JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

80.94.95.232

Neutral Activity

Abuse Confidence Score

0% Low Risk

387 reports

129 reporters · latest 8 months ago

ISP: UNMANAGED LTD
Usage Type: Data Center/Web Hosting/Transit
ASN: AS204428
Domain Name: unmanaged.uk
Country: 🇷🇴 Romania
City: Timisoara, Timis County

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

80.94.95.232 has been reported 387 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

387 from 129 distinct reporters

First reported

August 20th 2023

Most recent report

8 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ut-addicted.com	2026-03-08 03:26:17 UTC · (8 months ago)	\[Sun Mar 08 04:26:16.196758 2026\] \[:error\] \[pid 10326:tid 140546129512192\] \[client 80.94.95.232:39546\] \[client 80.94.95.232\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local ... show more \[Sun Mar 08 04:26:16.196758 2026\] \[:error\] \[pid 10326:tid 140546129512192\] \[client 80.94.95.232:39546\] \[client 80.94.95.232\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 18\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/"\] \[unique_id "aazsWHt7XervfFJQ@ROa1QAAAMM"\] show less	Brute-Force Web App Attack
🇩🇪 ut-addicted.com	2026-03-04 17:08:55 UTC · (8 months ago)	\[Wed Mar 04 18:08:53.585978 2026\] \[:error\] \[pid 32287:tid 140546087552768\] \[client 80.94.95.232:44208\] \[client 80.94.95.232\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local ... show more \[Wed Mar 04 18:08:53.585978 2026\] \[:error\] \[pid 32287:tid 140546087552768\] \[client 80.94.95.232:44208\] \[client 80.94.95.232\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 18\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/"\] \[unique_id "aahnJaf5qz41m5HK-yNLxQAAAMc"\] show less	Brute-Force Web App Attack
🇸🇪 Per-Erik Runebert	2026-03-02 09:39:25 UTC · (8 months ago)	Excessive unauthorized requests	Hacking
🇫🇷 carpes0708	2026-03-02 02:46:52 UTC · (8 months ago)		Port Scan Web App Attack
🇧🇾 StatsMe	2026-03-01 22:22:04 UTC · (8 months ago)	2026-03-01T13:09:29.722820+0300 ET DROP Spamhaus DROP Listed Traffic Inbound group 8	Spoofing Hacking Brute-Force Port Scan
🇩🇪 ut-addicted.com	2026-03-01 18:30:36 UTC · (8 months ago)	\[Sun Mar 01 19:30:34.876916 2026\] \[:error\] \[pid 30735:tid 140545993144064\] \[client 80.94.95.232:59014\] \[client 80.94.95.232\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local ... show more \[Sun Mar 01 19:30:34.876916 2026\] \[:error\] \[pid 30735:tid 140545993144064\] \[client 80.94.95.232:59014\] \[client 80.94.95.232\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 18\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/"\] \[unique_id "aaSFynQhua0kQhEprMsuRwAAANA"\] show less	Brute-Force Web App Attack
🇧🇬 pa4080	2026-03-01 16:02:06 UTC · (8 months ago)	Detected by ModSecurity. Host header is an IP address, Request URI: /	Hacking Web App Attack
🇸🇰 KZP	2026-03-01 11:07:41 UTC · (8 months ago)	Automatic report from KZP firewall log.	Port Scan Hacking Brute-Force
🇫🇷 sbocquet	2026-03-01 10:37:17 UTC · (8 months ago)	Port 443 scanned from 80.94.95.232:56023.	Port Scan
Anonymous	2026-03-01 10:31:53 UTC · (8 months ago)	Drop from IP address 80.94.95.232 to tcp-port 443	Port Scan
🇦🇺 trentwiles.com	2026-03-01 10:28:06 UTC · (8 months ago)	Unauthorized connection attempt detected from IP address 80.94.95.232 to port 443 [SYD]	Port Scan
🇨🇦 Ashgrinder_00013	2026-03-01 10:27:27 UTC · (8 months ago)	inout; Ports: *; Direction: 1; Trigger: (Web_Vulnerability_Scan) LABEL: Web_Vulnerability_Scan \| DESC: ALERT:_Bot_scanning_for_web_vulnerabilities_on_Port_443 80.94.95.232 (BG/Bulgaria/-): 1 in the last 3600 secs; Logs:	Port Scan
🇬🇧 Andrew	2026-03-01 10:12:51 UTC · (8 months ago)	Blocked by UFW (TCP on port 443). Source port: 56023 TTL: 246 Packet length: 40 TOS: 0x00 This report (for 80.94.95.232) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan Web App Attack
🇫🇷 Tanados	2026-03-01 10:11:19 UTC · (8 months ago)	Blocked by UFW [443/tcp] Source port: 56023 TTL: 240 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 xmission.com	2026-03-01 10:03:48 UTC · (8 months ago)	Blocked by UFW (TCP on 443) Source port: 56023 TTL: 235 Packet length: 40 TOS: 0x08 This report (for 80.94.95.232) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan Web App Attack

Showing 1 to 15 of 387 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇿 197.219.228.242

🇬🇧 188.240.59.25

🇹🇷 176.236.79.238

🇺🇸 162.216.150.72

🇨🇦 85.217.149.54

🇳🇱 77.239.124.176

🇮🇳 59.145.126.18

🇨🇳 59.46.182.10

🇨🇳 59.37.13.66

🇰🇷 59.11.53.94

🇰🇷 59.5.166.137

🇨🇳 58.58.42.246

🇹🇭 58.8.48.178

🇸🇬 47.82.13.25

🇵🇱 45.138.12.22

🇺🇸 45.55.153.86

🇺🇸 20.163.13.19

🇯🇵 20.44.157.37

🇰🇷 4.230.10.211

🇬🇷 2a02:587:496e:3a00:b807:7e68:28b6:4f2c