AbuseIPDB » 194.180.48.187

194.180.48.187 was found in our database!

This IP was reported 75 times. Confidence of Abuse is 66%: ?

66%

ISP	Neterra Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS201814
Domain Name	neterra.net
Country	Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 194.180.48.187

Whois 194.180.48.187

IP Abuse Reports for 194.180.48.187:

This IP address has been reported a total of 75 times from 38 distinct sources. 194.180.48.187 was first reported on May 20th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
anon333	2025-06-24 16:33:06 (1 week ago)	Login hacks found during syslog review at 2025-06-24T16:33+00:00	Brute-Force SSH
webnestify	2025-06-15 10:19:54 (3 weeks ago)	[Webnestify Honeypot - UK] Unauthorized connection attempt on port 3389.	Port Scan Hacking Brute-Force
HoneyPotEu-AT	2025-06-15 08:54:53 (3 weeks ago)	1749977692 - 06/15/2025 10:54:52 Host: 194.180.48.187/194.180.48.187 Port: 3389 TCP Blocked .. ... show more1749977692 - 06/15/2025 10:54:52 Host: 194.180.48.187/194.180.48.187 Port: 3389 TCP Blocked ... show less	Port Scan
sefinek.net	2025-06-15 04:21:29 (3 weeks ago)	Honeypot hit: Unauthorized traffic (19 bytes of payload); 33943 [1], 3620 [1], 3737 [1], 33953 [1], ... show moreHoneypot hit: Unauthorized traffic (19 bytes of payload); 33943 [1], 3620 [1], 3737 [1], 33953 [1], 3673 [1] TCP show less	Port Scan
drewf.ink	2025-06-15 04:11:34 (3 weeks ago)	[04:11] Port scanning. Port(s) scanned: TCP/3784	Port Scan
nyuuzyou	2025-06-15 01:32:14 (3 weeks ago)	{"action": "connection", "dest_ip": "0.0.0.0", "dest_port": "3389", "server": "rdp_server", "src_ip" ... show more{"action": "connection", "dest_ip": "0.0.0.0", "dest_port": "3389", "server": "rdp_server", "src_ip": "194.180.48.187", "src_port": "39216", "timestamp": "2025-06-15T01:32:01.057186"} show less	Port Scan Brute-Force
sefinek.net	2025-06-14 20:09:29 (3 weeks ago)	Honeypot hit: Unauthorized traffic (19 bytes of payload); 3582 [1], 3397 [1] TCP	Port Scan
Birdo	2025-06-14 20:03:33 (3 weeks ago)	[Birdo SSH Honeypot] SSH login attempt	Port Scan Hacking Brute-Force Exploited Host SSH
geeek	2025-06-14 19:02:28 (3 weeks ago)	Port scanning: 3389 TCP Blocked	Port Scan
drewf.ink	2025-06-14 18:44:42 (3 weeks ago)	[18:44] Port scanning. Port(s) scanned: TCP/3386	Port Scan
drewf.ink	2025-06-14 13:48:41 (3 weeks ago)	[13:48] Port scanning. Port(s) scanned: TCP/3389	Port Scan
webbfabriken	2025-06-14 10:59:01 (3 weeks ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by ... show morespam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabriken Security API - WFSecAPI show less	Web Spam
azminawwar	2025-06-14 06:37:33 (3 weeks ago)	[Honey-SG1] 194.180.48.187 triggered Icarus honeypot on port 3389.	Port Scan Hacking
COMPLEX	2025-06-13 22:30:42 (3 weeks ago)	Honeypot [1]: Unauthorized traffic (19 bytes of payload); 33910 [1] TCP	Port Scan
lenz	2025-06-13 22:19:46 (3 weeks ago)	[2025-06-14T00:19:45.637+0200] [INFO ] Socket 14: connection accepted from [::ffff:194.180.48.187]:2 ... show more[2025-06-14T00:19:45.637+0200] [INFO ] Socket 14: connection accepted from [::ffff:194.180.48.187]:22430 [2025-06-14T00:19:45.645+0200] [INFO ] Security protocol: configured [SSL], requested [SSL|HYBRID|RDP], selected [SSL] [2025-06-14T00:19:45.761+0200] [ERROR] SSL_accept: I/O error ... show less	Hacking Brute-Force

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩