JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.180.49.37

194.180.49.37 was found in our database!

This IP was reported 4,144 times. Confidence of Abuse is 100%: ?

100%

ISP	Neterra Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS201814
Domain Name	neterra.net
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.180.49.37

Whois 194.180.49.37

IP Abuse Reports for 194.180.49.37:

This IP address has been reported a total of 4,144 times from 795 distinct sources. 194.180.49.37 was first reported on April 8th 2023, and the most recent report was 2 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Savvii	2026-08-22 07:36:03 (2 minutes ago)	20 attempts against mh-misbehave-ban on mars	Brute-Force Bad Web Bot Web App Attack
🇩🇪 netclix.gr	2026-08-22 07:36:00 (2 minutes ago)	(mod_security) mod_security triggered on hostname [redacted] 194.180.49.37 (BG/Bulgaria/-): (CF_ENA ... show more (mod_security) mod_security triggered on hostname [redacted] 194.180.49.37 (BG/Bulgaria/-): (CF_ENABLE) show less	SQL Injection
🇫🇷 thilo	2026-08-22 07:33:55 (4 minutes ago)	Probe for vulnerabilities. Path attempted: /.env.dev	Web App Attack
🇮🇩 origrata	2026-08-22 07:30:19 (8 minutes ago)	[OGWAF] bad_reputation attack blocked \| severity: high \| GET /.env.php \| UA: Mozilla/5.0 (compatible ... show more [OGWAF] bad_reputation attack blocked \| severity: high \| GET /.env.php \| UA: Mozilla/5.0 (compatible; Silovik/2.0) show less	Web App Attack
🇩🇪 roxyapi	2026-08-22 07:27:22 (11 minutes ago)	Honeypot: automated vulnerability scan / web app attack. Last probe: GET /config/.env	Web App Attack Bad Web Bot
🇺🇸 moppetto	2026-08-22 07:24:59 (13 minutes ago)	Node.js .env file credential scraping; GET /.env.testing	Bad Web Bot Hacking
🇫🇮 pixiekat	2026-08-22 07:23:28 (15 minutes ago)	[Sat Aug 22 08:23:27.456935 2026] [security2:error] [pid 748759:tid 748860] [client 194.180.49.37:64 ... show more [Sat Aug 22 08:23:27.456935 2026] [security2:error] [pid 748759:tid 748860] [client 194.180.49.37:64862] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.29.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "integraldata.cc"] [uri "/app/.env"] [unique_id "aolObxpi-WDAD_7m0nf4GAAAAQQ"] [Sat Aug 22 08:23:27.456935 2026] [security2:error] [pid 748758:tid 748833] [client 194.180.49.37:64812] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.29.0"] [tag "anomaly-evaluation"] [ta ... show less	Web App Attack
🇨🇦 design2web.ca	2026-08-22 07:21:35 (16 minutes ago)	[UniFi FW] Web application attack on port 80 (HTTP) \| Policy: Region Blocking \| Proto: TCP \| Src: 19 ... show more [UniFi FW] Web application attack on port 80 (HTTP) \| Policy: Region Blocking \| Proto: TCP \| Src: 194.180.49.37:58868 \| SrcRegion: BG \| Svc: HTTP \| Detected: 2026-08-22 06:58:25 UTC \| ISP: MEVSPACE sp. z o.o. \| D2W UniFi AbuseIPDB Reporter v2 show less	Port Scan
🇺🇸 cwytech	2026-08-22 07:17:35 (20 minutes ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/rdg-local-lockdown-high.	Bad Web Bot Web App Attack
🇩🇪 xserverx.ru	2026-08-22 07:16:19 (22 minutes ago)	[UFW SCAN!!!!] SRC=194.180.49.37 LEN=40 TOS=0x00 PREC=0x20 TTL=249 PROTO=TCP SPT=58868 DPT=80 WINDOW ... show more [UFW SCAN!!!!] SRC=194.180.49.37 LEN=40 TOS=0x00 PREC=0x20 TTL=249 PROTO=TCP SPT=58868 DPT=80 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 Apache	2026-08-22 07:15:54 (22 minutes ago)	(mod_security) mod_security (id:210492) triggered by 194.180.49.37 (BG/Bulgaria/-): 5 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 194.180.49.37 (BG/Bulgaria/-): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇩🇪 Tsumugi Kotobuki	2026-08-22 07:14:37 (23 minutes ago)	Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 245 \| Len: 44B \| Win: ... show more Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 245 \| Len: 44B \| Win: 1024(1) \| F2B/ufw-honeypot@2026-08-22T07:14:37Z show less	Port Scan Hacking
🇫🇷 vtchost.com	2026-08-22 07:13:51 (24 minutes ago)	2026-08-22T09:13:50.729614+02:00 vmi3482414 kernel: WEBSCAN: IN=eth0 OUT= MAC=00:50:56:66:20:ee:c0:6 ... show more 2026-08-22T09:13:50.729614+02:00 vmi3482414 kernel: WEBSCAN: IN=eth0 OUT= MAC=00:50:56:66:20:ee:c0:69:11:b2:c8:03:08:00 SRC=194.180.49.37 DST=169.58.115.24 LEN=40 TOS=0x00 PREC=0x20 TTL=246 ID=2212 PROTO=TCP SPT=58868 DPT=80 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-08-22 07:11:36 (26 minutes ago)	Blocked by firewall on hugin [80/tcp] \| Rule: AbuseIPDB \| SPT: 58868 \| TTL: 249 \| LEN: 40 \| TOS: 0x0 ... show more Blocked by firewall on hugin [80/tcp] \| Rule: AbuseIPDB \| SPT: 58868 \| TTL: 249 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 iNetWorker	2026-08-22 07:11:16 (27 minutes ago)	firewall-block, port(s): 80/tcp	Port Scan

Showing 1 to 15 of 4144 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 78.188.228.73

🇻🇳 45.118.145.73

🇬🇧 2.57.17.3

🇫🇷 213.32.77.104

🇧🇴 189.28.76.139

🇫🇷 169.58.209.154

🇺🇸 134.122.126.211

🇰🇷 112.217.188.122

🇫🇷 88.169.59.120

🇺🇸 64.62.156.228

🇩🇪 46.101.127.225

🇧🇷 20.226.56.190

🇺🇸 17.22.237.229

🇩🇪 8.209.89.108

🇬🇧 2.57.17.244

🇬🇧 2.57.17.243

🇬🇧 2.57.17.219

🇺🇸 216.25.89.150

🇺🇸 209.205.206.247

🇭🇰 199.45.154.177