JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.180.48.104

194.180.48.104 was found in our database!

This IP was reported 173 times. Confidence of Abuse is 0%: ?

ISP	Neterra Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS201814
Domain Name	neterra.net
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.180.48.104

Whois 194.180.48.104

IP Abuse Reports for 194.180.48.104:

This IP address has been reported a total of 173 times from 105 distinct sources. 194.180.48.104 was first reported on October 5th 2023, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 webbfabriken	2023-11-11 02:37:54 (2 years ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbf ... show more spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabiken Security API - WFSecAPI show less	Web Spam
🇸🇪 webbfabriken	2023-11-09 11:33:44 (2 years ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbf ... show more spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabiken Security API - WFSecAPI show less	Web Spam
Anonymous	2023-10-30 12:15:09 (2 years ago)	TCP/80 probe	Port Scan
Anonymous	2023-10-30 11:49:34 (2 years ago)	CMS/WebApp Exploit attempt	Web App Attack
Anonymous	2023-10-29 14:43:21 (2 years ago)	[14:43:21] 4*: Exploit attempt against non-existent file - /phpinfo.php	Hacking Web App Attack
🇳🇱 Bouncer	2023-10-29 12:11:41 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 194.180.48.104 (NL/The Netherlands/-): 5 in the ... show more (mod_security) mod_security (id:210492) triggered by 194.180.48.104 (NL/The Netherlands/-): 5 in the last 3600 secs show less	Brute-Force
🇺🇸 mawan	2023-10-29 10:20:05 (2 years ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
Anonymous	2023-10-29 05:04:12 (2 years ago)	Bot / seems abusive / Apache connections: 13	DDoS Attack Web Spam Bad Web Bot Web App Attack
🇵🇱 dzpk	2023-10-29 01:10:10 (2 years ago)	[29/Oct/2023:02:10:09 +0100] 169854180950.866857 194.180.48.104 63655 HOST 80 [29/Oct/2023:02:10:09 ... show more [29/Oct/2023:02:10:09 +0100] 169854180950.866857 194.180.48.104 63655 HOST 80 [29/Oct/2023:02:10:09 +0100] 169854180958.861667 194.180.48.104 50937 HOST 80 [29/Oct/2023:02:10:09 +0100] 169854180994.857441 194.180.48.104 50209 HOST 443 show less	Web App Attack
Anonymous	2023-10-28 22:58:07 (2 years ago)	Invalid POST request	Hacking
🇩🇪 Linux-Tech	2023-10-28 22:21:07 (2 years ago)	194.180.48.104 - - [29/Oct/2023:00:21:05 +0200] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux ... show more 194.180.48.104 - - [29/Oct/2023:00:21:05 +0200] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 194.180.48.104 - - [29/Oct/2023:00:21:06 +0200] "GET /.env HTTP/1.1" 400 154 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" show less	Port Scan Bad Web Bot Web App Attack
🇩🇪 niceshops.com	2023-10-28 22:16:45 (2 years ago)	Web Attack ([29/Oct/2023:00:16:44.760] GET /.env)	Web App Attack
🇩🇪 Gwyneth Llewelyn	2023-10-28 22:14:36 (2 years ago)	2023/10/28 23:14:34 [error] 1125025#1125025: 226970 access forbidden by rule, client: 194.180.48.10 ... show more 2023/10/28 23:14:34 [error] 1125025#1125025: 226970 access forbidden by rule, client: 194.180.48.104, server: autonomy.gwynethllewelyn.net, request: "GET /.env HTTP/1.1", host: "176.9.54.246" 194.180.48.104 - - [28/Oct/2023:23:14:34 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 194.180.48.104 - - [28/Oct/2023:23:14:34 +0100] "GET /.env HTTP/1.1" 403 1178 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" ... show less	Web App Attack
🇲🇩 stvnrdg.me	2023-10-28 21:41:46 (2 years ago)	194.180.48.104 - - [28/Oct/2023:21:41:45 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin ... show more 194.180.48.104 - - [28/Oct/2023:21:41:45 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 491 "-" "python-requests/2.31.0" ... show less	Hacking
🇫🇷 uhlhosting	2023-10-28 21:00:43 (2 years ago)	mightylions.cz 194.180.48.104 - - [28/Oct/2023:23:00:43.032908 +0200] "GET /.env.prod HTTP/1.1" 403 ... show more mightylions.cz 194.180.48.104 - - [28/Oct/2023:23:00:43.032908 +0200] "GET /.env.prod HTTP/1.1" 403 199 "-" "-" ZT12e4ccbwzTFlUHpEG2egAAAkg "-" /apache/20231028/20231028-2300/20231028-230043-ZT12e4ccbwzTFlUHpEG2egAAAkg 0 1190 md5:4d7a70907756662b2053520f3463c4f2 mightylions.cz 194.180.48.104 - - [28/Oct/2023:23:00:43.066064 +0200] "POST /.env.prod HTTP/1.1" 403 199 "-" "-" ZT12e2x67FqIrPphSIN8WAAAAgc "-" /apache/20231028/20231028-2300/20231028-230043-ZT12e2x67FqIrPphSIN8WAAAAgc 0 1256 md5:7634d99df52cc64c015bf09008f60148 mightylions.cz 194.180.48.104 - - [28/Oct/2023:23:00:43.102752 +0200] "GET /.env.old HTTP/1.1" 403 199 "-" "-" ZT12e8ftcTrv--Iz5UlLYgAAAI0 "-" /apache/20231028/20231028-2300/20231028-230043-ZT12e8ftcTrv--Iz5UlLYgAAAI0 0 1188 md5:7a3408aa66b22f72908a4e37cf11ebfc mightylions.cz 194.180.48.104 - - [28/Oct/2023:23:00:43.147843 +0200] "POST /.env.old HTTP/1.1" 403 199 "-" "-" ZT12e464bvGnBsAV2B24cgAAAUI "-" /apache/20231028/20231028-2300/20231028-230043-ZT12e464bvGnBsAV2 ... show less	DDoS Attack Brute-Force

Showing 1 to 15 of 173 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 167.148.201.102

🇺🇸 142.147.190.146

🇩🇪 69.5.169.66

🇷🇴 193.46.255.86

192.168.50.85

🇸🇬 188.166.220.208

🇺🇸 148.153.56.170

🇲🇹 141.8.46.71

🇮🇳 103.149.197.34

🇧🇩 103.107.38.31

🇦🇪 91.74.79.119

🇰🇷 211.37.174.180

🇧🇪 198.235.24.162

🇷🇺 194.190.153.226

🇸🇪 193.105.134.235

🇺🇸 185.226.196.14

🇻🇳 171.231.199.155

🇫🇮 147.185.133.214

🇻🇳 103.9.204.51

🇺🇸 50.116.44.20