JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.180.48.188

194.180.48.188 was found in our database!

This IP was reported 111 times. Confidence of Abuse is 0%: ?

ISP	Neterra Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS201814
Domain Name	neterra.net
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.180.48.188

Whois 194.180.48.188

IP Abuse Reports for 194.180.48.188:

This IP address has been reported a total of 111 times from 63 distinct sources. 194.180.48.188 was first reported on July 26th 2025, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-09-06 20:08:39 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-06 00:08:37 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-05 20:08:37 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇮 YF	2025-09-04 18:30:05 (1 year ago)	Exploitation Attempt	Brute-Force Web App Attack
Anonymous	2025-09-04 18:02:43 (1 year ago)	194.180.48.188 detected on srv01	Brute-Force
🇩🇪 David Ferneding	2025-09-04 17:35:56 (1 year ago)	This IP was blocked by CrowdSec, triggering crowdsecurity/http-cve-probing	Hacking Web App Attack
🇩🇪 barbarella	2025-09-04 17:22:10 (1 year ago)	Multiple (10) times attack on https port 443: unauthorized access to cgi-bin scripts (GET /cgi-bin/u ... show more Multiple (10) times attack on https port 443: unauthorized access to cgi-bin scripts (GET /cgi-bin/userLogin) 17:22:10 hacking attempt (GET /auth.html) 17:22:10 Hacking attempt Cisco Bug: CSCth63101 vulnerable to HTTP response splitting (GET /+CSCOE+/logon.html) 17:22:10 unauthorized access to cgi-bin scripts (GET /cgi-bin/userLogin) 17:22:10 CVE-2022-0018 GlobalProtect App: Information Exposure Vulnerability (GET /global-protect/login.esp) 17:22:10 hacking attempt (GET /auth.html) 17:22:10 Command Injection of Pulse Secure SSL VPN - CVE-2019-11539 (GET /dana-na/auth/url_default/welcome.cgi) 17:22:10 Hacking attempt Cisco Bug: CSCth63101 vulnerable to HTTP response splitting (GET /+CSCOE+/logon.html) 17:22:10 CVE-2022-0018 GlobalProtect App: Information Exposure Vulnerability (GET /global-protect/login.esp) show less	Hacking Web App Attack
🇫🇮 23p02732	2025-09-04 17:11:55 (1 year ago)	Mailserver and mailaccount attacks	Brute-Force Bad Web Bot Exploited Host Web App Attack
🇩🇪 bluematrix	2025-09-04 17:11:15 (1 year ago)	crowdsecurity/http-cve-probing - Ip 194.180.48.188 performed 'crowdsecurity/http-cve-probing' (1 eve ... show more crowdsecurity/http-cve-probing - Ip 194.180.48.188 performed 'crowdsecurity/http-cve-probing' (1 events over 0s) at 2025-09-04 17:11:15.608888121 +0000 UTC show less	Port Scan Hacking Brute-Force Web App Attack
🇩🇪 ghostwarriors	2025-09-04 16:50:05 (1 year ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 tg_de	2025-09-04 16:26:04 (1 year ago)	14 attempts since 31.08.2025 09:24:05 UTC - last search for: /dana-na/auth/url_default/welcome.cgi	Web App Attack
🇩🇪 rico-j.de	2025-09-04 16:23:04 (1 year ago)	2025/09/04 18:23:03 [error] 572318#572318: 86788 open() "/var/www/rico-j.de/cgi-bin/userLogin" fail ... show more 2025/09/04 18:23:03 [error] 572318#572318: 86788 open() "/var/www/rico-j.de/cgi-bin/userLogin" failed (2: No such file or directory), client: 194.180.48.188, server: rico-j.de, request: "GET /cgi-bin/userLogin HTTP/1.1", host: "5.45.102.214" 2025/09/04 18:23:03 [error] 572318#572318: *86789 open() "/var/www/rico-j.de/cgi-bin/userLogin" failed (2: No such file or directory), client: 194.180.48.188, server: rico-j.de, request: "GET /cgi-bin/userLogin HTTP/1.1", host: "5.45.102.214:443" ... show less	Bad Web Bot
🇩🇪 vmd56152.contaboserver.net	2025-09-04 15:56:04 (1 year ago)	[Thu Sep 04 17:56:02.684101 2025] [cgid:error] [pid 1664364:tid 140299746051840] [client 194.180.48. ... show more [Thu Sep 04 17:56:02.684101 2025] [cgid:error] [pid 1664364:tid 140299746051840] [client 194.180.48.188:24436] AH01264: script not found or unable to stat: /var/www/cgi-bin/userLogin [Thu Sep 04 17:56:02.691367 2025] [cgid:error] [pid 1664362:tid 140299393296128] [client 194.180.48.188:24644] AH01264: script not found or unable to stat: /var/www/cgi-bin/userLogin ... show less	Bad Web Bot
Anonymous	2025-09-04 15:54:34 (1 year ago)	Bad Web Bot	Hacking Bad Web Bot Web App Attack
🇩🇪 london2038.com	2025-09-04 15:45:08 (1 year ago)	Probing for exploits 194.180.48.188 - - [04/Sep/2025:17:45:04 +0200] "GET /global-protect/login.esp ... show more Probing for exploits 194.180.48.188 - - [04/Sep/2025:17:45:04 +0200] "GET /global-protect/login.esp HTTP/1.1" 422 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15" 194.180.48.188 - - [04/Sep/2025:17:45:04 +0200] "GET /global-protect/login.esp HTTP/1.1" 422 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15" show less	Hacking Web App Attack

Showing 1 to 15 of 111 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.241

🇺🇸 172.56.199.107

🇹🇼 165.154.14.170

🇹🇼 128.1.32.150

🇫🇷 90.103.16.33

🇮🇹 82.62.241.42

🇷🇴 2.57.121.112

🇳🇱 185.82.194.77

🇧🇷 168.227.223.199

🇨🇳 139.210.195.236

🇺🇸 137.184.183.252

🇺🇸 99.190.110.11

🇨🇮 41.191.71.154

🇺🇸 18.206.111.200

🇰🇷 125.130.102.172

🇫🇷 85.217.140.27

🇺🇸 54.85.188.250

🇪🇸 46.6.126.162

🇬🇧 35.203.211.151

🇺🇸 2601:249:4380:2d25:65b9:5460:f7a3:1e97