JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.48.180.236

185.48.180.236 was found in our database!

This IP was reported 102 times. Confidence of Abuse is 100%: ?

100%

ISP	IHS Kurumsal Teknoloji Hizmetleri A.S
Usage Type	Data Center/Web Hosting/Transit
ASN	AS49126
Domain Name	ihs.com.tr
Country	🇹🇷 Turkey
City	Istanbul, Istanbul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.48.180.236

Whois 185.48.180.236

IP Abuse Reports for 185.48.180.236:

This IP address has been reported a total of 102 times from 68 distinct sources. 185.48.180.236 was first reported on May 14th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-09-19 00:43:19 (3 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cache.teddypot.website \| URI: /.git/config \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-09-18 22:00:34 (5 hours ago)	Auto-ban: >3000 req/min op 2026-09-18	Web App Attack SSH Hacking
🇫🇷 Bensay	2026-09-18 21:31:45 (6 hours ago)	Repeated suspicious HTTP service scan against a blocked web sinkhole; threshold=3 events/10m; result ... show more Repeated suspicious HTTP service scan against a blocked web sinkhole; threshold=3 events/10m; result=blocked; user-agent=unknown show less	Port Scan
🇵🇱 Budyn	2026-09-18 20:13:58 (7 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cache.teddypot.cloud \| URI: /.git/config \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-09-18 08:43:38 (19 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cloud.teddypot.store \| URI: /.git/config \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-09-18 08:00:20 (19 hours ago)	[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 185.48.180.236 - - [18/Sep/2026:10:00:05 +0200] "GET /.git/config HTTP/1.1" 403 8017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-09-18 07:30:19 (20 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 FeG Deutschland	2026-09-18 06:48:26 (20 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇵🇱 Budyn	2026-09-18 04:34:05 (23 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: radius.budyn.top \| URI: /.git/config \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇮🇪 RoboSOC	2026-09-17 14:32:15 (1 day ago)	React Server Components Remote Code Execution Vulnerability, PTR: PTR record not found	Hacking
🇺🇸 kosada.com	2026-09-17 09:19:29 (1 day ago)	Repeated requests for suspicious nonexistent URLs, for example: /wp-json/gravitysmtp/v1/tests/mock-d ... show more Repeated requests for suspicious nonexistent URLs, for example: /wp-json/gravitysmtp/v1/tests/mock-data (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36") show less	Web App Attack
🇮🇳 evicky2002	2026-09-17 06:00:05 (1 day ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 antlac1	2026-09-17 04:56:41 (1 day ago)	crowdsecurity/http-wordpress_wpconfig	Brute-Force Web App Attack
🇩🇪 Tha_14	2026-09-17 03:01:43 (2 days ago)	Multiple suspicious activities were detected	Web App Attack
🇺🇸 TAY	2026-09-17 02:15:00 (2 days ago)	185.48.180.236 - - [17/Sep/2026:10:14:34 +0800] "GET /wp-config.php.bak HTTP/1.1" 301 6149 "-" "Mozi ... show more 185.48.180.236 - - [17/Sep/2026:10:14:34 +0800] "GET /wp-config.php.bak HTTP/1.1" 301 6149 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 185.48.180.236 - - [17/Sep/2026:10:14:38 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 55949 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 185.48.180.236 - - [17/Sep/2026:10:14:46 +0800] "GET /wp-config.php~ HTTP/1.1" 301 6146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 185.48.180.236 - - [17/Sep/2026:10:14:50 +0800] "GET /wp-config.php~ HTTP/1.1" 404 55949 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 185.48.180.236 - - [17/Sep/2026:10:14:54 +0800] "GET /wp-config.php.save HTTP/1.1" 301 6150 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, li ... show less	Brute-Force

Showing 1 to 15 of 102 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.241.214.127

🇦🇷 200.107.225.236

🇧🇷 187.49.186.236

🇺🇸 172.234.199.93

🇻🇳 171.244.48.137

🇩🇪 167.94.146.59

🇩🇪 138.226.237.100

🇫🇷 91.231.89.58

🇹🇷 81.215.2.43

🇬🇧 81.19.219.249

🇺🇸 50.6.152.224

🇺🇸 47.17.210.202

🇩🇪 46.232.251.191

🇦🇷 45.175.103.206

🇮🇳 36.255.5.178

🇷🇴 2.57.122.53

🇩🇪 213.209.159.84

🇺🇸 209.141.47.217

🇧🇷 204.199.57.196

🇦🇷 186.148.224.183