JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.88.98.85

194.88.98.85 was found in our database!

This IP was reported 5,072 times. Confidence of Abuse is 100%: ?

100%

ISP	Infrawatch Limited
Usage Type	Fixed Line ISP
ASN	AS25369
Hostname(s)	194-88-98-85.infrawat.ch
Domain Name	infrawat.ch
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.88.98.85

Whois 194.88.98.85

IP Abuse Reports for 194.88.98.85:

This IP address has been reported a total of 5,072 times from 402 distinct sources. 194.88.98.85 was first reported on March 28th 2026, and the most recent report was 5 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 David Ferneding	2026-04-03 20:30:43 (2 months ago)	Blocked by UFW (TCP on 110) Source port: 11768 TTL: 248 Packet length: 40 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 110) Source port: 11768 TTL: 248 Packet length: 40 TOS: 0x00 This report (for 194.88.98.85) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-04-03 20:26:15 (2 months ago)	Unauthorized connection to SIP port 5060	Fraud VoIP Port Scan
🇦🇺 Block Rockin' Beats	2026-04-03 20:25:04 (2 months ago)	Attempted connection to TCP port 3389 (RDP)	Port Scan
🇫🇷 ISPLtd	2026-04-03 20:24:23 (2 months ago)	Apr 3 15:13:57 194.88.98.85 TCP SPT=36704 DPT=2086 SYN Apr 3 16:23:55 194.88.98.85 TCP SPT=26666 D ... show more Apr 3 15:13:57 194.88.98.85 TCP SPT=36704 DPT=2086 SYN Apr 3 16:23:55 194.88.98.85 TCP SPT=26666 DPT=1717 SYN Apr 3 17:24:23 194.88.98.85 TCP SPT=39973 DPT=10002 SYN ... show less	Port Scan
🇺🇸 xmission.com	2026-04-03 20:23:56 (2 months ago)	Blocked by UFW (TCP on 8015) Source port: 23923 TTL: 239 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8015) Source port: 23923 TTL: 239 Packet length: 40 TOS: 0x08 This report (for 194.88.98.85) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-04-03 20:17:35 (2 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇬🇧 Joe-Mark	2026-04-03 20:14:34 (2 months ago)	Found CINS badguys . proto=tcp . spt=38295 . dpt=110 . NFTABLES . (DCXLII)	Port Scan Hacking
🇹🇷 rtbh.com.tr	2026-04-03 20:12:21 (2 months ago)	list.rtbh.com.tr report: tcp/1194, tcp/23, tcp/3389, tcp/445	Brute-Force
🇩🇪 Mailguard-FRD	2026-04-03 20:11:45 (2 months ago)	1775247104 - 04/03/2026 22:11:44 Host: 194.88.98.85/194.88.98.85 Port: 139 TCP Blocked ...	Port Scan
Anonymous	2026-04-03 20:09:53 (2 months ago)	Cowrie SSH honeypot: cowrie.session.connect	Brute-Force SSH
🇩🇪 ValtonTahiri	2026-04-03 20:05:02 (2 months ago)	Honeypot hit: HTTP/1.1 request on 8081 GET / User-Agent: Mozilla/5.0 (compatible; Infrawatch/1.0; + ... show more Honeypot hit: HTTP/1.1 request on 8081 GET / User-Agent: Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/) Accept: / Accept-Encoding: gzip Full payload: GET / HTTP/1.1 Host: [SOME-IP]:8081 User-Agent: Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/) Accept: / Accept-Encoding: gzip Connection: close on 8081/TCP (1 attempt) show less	Hacking Bad Web Bot
🇩🇪 london2038.com	2026-04-03 20:04:25 (2 months ago)	Connection atttempts against closed TCP ports Apr 3 20:48:24 BLOCK SRC=194.88.98.85 LEN=40 TOS=0x00 ... show more Connection atttempts against closed TCP ports Apr 3 20:48:24 BLOCK SRC=194.88.98.85 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=0 PROTO=TCP SPT=2291 DPT=21 WINDOW=65535 RES=0x00 SYN Apr 3 21:44:25 BLOCK SRC=194.88.98.85 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=0 PROTO=TCP SPT=11767 DPT=5000 WINDOW=65535 RES=0x00 SYN Apr 3 22:04:24 BLOCK SRC=194.88.98.85 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=0 PROTO=TCP SPT=2543 DPT=6467 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇫🇷 Soncraft	2026-04-03 20:02:43 (2 months ago)	Blocked by UFW on Jellyfin [5060/tcp] Source port: 9251 TTL: 248 Packet length: 44 TOS: 0x08 This r ... show more Blocked by UFW on Jellyfin [5060/tcp] Source port: 9251 TTL: 248 Packet length: 44 TOS: 0x08 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇷 0xi	2026-04-03 20:00:46 (2 months ago)	Malicious scanning and attack activity detected (35 attempts). Targeted ports: 8020, 8080, 8443, 0. ... show more Malicious scanning and attack activity detected (35 attempts). Targeted ports: 8020, 8080, 8443, 0. Triggered sensors: P0f, Suricata, Honeytrap. Observed via distributed honeypot network. show less	Port Scan
🇺🇸 xmission.com	2026-04-03 19:58:55 (2 months ago)	Blocked by UFW (TCP on 14430) Source port: 52897 TTL: 239 Packet length: 40 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 14430) Source port: 52897 TTL: 239 Packet length: 40 TOS: 0x08 This report (for 194.88.98.85) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 4936 to 4950 of 5072 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.25.94.199

🇲🇽 186.96.145.241

🇳🇱 185.242.226.18

🇨🇳 120.240.95.27

🇨🇳 113.248.185.94

🇬🇧 87.236.176.129

🇸🇬 47.128.112.22

🇭🇰 43.99.73.86

🇮🇩 2402:8780:1052:161f:9d05:ad1b:657a:476a

🇭🇺 195.199.210.194

🇬🇧 193.163.125.136

🇯🇵 163.43.18.248

🇫🇷 163.5.241.42

🇺🇸 162.216.149.224

🇱🇹 141.98.11.83

🇧🇷 102.211.152.138

🇩🇪 64.226.83.235

🇺🇸 34.121.74.134

🇺🇸 20.42.108.100

🇺🇸 2602:80d:1008::5c