JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.110.115.140

194.110.115.140 was found in our database!

This IP was reported 63 times. Confidence of Abuse is 30%: ?

30%

ISP	M247 LTD Brussels Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247.com
Country	🇧🇪 Belgium
City	Zaventem, Flanders

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.110.115.140

Whois 194.110.115.140

IP Abuse Reports for 194.110.115.140:

This IP address has been reported a total of 63 times from 32 distinct sources. 194.110.115.140 was first reported on December 8th 2025, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Luis Fernando Camargo	2026-09-17 23:00:14 (15 hours ago)	Honeytrapped	Port Scan Brute-Force
🇺🇸 drewf.ink	2026-09-17 22:24:42 (16 hours ago)	[22:24] Attempted VNC authentication via legacy RFB 003.003 - challenge=b52d89ed4a10c753e26d7e7cafcf ... show more [22:24] Attempted VNC authentication via legacy RFB 003.003 - challenge=b52d89ed4a10c753e26d7e7cafcf79e5 response=97d0392d892b856743c26e6a1af64eae show less	Hacking Brute-Force
🇫🇷 dynamix	2026-08-21 23:26:16 (3 weeks ago)	Multiple WAF Violations	Web App Attack
🇪🇸 robotstxt	2026-08-17 12:40:31 (1 month ago)	194.110.115.140 - - [17/Aug/2026:12:40:24 +0000] "HEAD /mails.zip HTTP/1.1" 404 0 "-" "Mozilla/5.0 ( ... show more 194.110.115.140 - - [17/Aug/2026:12:40:24 +0000] "HEAD /mails.zip HTTP/1.1" 404 0 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "-" edge="194.110.115.140" 194.110.115.140 - - [17/Aug/2026:12:40:25 +0000] "HEAD /mails.bz HTTP/1.1" 404 0 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "-" edge="194.110.115.140" 194.110.115.140 - - [17/Aug/2026:12:40:25 +0000] "HEAD /mails.gz HTTP/1.1" 404 0 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "-" edge="194.110.115.140" 194.110.115.140 - - [17/Aug/2026:12:40:25 +0000] "HEAD /mails.sql.gz HTTP/1.1" 404 0 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "-" edge="194.110.115.140" 194.110.115.140 - - [17/Aug/2026:12:40:25 +0000] "HEAD /mails.rar HTTP/1.1" 404 0 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "-" edge="194.110.115.140" ... show less	Bad Web Bot
🇫🇷 conseilgouz	2026-08-17 06:43:31 (1 month ago)	joe-Direct access to plugin not allowed.	Hacking
🇹🇷 neron	2026-08-15 23:06:48 (1 month ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-08-10 18:29:21 (1 month ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇫🇷 masterguru	2026-05-13 15:42:13 (4 months ago)	(wordpress) Apache: Failed WordPress login from 194.110.115.140 (BE/Belgium/-): 10 in the last 3600 ... show more (wordpress) Apache: Failed WordPress login from 194.110.115.140 (BE/Belgium/-): 10 in the last 3600 secs (0-196) show less	Hacking
🇩🇪 todix	2026-05-13 10:21:57 (4 months ago)	Wordpress brute force or spam attempt from 194.110.115.140	Brute-Force
🇩🇪 wiredalter	2026-05-13 08:39:18 (4 months ago)	Blocked by UFW on dVPS [60000/tcp] Source Port: 50346 TTL: 53 Packet Length: 60 TOS: 0x00 Analyzed ... show more Blocked by UFW on dVPS [60000/tcp] Source Port: 50346 TTL: 53 Packet Length: 60 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Port Scan Brute-Force
🇮🇹 Inartis	2026-05-13 06:16:21 (4 months ago)	[Wed May 13 08:16:19.800318 2026] [proxy_fcgi:error] [pid 481829:tid 137024203904704] [client 194.11 ... show more [Wed May 13 08:16:19.800318 2026] [proxy_fcgi:error] [pid 481829:tid 137024203904704] [client 194.110.115.140:45662] AH01071: Got error 'Primary script unknown', referer: https://termedivenezia.it/wp-login.php [Wed May 13 08:16:20.863207 2026] [proxy_fcgi:error] [pid 481830:tid 137024757561024] [client 194.110.115.140:45668] AH01071: Got error 'Primary script unknown', referer: https://termedivenezia.it/wp-login.php ... show less	Brute-Force Bad Web Bot Web App Attack
🇲🇳 Public CSIRT/CC of Mongolia	2026-05-13 04:27:51 (4 months ago)	Honeypot hit: Unauthorized traffic (517 bytes of payload); 60000 [11] TCP	Port Scan
🇺🇸 rsiddall	2026-05-12 23:35:38 (4 months ago)	194.110.115.140 - - [12/May/2026:19:35:32 -0400] "POST /wp-login.php HTTP/1.1" 404 - "https://evanga ... show more 194.110.115.140 - - [12/May/2026:19:35:32 -0400] "POST /wp-login.php HTTP/1.1" 404 - "https://evangambardella.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:120.0) Gecko/20100101 Firefox/120.0" 194.110.115.140 - - [12/May/2026:19:35:33 -0400] "POST /wp-login.php HTTP/1.1" 404 - "https://evangambardella.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 194.110.115.140 - - [12/May/2026:19:35:34 -0400] "POST /wp-login.php HTTP/1.1" 404 - "https://evangambardella.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" 194.110.115.140 - - [12/May/2026:19:35:35 -0400] "POST /wp-login.php HTTP/1.1" 404 - "https://evangambardella.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:118.0) Gecko/20100101 Firefox/118.0" 194.110.115.140 - - [12/May/2026:19:35:36 -0400] "POST /wp-login.php HTTP/1.1" 404 - "https://evangambardella ... show less	Brute-Force
Anonymous	2026-05-12 10:51:24 (4 months ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇩🇪 wiredalter	2026-05-12 05:46:24 (4 months ago)	Blocked by UFW on dVPS [60000/tcp] Source Port: 41876 TTL: 53 Packet Length: 60 TOS: 0x00 Analyzed ... show more Blocked by UFW on dVPS [60000/tcp] Source Port: 41876 TTL: 53 Packet Length: 60 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Port Scan Brute-Force

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 223.185.46.100

🇺🇸 20.168.10.223

🇫🇷 2a02:c207:2355:452::1

🇺🇸 2400:cb00:507:1000:db30:c64d:f809:2986

🇺🇸 2400:cb00:507:1000:3b16:fcf:953a:3b40

🇳🇱 213.134.252.8

🇧🇾 178.126.205.227

🇫🇷 172.71.131.170

🇮🇳 156.67.111.76

🇵🇱 109.205.211.27

🇫🇷 54.38.109.115

🇨🇳 47.101.173.210

🇰🇿 37.99.112.18

🇨🇦 208.96.233.67

🇦🇷 201.182.18.49

🇺🇸 192.3.150.128

🇰🇷 121.132.24.125

🇫🇷 109.199.106.34

🇰🇪 102.204.127.19

🇺🇸 76.17.117.212