JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.46.15.120

94.46.15.120 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 60%: ?

60%

ISP	PTISP IP SPACE
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24768
Hostname(s)	cp116.webserver.pt
Domain Name	ptisp.pt
Country	🇵🇹 Portugal
City	Lisbon, Lisbon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.46.15.120

Whois 94.46.15.120

IP Abuse Reports for 94.46.15.120:

This IP address has been reported a total of 11 times from 10 distinct sources. 94.46.15.120 was first reported on July 9th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-07-16 04:19:57 (1 day ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 Hazzard	2026-07-15 03:47:24 (2 days ago)	(wordpress) Failed wordpress login from 94.46.15.120 (PT/Portugal/-/-/cp116.webserver.pt/[redacted]) ... show more (wordpress) Failed wordpress login from 94.46.15.120 (PT/Portugal/-/-/cp116.webserver.pt/[redacted]): (CF_ENABLE) show less	Brute-Force
🇲🇽 octageeks.com	2026-07-14 04:11:35 (3 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 maxpower	2026-07-13 15:22:33 (3 days ago)	(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 94.46.15.120 (PT/Portugal/cp116.webserver.pt): ... show more (wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 94.46.15.120 (PT/Portugal/cp116.webserver.pt): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 94.46.15.120 - - [13/Jul/2026:17:22:20 +0200] "GET /wp-json/wp/v2/users?_fields=slug&per_page=100&page=1 HTTP/2.0" 200 79 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Mobile/15E148 Safari/604.1" "-" host=blogdigiovanni.it show less	Port Scan
Anonymous	2026-07-13 09:45:21 (4 days ago)	WordPress Brute Force	Brute-Force
🇺🇸 lostswordfish.com	2026-07-13 07:32:04 (4 days ago)	Wordfence waf block on fypeducation	Web App Attack
🇨🇭 Peter-Johann Sarbach	2026-07-12 03:49:27 (5 days ago)	Hacking website	Hacking
🇺🇸 Starburst SysOp Team	2026-07-11 18:48:14 (5 days ago)	Malware host detected by rbl.malware.expert. RBL lookup of 120.15.46.94.rbl.malware.expert succeeded ... show more Malware host detected by rbl.malware.expert. RBL lookup of 120.15.46.94.rbl.malware.expert succeeded at REMOTE_ADDR. (400010-mnz6-1) show less	Hacking
🇲🇹 Malta	2026-07-10 23:38:13 (6 days ago)	94.46.15.120 - - [11/Jul/2026:01:38:13 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT ... show more 94.46.15.120 - - [11/Jul/2026:01:38:13 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇩🇪 london2038.com	2026-07-10 22:45:31 (6 days ago)	Probing for exploits 94.46.15.120 - - [11/Jul/2026:00:45:27 +0200] "GET /wp-login.php HTTP/2.0" 301 ... show more Probing for exploits 94.46.15.120 - - [11/Jul/2026:00:45:27 +0200] "GET /wp-login.php HTTP/2.0" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 94.46.15.120 - - [11/Jul/2026:00:45:28 +0200] "POST /wp-login.php HTTP/2.0" 301 0 "https://v97746.<REDACTED>/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 14:57:38 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 94.46.15.120 (cp116.webserver.pt): 1 in the las ... show more (mod_security) mod_security (id:210350) triggered by 94.46.15.120 (cp116.webserver.pt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 10:57:31.760792 2026] [security2:error] [pid 11827:tid 11827] [client 94.46.15.120:33624] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|surviquo.com\|F\|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "surviquo.com"] [uri "/wp-json/wp/v2/users/7"] [unique_id "ak-22w5CeaRsBoEST2EXRwAAAAU"], referer: https://surviquo.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.156

🇨🇳 120.48.175.122

🇩🇿 105.110.99.146

🇮🇩 103.112.5.7

🇳🇱 91.92.40.47

🇫🇷 85.217.140.39

🇱🇹 81.30.98.47

🇰🇷 58.76.159.170

🇳🇱 45.156.87.166

🇳🇱 45.153.34.161

🇧🇪 34.140.122.40

🇱🇻 213.232.204.130

🇵🇾 201.217.12.57

🇺🇸 198.12.254.228

🇸🇬 165.154.200.214

🇬🇧 35.203.211.226

🇧🇪 35.189.223.193

🇺🇸 34.224.132.215

🇨🇳 218.25.89.208

🇧🇬 213.91.234.180