JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.158.48.2

94.158.48.2 was found in our database!

This IP was reported 111 times. Confidence of Abuse is 0%: ?

ISP	IPLUS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS43060
Hostname(s)	hosting.comnet.uz
Domain Name	comnet.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.158.48.2

Whois 94.158.48.2

IP Abuse Reports for 94.158.48.2:

This IP address has been reported a total of 111 times from 52 distinct sources. 94.158.48.2 was first reported on March 17th 2021, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2026-04-30 22:09:11 (3 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/94.158.48.2	SSH
🇺🇸 RAP	2026-04-30 11:44:00 (3 months ago)	2026-04-30 11:44:00 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇧🇾 sashan	2026-04-30 10:11:59 (3 months ago)	2026-04-30T13:11:33.078490+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=94.158.48.2 ... show more 2026-04-30T13:11:33.078490+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=94.158.48.2 DST=xxx.xxx.xxx.xxx LEN=40 TOS=0x00 PREC=0x00 TTL=55 ID=51288 PROTO=TCP SPT=10626 DPT=23 WINDOW=15250 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇷🇸 Smel	2024-07-22 22:19:11 (2 years ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇷🇸 Smel	2023-08-07 13:49:28 (3 years ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇸🇰 EVISION	2023-08-07 07:57:04 (3 years ago)	phishing from [email protected] ; subj: Re: Revised Invoice No_8562023 , detection: varia ... show more phishing from [email protected] ; subj: Re: Revised Invoice No_8562023 , detection: variant MSIL/Kryptik.AJJE trojan show less	Phishing Email Spam Spoofing
🇲🇾 syokadmin	2022-05-03 23:22:26 (4 years ago)	(mod_security) mod_security (id:77140958) triggered by 94.158.48.2 (UZ/Uzbekistan/hosting.comnet.uz) ... show more (mod_security) mod_security (id:77140958) triggered by 94.158.48.2 (UZ/Uzbekistan/hosting.comnet.uz): 1 in the last 3600 secs show less	Brute-Force
🇲🇾 syokadmin	2022-05-02 20:32:47 (4 years ago)	(mod_security) mod_security (id:77140958) triggered by 94.158.48.2 (UZ/Uzbekistan/hosting.comnet.uz) ... show more (mod_security) mod_security (id:77140958) triggered by 94.158.48.2 (UZ/Uzbekistan/hosting.comnet.uz): 1 in the last 3600 secs show less	Brute-Force
🇲🇾 syokadmin	2021-04-08 01:48:03 (5 years ago)	(mod_security) mod_security (id:5000135) triggered by 94.158.48.2 (UZ/Uzbekistan/hosting.comnet.uz): ... show more (mod_security) mod_security (id:5000135) triggered by 94.158.48.2 (UZ/Uzbekistan/hosting.comnet.uz): 5 in the last 3600 secs show less	Brute-Force
🇫🇷 security.rdmc.fr	2021-04-08 01:35:11 (5 years ago)	Automatic report - Banned IP Access	Web App Attack
🇩🇪 bsoft.de	2021-04-06 21:09:26 (5 years ago)	94.158.48.2 - - [07/Apr/2021:03:09:21 +0200] "GET /wp-login.php HTTP/1.1" 200 10220 "-" "Mozilla/5.0 ... show more 94.158.48.2 - - [07/Apr/2021:03:09:21 +0200] "GET /wp-login.php HTTP/1.1" 200 10220 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 94.158.48.2 - - [07/Apr/2021:03:09:24 +0200] "POST /wp-login.php HTTP/1.1" 200 10471 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 94.158.48.2 - - [07/Apr/2021:03:09:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" show less	Web App Attack
🇩🇪 cerberusinformatica	2021-04-06 19:16:14 (5 years ago)	94.158.48.2 - - [07/Apr/2021:01:16:14 +0200] "POST /xmlrpc.php HTTP/1.1" 403 13195 "-" "Mozilla/5.0 ... show more 94.158.48.2 - - [07/Apr/2021:01:16:14 +0200] "POST /xmlrpc.php HTTP/1.1" 403 13195 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 94.158.48.2 - - [07/Apr/2021:01:16:14 +0200] "POST /xmlrpc.php HTTP/1.1" 403 13195 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Web App Attack
🇩🇪 F242	2021-04-06 14:40:24 (5 years ago)	Apr 6 20:40:24 mx1 wordpress(www.pixel64.de)[24973]: XML-RPC authentication attempt for unknown use ... show more Apr 6 20:40:24 mx1 wordpress(www.pixel64.de)[24973]: XML-RPC authentication attempt for unknown user [login] from 94.158.48.2 ... show less	Web App Attack
🇩🇪 bsoft.de	2021-04-06 14:24:30 (5 years ago)	94.158.48.2 - - [06/Apr/2021:20:24:25 +0200] "GET /wp-login.php HTTP/1.1" 200 10045 "-" "Mozilla/5.0 ... show more 94.158.48.2 - - [06/Apr/2021:20:24:25 +0200] "GET /wp-login.php HTTP/1.1" 200 10045 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 94.158.48.2 - - [06/Apr/2021:20:24:28 +0200] "POST /wp-login.php HTTP/1.1" 200 10296 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 94.158.48.2 - - [06/Apr/2021:20:24:29 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" show less	Web App Attack
🇩🇪 emha.koeln	2021-04-05 18:20:20 (5 years ago)	v2202006123119120844 94.158.48.2 - - [06/Apr/2021:00:20:16 +0200] "POST /wp-login.php HTTP/1.1" 200 ... show more v2202006123119120844 94.158.48.2 - - [06/Apr/2021:00:20:16 +0200] "POST /wp-login.php HTTP/1.1" 200 10180 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" v2202006123119120844 94.158.48.2 - - [06/Apr/2021:00:20:17 +0200] "POST /wp-login.php HTTP/1.1" 200 10016 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" v2202006123119120844 94.158.48.2 - - [06/Apr/2021:00:20:18 +0200] "POST /wp-login.php HTTP/1.1" 200 10016 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" show less	Brute-Force Web App Attack

Showing 1 to 15 of 111 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2400:cb00:119:1000:63a4:6a37:9d11:1826

🇺🇸 172.182.213.154

🇺🇸 162.252.52.109

🇸🇬 101.32.240.31

🇵🇭 61.9.8.172

🇯🇵 43.165.177.143

🇹🇭 203.154.158.195

🇧🇪 198.235.24.248

🇺🇸 100.28.153.226

🇺🇸 67.205.160.28

🇬🇧 35.203.210.87

🇳🇱 185.223.235.35

🇨🇳 183.248.129.130

🇩🇪 130.12.180.107

🇯🇵 124.155.125.131

🇺🇸 100.50.17.159

🇺🇸 97.74.236.4

🇫🇷 2400:cb00:537:1000:4738:87b6:e919:7953

🇩🇪 193.124.20.234

🇨🇱 173.194.91.145