JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 80.94.92.7

80.94.92.7 was found in our database!

This IP was reported 404 times. Confidence of Abuse is 100%: ?

100%

ISP	TECHOFF SRV LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS47890
Domain Name	dmzhost.co
Country	🇷🇴 Romania
City	Timisoara, Timis County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 80.94.92.7

Whois 80.94.92.7

IP Abuse Reports for 80.94.92.7:

This IP address has been reported a total of 404 times from 148 distinct sources. 80.94.92.7 was first reported on December 16th 2022, and the most recent report was 27 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 securejdprop	2026-06-13 13:00:53 (27 minutes ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 11). Ip 80.94.92.7 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-06-13 13:00:51.629042089 +0000 UTC show less	Hacking Web App Attack
🇯🇵 HeliJP	2026-06-13 12:45:56 (42 minutes ago)	2026-06-13T12:04:46Z - Recognized attacks\bad behavior from IP address 80.94.92.7 on port 443\80 (5 ... show more 2026-06-13T12:04:46Z - Recognized attacks\bad behavior from IP address 80.94.92.7 on port 443\80 (5 daily hits): client denied by server configuration show less	Port Scan Hacking SQL Injection Brute-Force Web App Attack
🇫🇮 Ba-Yu	2026-06-13 11:54:55 (1 hour ago)	General hacking/exploits/scanning	Port Scan Exploited Host Web App Attack
🇺🇸 LotPhantom	2026-06-13 11:21:49 (2 hours ago)	80.94.92.7 - - [13/Jun/2026:11:20:48 +0000] "GET / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0 ... show more 80.94.92.7 - - [13/Jun/2026:11:20:48 +0000] "GET / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 Ar1s	2026-06-13 11:11:36 (2 hours ago)	[1:2520000] ET TOR Known Tor Exit Node Traffic ::: Port: 443/TCP	Exploited Host
🇳🇱 Webhoster	2026-06-13 11:02:43 (2 hours ago)	{"ClientAddr":"141.101.104.95:14291","ClientHost":"80.94.92.7","ClientPort":"14291","ClientUsername" ... show more {"ClientAddr":"141.101.104.95:14291","ClientHost":"80.94.92.7","ClientPort":"14291","ClientUsername":"-","DownstreamContentSize":0,"DownstreamStatus":403,"Duration":11459223,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":11459223,"RequestAddr":"foto.timvdberg.dev","RequestContentSize":0,"RequestCount":74422,"RequestHost":"foto.timvdberg.dev","RequestMethod":"GET","RequestPath":"/","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"foto@file","StartLocal":"2026-06-13T11:02:33.743514594Z","StartUTC":"2026-06-13T11:02:33.743514594Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","request_Cf-Connecting-Ip":"80.94.92.7","request_X-Forwarded-For":"80.94.92.7","request_X-Real-Ip":"141.101.104.95","time":"2026-06-13T11:02:33Z"} {"ClientAddr":"104.23.162.162:9584","ClientHost":"80.94.92.7","ClientPort":"9584","ClientUsername":"-","DownstreamContentSize":0,"Downstre ... show less	Port Scan Hacking Bad Web Bot Web App Attack
🇫🇷 GoodOldTOS	2026-06-13 10:33:27 (2 hours ago)	Highly suspect IP	Hacking Web App Attack
🇩🇪 KI-Netzwerk	2026-06-13 10:00:38 (3 hours ago)	Bad Calls: Webpage scraping, Web App Attack	Bad Web Bot Exploited Host Web App Attack
🇺🇸 Charlesiv	2026-06-13 10:00:11 (3 hours ago)	Triggered Cloudflare WAF (firewallCustom) from RO. Action taken: BLOCK ASN: 47890 (UNMANAGED LTD) Pr ... show more Triggered Cloudflare WAF (firewallCustom) from RO. Action taken: BLOCK ASN: 47890 (UNMANAGED LTD) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-06-13T09:51:51Z Ray ID: a0b032f8cb68b855 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Bad Web Bot
🇵🇱 sefinek.net	2026-06-13 09:52:13 (3 hours ago)	Triggered Cloudflare WAF (firewallCustom) from RO. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from RO. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-06-13 09:18:31 (4 hours ago)	FortiWeb WAF: 4 attacks detected. Threat Score: 245200. Types: Client Management(2), Block IP List(2 ... show more FortiWeb WAF: 4 attacks detected. Threat Score: 245200. Types: Client Management(2), Block IP List(2). Origin: Romania. show less	Web App Attack
🇦🇩 bakunin1848	2026-06-13 09:09:05 (4 hours ago)	Firewall IPS Detection on 13-06-2026 at 11:09:04	Port Scan Exploited Host
🇨🇿 kronos	2026-06-13 07:20:15 (6 hours ago)	IDS: ET DROP Spamhaus DROP Listed Traffic Inbound group 11 \| SID:2400010	Hacking
🇪🇸 Gem	2026-06-13 05:59:38 (7 hours ago)	Unauthorized web scan.	Web App Attack
🇪🇸 librebit	2026-06-13 03:53:16 (9 hours ago)	Brute force	Brute-Force

Showing 1 to 15 of 404 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.33.165.107

🇯🇵 172.253.236.16

🇵🇰 154.91.164.218

🇺🇸 149.36.8.230

🇺🇸 66.132.186.181

🇫🇷 62.210.246.122

🇺🇸 47.251.111.231

🇩🇪 45.135.141.20

🇬🇧 45.82.76.119

🇨🇳 220.180.156.203

🇷🇺 171.22.135.229

🇰🇷 8.230.21.207

🇮🇳 4.224.59.75

🇺🇸 195.184.76.29

🇵🇰 182.189.96.204

🇭🇰 152.32.214.226

🇸🇬 104.248.158.72

🇩🇪 34.159.3.56

🇧🇪 207.175.104.192

🇸🇾 185.225.41.192