185.50.202.185

Yes. FFraud classifies 185.50.202.185 as an open or public proxy. Connection type: Residential.

FFraud scores 185.50.202.185 at 90/100 (critical risk) because Active command & control (C2) server used to coordinate malware operations. Identified as part of a botnet network. SMTP and mail server abuse including spam relay and credential harvesting. Spam and automated registration abuse across multiple platforms. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Located in a high-risk network neighborhood where 100% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation We recommend blocking or challenging it.

185.50.202.185 is operated by CLOUDRU-AS (AS208677), located in Russia.

The score reflects high-confidence signals: Active command & control (C2) server used to coordinate malware operations. Identified as part of a botnet network. SMTP and mail server abuse including spam relay and credential harvesting. Spam and automated registration abuse across multiple platforms. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Located in a high-risk network neighborhood where 100% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation FFraud only lists an IP once it is independently confirmed at least twice, by our honeypot sensors and community reports.