JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.231.187.189

94.231.187.189 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 25%: ?

25%

ISP	Galichina Telekommunication LTD
Usage Type	Fixed Line ISP
ASN	AS49183
Domain Name	ko.te.ua
Country	🇺🇦 Ukraine
City	Berezhany, Ternopil

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.231.187.189

Whois 94.231.187.189

IP Abuse Reports for 94.231.187.189:

This IP address has been reported a total of 7 times from 5 distinct sources. 94.231.187.189 was first reported on November 17th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-07-30 19:35:52 (1 day ago)	tcp/23 (4 or more attempts)	Port Scan
🇺🇸 COMPLEX	2026-07-30 19:09:27 (2 days ago)	Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · at ... show more Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · attempts=1 · SSH banner invalid / banner exchange invalid format show less	Brute-Force SSH
Anonymous	2026-07-30 15:37:09 (2 days ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
Anonymous	2026-05-22 19:31:44 (2 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇮🇩 hermawan	2026-04-01 09:54:05 (4 months ago)	[Wed Apr 01 16:54:03.477233 2026] [security2:error] [pid 979402:tid 139772306564800] [client 94.231. ... show more [Wed Apr 01 16:54:03.477233 2026] [security2:error] [pid 979402:tid 139772306564800] [client 94.231.187.189:60342] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.24.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "620"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat"] [unique_id "aczrO5z5k-gO6Hl4uRYg0AAB0RU"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[979477] [kqROEKOh3m0] [aczrO5z5k-gO6Hl4uRYg0AAB0RU] keep_alive=[1] [2026-04-01 16 ... show less	Web App Attack Hacking
🇮🇩 hermawan	2026-03-30 12:41:13 (4 months ago)	03/30/2026-19:41:13.364152 [Drop] [] [1:9200020:0] match JA3 string Microsoft oai-searchbot opena ... show more 03/30/2026-19:41:13.364152 [Drop] [] [1:9200020:0] match JA3 string Microsoft oai-searchbot openai.com 74-7-241-181 [**] [Classification: (null)] [Priority: 3] {TCP} 94.231.187.189:58840 -> 103.166.156.58:443 ... show less	Email Spam Hacking
Anonymous	2025-11-17 13:10:20 (8 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 142.111.143.15

🇹🇭 49.49.224.108

🇺🇸 20.127.187.30

🇺🇸 207.90.244.12

🇧🇪 198.235.24.218

🇧🇷 187.51.84.86

🇨🇳 171.217.92.33

🇸🇪 171.25.158.50

🇮🇷 151.235.198.207

🇧🇷 138.255.206.205

🇨🇳 112.66.189.49

🇳🇱 91.92.40.27

🇩🇰 87.55.182.86

🇺🇸 66.132.186.218

🇺🇸 66.132.172.224

🇺🇸 43.110.38.5

🇺🇦 37.55.45.95

🇬🇧 35.203.211.134

🇺🇸 34.75.218.145

🇺🇦 31.41.66.204