JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.27.164.133

94.27.164.133 was found in our database!

This IP was reported 128 times. Confidence of Abuse is 100%: ?

100%

ISP	Magyar Telekom Plc.
Usage Type	Fixed Line ISP
ASN	AS5483
Hostname(s)	5E1BA485.dsl.pool.telekom.hu
Domain Name	telekom.hu
Country	🇭🇺 Hungary
City	Kaposvar, Somogy County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.27.164.133

Whois 94.27.164.133

IP Abuse Reports for 94.27.164.133:

This IP address has been reported a total of 128 times from 79 distinct sources. 94.27.164.133 was first reported on June 29th 2026, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 SoteriaCovenant	2026-07-03 15:54:05 (16 hours ago)	Automated probe: /wp-json/wp/v2/users on Soteria Global infrastructure. No vulnerable software prese ... show more Automated probe: /wp-json/wp/v2/users on Soteria Global infrastructure. No vulnerable software present. show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-07-03 11:29:01 (21 hours ago)	iaki.com.au:443 94.27.164.133 - - [03/Jul/2026:21:28:59 +1000] "GET /?author=3&feed=rss2 HTTP/1.1" 4 ... show more iaki.com.au:443 94.27.164.133 - - [03/Jul/2026:21:28:59 +1000] "GET /?author=3&feed=rss2 HTTP/1.1" 404 5126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36, Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" ... show less	Web App Attack
🇧🇪 cmbplf	2026-07-03 11:07:40 (21 hours ago)	1.462 requests to many distinct domains in 1 hour (1w5d8h)	Brute-Force Bad Web Bot
🇦🇺 paulshipley.com.au	2026-07-03 10:54:56 (21 hours ago)	angleseaarthouse.com.au:443 94.27.164.133 - - [03/Jul/2026:20:54:55 +1000] "GET /?author=4 HTTP/1.1" ... show more angleseaarthouse.com.au:443 94.27.164.133 - - [03/Jul/2026:20:54:55 +1000] "GET /?author=4 HTTP/1.1" 404 188750 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36, Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 big-cloud.nl	2026-07-03 10:41:47 (21 hours ago)	Try to access /wordpress/xmlrpc.php	Web App Attack
🇫🇷 conseilgouz	2026-07-03 10:00:24 (22 hours ago)	hae-7 : Trying access unauthorized files/dir=>/wp-json/wp/v2/users?slug=admin&_fields=id,slug	Hacking
Anonymous	2026-07-03 09:46:21 (22 hours ago)	Failed Wordpress Logins	Web App Attack
🇩🇰 ScamAware	2026-07-03 09:28:39 (23 hours ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: user_enumeration (WordPr ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: user_enumeration (WordPress user enumeration). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: block. Cloudflare source: firewallCustom. show less	Brute-Force Web App Attack
🇺🇸 donarev419	2026-07-03 07:05:14 (1 day ago)	Connection to port 1378 with data transfer. Data preview: ��7��}$	Port Scan Hacking
🇦🇺 paulshipley.com.au	2026-07-03 06:27:39 (1 day ago)	levellapromotions.co.nz:443 94.27.164.133 - - [03/Jul/2026:16:27:35 +1000] "GET /?author=2&feed=rss2 ... show more levellapromotions.co.nz:443 94.27.164.133 - - [03/Jul/2026:16:27:35 +1000] "GET /?author=2&feed=rss2 HTTP/1.1" 404 321504 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36, Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-07-03 05:40:05 (1 day ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇺🇸 Mundo Bueno	2026-07-03 05:17:20 (1 day ago)	[ISILIA Protection v2.1] Tentative d'accès: /wp-json/wp/v2/users/9 \| Pays: HU \| UA: Mozilla/5.0 (Win ... show more [ISILIA Protection v2.1] Tentative d'accès: /wp-json/wp/v2/users/9 \| Pays: HU \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Sa show less	Hacking Web App Attack
🇺🇸 Mundo Bueno	2026-07-03 04:28:06 (1 day ago)	[ISILIA Protection v2.1] Tentative d'accès: /wp-json/wp/v2/users \| Pays: HU \| UA: Mozilla/5.0 (Windo ... show more [ISILIA Protection v2.1] Tentative d'accès: /wp-json/wp/v2/users \| Pays: HU \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Sa show less	Hacking Web App Attack
🇲🇽 octageeks.com	2026-07-03 04:09:52 (1 day ago)	Wordpress malicious attack:[octawp]	Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 03:43:32 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 94.27.164.133 (5E1BA485.dsl.pool.telekom.hu): 1 ... show more (mod_security) mod_security (id:225170) triggered by 94.27.164.133 (5E1BA485.dsl.pool.telekom.hu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 23:43:25.998341 2026] [security2:error] [pid 17940:tid 17940] [client 94.27.164.133:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mail.local639.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.local639.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akcv3ai3OI0AkDL_3rMxugAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 128 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 35.203.210.214

🇲🇾 202.187.228.152

🇧🇷 201.70.126.228

🇮🇳 117.206.179.32

🇨🇭 51.103.130.248

🇻🇪 201.243.123.142

🇧🇷 201.216.100.82

🇨🇷 190.112.222.28

🇨🇦 85.217.149.16

🇫🇷 85.204.70.104

🇨🇳 81.70.149.60

🇵🇭 61.28.144.154

🇳🇱 45.148.10.230

🇧🇪 34.78.29.97

🇷🇴 2.57.122.238

🇨🇱 201.215.50.244

🇻🇪 201.209.182.157

🇻🇪 201.209.173.8

🇩🇪 167.94.145.28

🇻🇳 165.99.16.135