194.180.48.165
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Neterra Ltd.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS201814
- Domain Name
- neterra.net
- Country
- 🇵🇱 Poland
- City
- Warsaw, Mazovia
Abuse Reports
Total reports
32 from
25 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
. It is possible that this IP is
no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇲🇽 edgarvazbur |
Port 4489
|
DDoS Attack | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/windows-bf-high.
|
Brute-Force | |
| 🇦🇹 CTK |
Customer Site (Grieskirchen FP)
|
Brute-Force | |
| 🇦🇹 CTK |
Customer Site (Grieskirchen FP)
|
Brute-Force | |
| 🇦🇹 CTK |
Customer Site (Grieskirchen FP)
|
Brute-Force | |
| Anonymous |
C2 Server - https://thedfirreport.com/2024/09/30/nitrogen-campaign-drops-sliver-and-ends-with-blackcat-ransomware/
|
Hacking | |
| 🇬🇷 gbetsis |
TCP Port Scanning
|
Port Scan Exploited Host | |
| 🇫🇷 LRNP |
_:80 194.180.48.165 - - [13/Sep/2023:10:55:18 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
...
|
Bad Web Bot Web App Attack | |
| 🇫🇷 someone |
194.180.48.165 - - [13/Sep/2023:12:54:39 +0200] "GET /.env HTTP/1.1" 404 2895 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
|
Web App Attack | |
| 🇺🇸 FireballDWF |
404 NOT FOUND
|
Web App Attack | |
| 🇹🇭 Sawasdee |
Unwanted checking 80 or 443 port
...
|
Bad Web Bot | |
| Anonymous |
TCP/80 probe
|
Port Scan | |
| 🇩🇪 _ArminS_ |
WEB-Scan 10446:80 detected 2023.09.12 02:59:49
blocked until 2023.10.31 19:02:36
|
Port Scan | |
| 🇮🇪 RoboSOC |
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
|
Port Scan | |
| 🇳🇱 IP Analyzer |
Unauthorized connection attempt from IP address 194.180.48.165 on Port 80(HTTP)
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown