JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.94.156.93

45.94.156.93 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 49%: ?

49%

ISP	Mykola Skurikhin
Usage Type	Data Center/Web Hosting/Transit
ASN	AS56851
Domain Name	hostiq.ua
Country	🇺🇦 Ukraine
City	Lviv, Lviv

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.94.156.93

Whois 45.94.156.93

IP Abuse Reports for 45.94.156.93:

This IP address has been reported a total of 13 times from 8 distinct sources. 45.94.156.93 was first reported on July 6th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-07-12 23:57:48 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇨🇿 ptlab	2026-07-12 02:45:26 (2 days ago)	Detected wp_login attack from WP-host.	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-07-11 18:06:56 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇲🇽 octageeks.com	2026-07-10 04:10:12 (4 days ago)	Wordpress malicious attack:[octausername]	Web App Attack
🇩🇪 FeG Deutschland	2026-07-09 23:24:15 (4 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 14:09:38 (5 days ago)	(mod_security) mod_security (id:210350) triggered by 45.94.156.93 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 45.94.156.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 10:09:33.628119 2026] [security2:error] [pid 2789:tid 2789] [client 45.94.156.93:36714] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|greenlight.us\|F\|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "greenlight.us"] [uri "/"] [unique_id "ak-rnQa-MFFO12oUPBucaAAAAAo"], referer: https://greenlight.us/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 lostswordfish.com	2026-07-08 18:14:03 (5 days ago)	Wordfence waf block on wp20190711M4	Web App Attack
Anonymous	2026-07-08 00:46:13 (6 days ago)	Brute forcing Wordpress login	Hacking Web App Attack
Anonymous	2026-07-07 08:08:36 (1 week ago)	45.94.156.93 - - [07/Jul/2026:16:08:35 +0800] "POST /xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 ( ... show more 45.94.156.93 - - [07/Jul/2026:16:08:35 +0800] "POST /xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 cwytech	2026-07-06 23:22:02 (1 week ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wp-us-login-only-high.	Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-07-06 23:09:54 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 17:10:58 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 45.94.156.93 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 45.94.156.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 13:10:51.372170 2026] [security2:error] [pid 16813:tid 16821] [client 45.94.156.93:49696] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|duplexgoldmine.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "duplexgoldmine.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akvhm2R8ztvXA0UVloWqdAAAAUA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 06:10:05 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 45.94.156.93 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 45.94.156.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 02:09:56.650550 2026] [security2:error] [pid 17704:tid 17704] [client 45.94.156.93:60224] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|xcarsubscription.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "xcarsubscription.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aktGtJiQmD_jJE-U4VklTwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.70

🇧🇩 202.37.105.29

🇿🇦 172.253.249.212

🇺🇸 165.154.206.250

🇩🇪 151.243.11.52

🇭🇰 103.30.40.129

🇳🇴 87.120.104.75

🇺🇸 85.254.125.118

🇫🇮 77.105.161.120

🇱🇹 62.60.130.219

🇳🇱 45.198.224.120

🇲🇲 210.14.102.249

🇧🇷 187.111.28.131

🇷🇺 185.216.192.197

🇮🇳 182.95.217.202

🇺🇸 162.216.150.55

🇺🇸 142.111.245.34

🇰🇷 121.66.10.109

🇩🇪 94.26.106.253

🇷🇺 93.90.41.12