JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.94.190.201

185.94.190.201 was found in our database!

This IP was reported 97 times. Confidence of Abuse is 0%: ?

ISP	M247 LTD Budapest Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247.com
Country	🇭🇺 Hungary
City	Budapest, Budapest

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.94.190.201

Whois 185.94.190.201

IP Abuse Reports for 185.94.190.201:

This IP address has been reported a total of 97 times from 57 distinct sources. 185.94.190.201 was first reported on April 5th 2022, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-18 16:12:40 (2 months ago)	2026-04-18 16:12:40 warning[3923504]: host [185.94.190.201]: unauthorized access attempted ... show more 2026-04-18 16:12:40 warning[3923504]: host [185.94.190.201]: unauthorized access attempted: / show less	Port Scan Brute-Force
🇪🇸 liewebs	2026-04-12 22:40:21 (2 months ago)	SYN Flood attack detected - cloud02.liewebs.es	Port Scan DDoS Attack
🇫🇷 masterguru	2026-04-12 17:44:16 (2 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 185.94.190.201 (HU/Hungary/-): 2 in t ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 185.94.190.201 (HU/Hungary/-): 2 in the last 3600 secs (0-201) show less	Hacking
Anonymous	2026-04-10 17:34:52 (2 months ago)	Drop from IP address 185.94.190.201 to tcp-port 443	Port Scan
🇫🇷 masterguru	2026-04-10 03:16:27 (2 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 185.94.190.201 (HU/Hungary/-): 2 in t ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 185.94.190.201 (HU/Hungary/-): 2 in the last 3600 secs (0-193) show less	Hacking
🇺🇸 TPI-Abuse	2026-04-06 18:22:42 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 185.94.190.201 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 185.94.190.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 14:22:00.603353 2026] [security2:error] [pid 24727:tid 24749] [client 185.94.190.201:44699] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|digital4z.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "digital4z.com"] [uri "/wp-content/plugins/jetpack/modules/after-the-deadline/WS_FTP.LOG"] [unique_id "adP5yGUFP4-cz9dN5w53OgAAAVI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-04-06 01:44:15 (2 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 185.94.190.201 (HU/Hungary/-): 2 in t ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 185.94.190.201 (HU/Hungary/-): 2 in the last 3600 secs (0-201) show less	Hacking
🇸🇬 securejdprop	2026-04-05 07:20:51 (2 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-04-01 23:06:49 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 185.94.190.201 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 185.94.190.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 19:06:41.468734 2026] [security2:error] [pid 3917:tid 3917] [client 185.94.190.201:54601] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.yingkee1959.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.yingkee1959.com"] [uri "/index.php.bak"] [unique_id "ac2lAffAL3_4MAu_Fz65JgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-01 09:05:59 (2 months ago)	Blocked: Reason='Suspicious traffic score=80 (review-based detection)'; Requests=46	Hacking
🇮🇹 Progetto1	2026-03-31 23:01:48 (2 months ago)	Mail - Multiple failed login attempts	Brute-Force Exploited Host
🇨🇿 Honzas	2026-03-29 14:50:29 (2 months ago)	Brute Force SMTP AUTH Attack	Brute-Force
🇳🇱 i-turnradio.nl	2026-03-28 21:54:32 (2 months ago)	2026-03-28 22:54:31 (CET) ~ Blocked by abusescan risk assessment	Web App Attack
🇮🇹 VHosting	2026-03-27 08:03:44 (2 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇫🇷 masterguru	2026-03-17 19:12:22 (3 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 185.94.190.201 (HU/Hungary/-): 1 in t ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 185.94.190.201 (HU/Hungary/-): 1 in the last 3600 secs (0-193) show less	Hacking

Showing 1 to 15 of 97 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.229

🇹🇼 198.235.24.51

🇹🇼 198.235.24.42

🇷🇺 185.42.24.225

🇺🇸 156.228.9.182

🇺🇸 138.68.52.196

🇨🇳 118.81.198.242

🇱🇹 45.227.254.170

🇧🇪 198.235.24.178

🇧🇪 198.235.24.167

🇨🇳 175.30.48.116

🇬🇧 165.154.129.130

🇻🇳 103.5.210.47

🇵🇰 58.27.230.131

🇧🇪 34.38.59.174

🇺🇸 20.80.105.157

🇨🇳 220.197.14.60

🇳🇱 185.189.182.234

🇹🇷 185.139.5.123

🇨🇳 183.230.131.92