JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

94.46.167.106

Neutral Activity

Abuse Confidence Score

0% Low Risk

482 reports

155 reporters · latest 8 months ago

ISP: LIS DEDICATED SERVERS IP SPACE
Usage Type: Data Center/Web Hosting/Transit
ASN: AS24768
Domain Name: ptisp.pt
Country: 🇵🇹 Portugal
City: Lisbon, Lisbon

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

94.46.167.106 has been reported 482 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

482 from 155 distinct reporters

First reported

May 17th 2024

Most recent report

8 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 gnom4ik	2026-02-22 00:59:03 UTC · (8 months ago)	ban-reviewer auto report; ip=94.46.167.106; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14,15,22; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged ... show more ban-reviewer auto report; ip=94.46.167.106; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14,15,22; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for HTTP scanning activity (scenario: http:scan); AbuseIPDB category 14 (Port Scan) is applicable; AbuseIPDB category 15 (Hacking) is applicable; AbuseIPDB category 22 (SSH) is applicable show less	Port Scan Hacking SSH
🇫🇷 tecnicorioja	2026-01-06 23:01:17 UTC · (10 months ago)	wp-login attack [06/Jan/2026:07:44:34	Brute-Force Web App Attack
🇧🇾 lns.bz	2026-01-06 19:21:39 UTC · (10 months ago)	Banned for trying to access xmlrpc [BY]	Web App Attack
🇫🇮 bittiguru.fi	2026-01-06 11:10:06 UTC · (10 months ago)	94.46.167.106 - [06/Jan/2026:13:04:18 +0200] "POST /xmlrpc.php HTTP/2.0" 404 136 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; InfoPath.3)" ... show more 94.46.167.106 - [06/Jan/2026:13:04:18 +0200] "POST /xmlrpc.php HTTP/2.0" 404 136 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; InfoPath.3)" "1.11" 94.46.167.106 - [06/Jan/2026:13:10:05 +0200] "POST /xmlrpc.php HTTP/2.0" 403 239 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Trident/7.0)" "1.73" ... show less	Hacking Brute-Force Web App Attack
🇩🇪 hchristo	2026-01-06 10:56:03 UTC · (10 months ago)	[Tue Jan 06 11:56:01.207190 2026] [access_compat:error] [pid 61358:tid 61405] [remote 94.46.167.106:47488] AH01797: client denied by server configuration: /var/www/kd1121/htdocs/adventure-westfalia/xmlrpc.php [Tue Jan 06 11:56:01.684140 2026] [access ... show more [Tue Jan 06 11:56:01.207190 2026] [access_compat:error] [pid 61358:tid 61405] [remote 94.46.167.106:47488] AH01797: client denied by server configuration: /var/www/kd1121/htdocs/adventure-westfalia/xmlrpc.php [Tue Jan 06 11:56:01.684140 2026] [access_compat:error] [pid 61358:tid 61387] [remote 94.46.167.106:48190] AH01797: client denied by server configuration: /var/www/kd1121/htdocs/adventure-westfalia/xmlrpc.php [Tue Jan 06 11:56:02.045443 2026] [access_compat:error] [pid 61358:tid 61380] [remote 94.46.167.106:48950] AH01797: client denied by server configuration: /var/www/kd1121/htdocs/adventure-westfalia/xmlrpc.php [Tue Jan 06 11:56:02.503476 2026] [access_compat:error] [pid 61358:tid 61365] [remote 94.46.167.106:49722] AH01797: client denied by server configuration: /var/www/kd1121/htdocs/adventure-westfalia/xmlrpc.php [Tue Jan 06 11:56:02.907427 2026] [access_compat:error] [pid 61358:tid 61396] [remote 94.46.167.106:50414] AH01797: client denied by server configuration: /var/www/ ... show less	Brute-Force
🇺🇸 mind5t0rm	2026-01-06 08:38:16 UTC · (10 months ago)	(WPLOGIN) WP Login Attack 94.46.167.106 (PT/Portugal/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 94.46.167.106 - - [06/Jan/2026:15:26:31 +0700] "GET /wp-login.php HTTP/1.1" 200 2466 "-" "Mozilla/5.0 (Windows NT ... show more (WPLOGIN) WP Login Attack 94.46.167.106 (PT/Portugal/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 94.46.167.106 - - [06/Jan/2026:15:26:31 +0700] "GET /wp-login.php HTTP/1.1" 200 2466 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.79 Safari/537.36" 94.46.167.106 - - [06/Jan/2026:15:26:32 +0700] "POST /wp-login.php HTTP/1.1" 200 2623 "https://zerowaterthailand.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.79 Safari/537.36" 94.46.167.106 - - [06/Jan/2026:15:38:12 +0700] "GET /wp-login.php HTTP/1.1" 200 2466 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; LCJB; rv:11.0) like Gecko" show less	Port Scan
🇫🇮 bittiguru.fi	2026-01-06 07:17:24 UTC · (10 months ago)	94.46.167.106 - [06/Jan/2026:09:16:52 +0200] "POST /xmlrpc.php HTTP/2.0" 404 136 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.79 Safari/537.36" "1.11" 94.46.167.106 - [06/Jan/2026:09:17:23 +0200] "P ... show more 94.46.167.106 - [06/Jan/2026:09:16:52 +0200] "POST /xmlrpc.php HTTP/2.0" 404 136 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.79 Safari/537.36" "1.11" 94.46.167.106 - [06/Jan/2026:09:17:23 +0200] "POST /xmlrpc.php HTTP/2.0" 404 136 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.79 Safari/537.36" "1.11" ... show less	Hacking Brute-Force Web App Attack
🇩🇪 Spidrweb.co.uk	2026-01-06 07:12:07 UTC · (10 months ago)	Brute-Force WordPress attack (155.98)	Web App Attack
🇺🇸 dtorrer	2026-01-06 06:54:44 UTC · (10 months ago)	Brute-force general attack.	Brute-Force
🇺🇸 factor1	2026-01-06 06:39:23 UTC · (10 months ago)	Fail2ban at churndash Reports Abuse.	Brute-Force Web App Attack
🇫🇮 bittiguru.fi	2026-01-06 06:33:23 UTC · (10 months ago)	94.46.167.106 - [06/Jan/2026:08:25:23 +0200] "POST /xmlrpc.php HTTP/2.0" 404 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8" "0.00" 94.46.167.106 - [06/Jan/2026:08:33:22 + ... show more 94.46.167.106 - [06/Jan/2026:08:25:23 +0200] "POST /xmlrpc.php HTTP/2.0" 404 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8" "0.00" 94.46.167.106 - [06/Jan/2026:08:33:22 +0200] "POST /xmlrpc.php HTTP/2.0" 404 15323 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; HO32600; HO32600R; rv:11.0) like Gecko" "5.52" ... show less	Hacking Brute-Force Web App Attack
🇨🇦 KIsmay	2026-01-06 06:27:42 UTC · (10 months ago)	Jan 5 23:43:57 www4 WPAudit[3636821]: 94.46.167.106 katharinedickerson.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/604.5.6 (KHTML, like Gecko) Version/11.0.3 Safari/604.5.6" sbd-admin:admin1234 FAIL Jan 5 23:53:23 www4 WPAudit[ ... show more Jan 5 23:43:57 www4 WPAudit[3636821]: 94.46.167.106 katharinedickerson.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/604.5.6 (KHTML, like Gecko) Version/11.0.3 Safari/604.5.6" sbd-admin:admin1234 FAIL Jan 5 23:53:23 www4 WPAudit[3637309]: 94.46.167.106 katharinedickerson.com "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" katharinedickerson:demo FAIL Jan 6 00:49:33 www4 WPAudit[3637905]: 94.46.167.106 www.servicesfyi.ca "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36" pathwise:password FAIL Jan 6 01:23:10 www4 WPAudit[3642620]: 94.46.167.106 www.westkootenayrentals.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36" root:root1234 FAIL Jan 6 01:27:42 www4 WPAudit[3642881]: 94.46.167.106 bestnelson.org "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like ... show less	Brute-Force Web App Attack
🇺🇸 rafled	2026-01-06 06:23:20 UTC · (10 months ago)	Attempt to login to Wordpress Admin	Web App Attack
🇳🇱 0xffffffff	2026-01-06 05:49:48 UTC · (10 months ago)	[2026-01-06 07:49:44.178209] [authz_core:error] [pid 422244:tid 135466258990784] [client 94.46.167.106:0] AH01630: client denied by server configuration: /var/www//xmlrpc.php , error_notes:wp:xmlrpc , URI:'/xmlrpc.php' [2026-01-06 07:49:45.028625] [ ... show more [2026-01-06 07:49:44.178209] [authz_core:error] [pid 422244:tid 135466258990784] [client 94.46.167.106:0] AH01630: client denied by server configuration: /var/www//xmlrpc.php , error_notes:wp:xmlrpc , URI:'/xmlrpc.php' [2026-01-06 07:49:45.028625] [authz_core:error] [pid 422244:tid 135466233763520] [client 94.46.167.106:0] AH01630: client denied by server configuration: /var/www//xmlrpc.php , error_notes:wp:xmlrpc , URI:'/xmlrpc.php' [2026-01-06 07:49:45.612000] [authz_core:error] [pid 422244:tid 135466225354432] [client 94.46.167.106:0] AH01630: client denied by server configuration: /var/www//xmlrpc.php , error_notes:wp:xmlrpc , URI:'/xmlrpc.php' [2026-01-06 07:49:46.133668] [authz_core:error] [pid 422244:tid 135466216945344] [client 94.46.167.106:0] AH01630: client denied by server configuration: /var/www/*/xmlrpc.php , error_notes:wp:xmlrpc , URI:'/xmlrpc.php' [2026-01-06 07:49:46.833510] [authz_core:error] [pid 422244:tid 135466208536256] [client 94.46.167.106:0] AH01630: client denied by server confi show less	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-01-06 05:47:22 UTC · (10 months ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH

Showing 1 to 15 of 482 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 118.47.255.44

🇸🇬 51.79.212.43

🇮🇩 36.64.103.19

🇺🇸 193.202.86.25

🇮🇳 182.70.254.196

🇭🇰 150.5.141.198

🇨🇳 106.75.224.92

🇬🇧 81.19.219.234

🇪🇸 77.211.7.8

🇺🇸 71.229.1.186

🇨🇳 58.49.26.202

🇺🇸 143.42.1.71

🇳🇱 86.54.28.253

🇷🇴 80.94.92.234

🇺🇸 71.6.246.140

🇺🇸 64.62.197.4

🇨🇳 58.240.123.98

🇺🇸 50.2.184.242

🇺🇸 45.147.233.155

🇺🇸 45.33.41.118