186.139

🇺🇸 52.20.198.190

🇸🇬 47.84.101.132

🇳🇱 34.13.237.54

🇺🇸 20.163.16.228

🇩🇪 8.209.70.202

🇺🇸 2607:ff10:c8:594::4

🇧🇷 177.27.197.139

🇺🇸 147.185.132.204

🇸🇬 114.119.185.236

🇱🇻 93.177.249.172

🇳🇱 91.92.47.55