JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.146.112.48

185.146.112.48 was found in our database!

This IP was reported 85 times. Confidence of Abuse is 85%: ?

85%

ISP	AG Telekom MMC.
Usage Type	Fixed Line ISP
ASN	AS57293
Hostname(s)	nat-pool-185.146.112.48.katv1.net
Domain Name	katv1.az
Country	🇦🇿 Azerbaijan
City	Baku, Baki

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.146.112.48

Whois 185.146.112.48

IP Abuse Reports for 185.146.112.48:

This IP address has been reported a total of 85 times from 50 distinct sources. 185.146.112.48 was first reported on January 25th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 pusathosting.com	2026-07-01 09:30:06 (2 days ago)	24ds22 bruteforce	Brute-Force Web App Attack
🇺🇸 kosada.com	2026-06-29 08:19:23 (4 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇧🇪 cmbplf	2026-06-28 20:34:55 (4 days ago)	3.743 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-28 17:50:21 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 185.146.112.48 (nat-pool-185.146.112.48.katv1.n ... show more (mod_security) mod_security (id:240335) triggered by 185.146.112.48 (nat-pool-185.146.112.48.katv1.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 13:50:12.842542 2026] [security2:error] [pid 16622:tid 16622] [client 185.146.112.48:54041] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 185.146.112.48 (+1 hits since last alert)\|theyoungstrategist.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "theyoungstrategist.com"] [uri "/xmlrpc.php"] [unique_id "akFe1O2Xj4gRJnD-hnCkpwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 13:44:44 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 185.146.112.48 (nat-pool-185.146.112.48.katv1.n ... show more (mod_security) mod_security (id:240335) triggered by 185.146.112.48 (nat-pool-185.146.112.48.katv1.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 09:44:36.100757 2026] [security2:error] [pid 16579:tid 16579] [client 185.146.112.48:54019] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 185.146.112.48 (+1 hits since last alert)\|peterjohnsonauthor.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "peterjohnsonauthor.com"] [uri "/xmlrpc.php"] [unique_id "aj_TxDQET244ctFPTJhpWAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-06-27 13:44:38 (6 days ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security	DDoS Attack Hacking Exploited Host
🇺🇸 TPI-Abuse	2026-06-27 08:41:19 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 185.146.112.48 (nat-pool-185.146.112.48.katv1.n ... show more (mod_security) mod_security (id:240335) triggered by 185.146.112.48 (nat-pool-185.146.112.48.katv1.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 04:41:13.021967 2026] [security2:error] [pid 4608:tid 4618] [client 185.146.112.48:54051] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 185.146.112.48 (+1 hits since last alert)\|darrylrichards.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "darrylrichards.com"] [uri "/xmlrpc.php"] [unique_id "aj-MqRRulMq9s8QcouyBvgAAAMU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-27 07:24:31 (6 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 17:35:45 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 185.146.112.48 (nat-pool-185.146.112.48.katv1.n ... show more (mod_security) mod_security (id:240335) triggered by 185.146.112.48 (nat-pool-185.146.112.48.katv1.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 13:35:39.018926 2026] [security2:error] [pid 27308:tid 27308] [client 185.146.112.48:54064] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 185.146.112.48 (+1 hits since last alert)\|mdsshop.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mdsshop.com"] [uri "/xmlrpc.php"] [unique_id "aj1m6-rit3Njjfr7B21jKgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 19:08:01 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 185.146.112.48 (nat-pool-185.146.112.48.katv1.n ... show more (mod_security) mod_security (id:240335) triggered by 185.146.112.48 (nat-pool-185.146.112.48.katv1.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 15:07:55.772280 2026] [security2:error] [pid 21386:tid 21386] [client 185.146.112.48:54058] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 185.146.112.48 (+1 hits since last alert)\|vrevgaming.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "vrevgaming.net"] [uri "/xmlrpc.php"] [unique_id "ajwrC6PEj4OT_NUwwpkFAQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-24 18:36:27 (1 week ago)	(wordpress) Failed wordpress login from 185.146.112.48 (AZ/Azerbaijan/nat-pool-185.146.112.48.katv1. ... show more (wordpress) Failed wordpress login from 185.146.112.48 (AZ/Azerbaijan/nat-pool-185.146.112.48.katv1.net) show less	Brute-Force
🇦🇺 screwlooseit.com.au	2026-06-23 20:14:26 (1 week ago)	Blocked by CSF 13 firewall - Rule: XMLRPC AZ/Azerbaijan/nat-pool-185.146.112.48.katv1.net	Web App Attack
🇳🇱 Site.eu	2026-06-23 19:13:43 (1 week ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-06-20 06:55:46 (1 week ago)	(wordpress) Failed wordpress login from 185.146.112.48 (AZ/Azerbaijan/nat-pool-185.146.112.48.katv1. ... show more (wordpress) Failed wordpress login from 185.146.112.48 (AZ/Azerbaijan/nat-pool-185.146.112.48.katv1.net) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-06-19 07:49:26 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 185.146.112.48 (nat-pool-185.146.112.48.katv1.n ... show more (mod_security) mod_security (id:240335) triggered by 185.146.112.48 (nat-pool-185.146.112.48.katv1.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 03:49:22.097446 2026] [security2:error] [pid 30776:tid 30776] [client 185.146.112.48:54007] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 185.146.112.48 (+1 hits since last alert)\|caymancline.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "caymancline.com"] [uri "/xmlrpc.php"] [unique_id "ajT0gj81jkS-HjkrB2roRgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 85 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 193.56.116.42

🇺🇸 184.105.139.112

🇧🇼 168.167.228.123

🇬🇧 149.13.200.37

🇰🇷 115.68.220.142

🇺🇸 50.116.72.139

🇬🇧 185.216.145.186

🇹🇷 178.247.224.84

🇭🇰 150.5.169.176

🇧🇩 114.130.85.36

🇭🇰 13.70.1.178

🇬🇧 2a06:4880:c000::f5

🇪🇹 196.189.51.64

🇵🇪 161.132.50.236

🇦🇺 158.178.141.16

🇺🇸 154.83.197.197

🇨🇳 115.151.72.155

🇳🇱 91.92.42.7

🇸🇬 43.156.71.43

🇩🇪 164.90.236.107