JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.117.225.242

185.117.225.242 was found in our database!

This IP was reported 100 times. Confidence of Abuse is 19%: ?

19%

ISP	NSEC - Sistemas Informaticos, S.A.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Domain Name	nsec.pt
Country	🇺🇸 United States of America
City	Floris, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.117.225.242

Whois 185.117.225.242

IP Abuse Reports for 185.117.225.242:

This IP address has been reported a total of 100 times from 41 distinct sources. 185.117.225.242 was first reported on November 21st 2022, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-11 08:05:32 (2 weeks ago)	Blocked: Reason='Suspicious traffic score=70 (review-based detection)'; Requests=64	Hacking
Anonymous	2026-06-08 14:48:02 (2 weeks ago)	Banned by Fail2Ban on server	Web App Attack
🇫🇮 YF	2026-06-06 09:00:41 (2 weeks ago)	WordPress directory enumeration	Web App Attack
🇬🇧 Bytemark	2026-05-02 00:04:01 (1 month ago)	185.117.225.242 - - [02/May/2026:01:04:00 +0100] "GET /robots.txt HTTP/1.1" 301 5855 "-" "python-req ... show more 185.117.225.242 - - [02/May/2026:01:04:00 +0100] "GET /robots.txt HTTP/1.1" 301 5855 "-" "python-requests/2.31.0" show less	Brute-Force Web App Attack
🇳🇱 Mangelot Hosting	2026-04-24 02:29:50 (2 months ago)	(bad_user_agent) srv104 Bad User-Agent 185.117.225.242 (US/United States/-): 10 in the last 3600 sec ... show more (bad_user_agent) srv104 Bad User-Agent 185.117.225.242 (US/United States/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
Anonymous	2026-04-22 05:20:44 (2 months ago)	185.117.225.242 - - [22/Apr/2026:07:20:39 +0200] "GET /robots.txt HTTP/1.1" 403 440 "-" "python-requ ... show more 185.117.225.242 - - [22/Apr/2026:07:20:39 +0200] "GET /robots.txt HTTP/1.1" 403 440 "-" "python-requests/2.31.0" 185.117.225.242 - - [22/Apr/2026:07:20:42 +0200] "GET /robots.txt HTTP/1.1" 403 5059 "-" "python-requests/2.31.0" ... show less	Web App Attack
🇺🇸 Rip	2026-04-22 03:24:22 (2 months ago)	Spoofed, Forged or malicious User-Agent detected.	Brute-Force Web App Attack
🇩🇪 LRob.fr	2026-04-21 22:00:21 (2 months ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇺🇸 aks4226	2026-04-21 18:45:50 (2 months ago)	Attacking common web applications. (n01)	Web App Attack
🇩🇪 LRob.fr	2026-04-02 13:15:06 (2 months ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-23 11:19:37 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 185.117.225.242 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 185.117.225.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 23 07:19:31.563643 2026] [security2:error] [pid 13875:tid 13875] [client 185.117.225.242:34218] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.fractalsky.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.fractalsky.com"] [uri "/blackhorrormovie.com"] [unique_id "acEhw3A2s9kDjXQzO-iepwAAACU"], referer: http://www.furythemovie.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-03-23 03:06:26 (3 months ago)	Backdrop CMS module - forbidden user agent	Bad Web Bot Web App Attack
🇬🇧 Mendip_Defender	2026-03-20 00:38:43 (3 months ago)	185.117.225.242 - - [20/Mar/2026:00:38:23 +0000] "GET /robots.txt HTTP/1.1" 403 146 "-" "python-requ ... show more 185.117.225.242 - - [20/Mar/2026:00:38:23 +0000] "GET /robots.txt HTTP/1.1" 403 146 "-" "python-requests/2.31.0" 185.117.225.242 - - [20/Mar/2026:00:38:32 +0000] "GET /robots.txt HTTP/1.1" 403 146 "-" "python-requests/2.31.0" 185.117.225.242 - - [20/Mar/2026:00:38:42 +0000] "GET /robots.txt HTTP/1.1" 403 146 "-" "python-requests/2.31.0" ... show less	Hacking Web App Attack
🇫🇷 pm33	2026-02-08 14:56:11 (4 months ago)	Wordpress login attempts	Brute-Force
🇧🇪 taivas.nl	2026-01-29 05:32:42 (4 months ago)	Many_bad_calls	Web App Attack

Showing 1 to 15 of 100 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.208

🇺🇦 188.163.7.118

🇧🇷 177.156.168.121

🇨🇳 113.249.114.103

🇩🇪 93.228.34.22

🇱🇻 81.30.98.144

🇺🇸 64.62.156.46

🇩🇪 2001:9e8:5071:4b00:548d:4471:2035:6bc1

🇺🇸 216.25.89.65

🇨🇳 183.184.54.24

🇦🇷 181.20.88.206

🇳🇱 176.65.139.31

🇳🇱 158.173.21.157

🇲🇶 143.105.239.124

🇨🇳 120.24.230.187

🇷🇺 109.170.8.64

🇮🇹 46.229.94.43

🇬🇧 2a03:b0c0:1:e0:0:1:8933:1001

🇺🇿 198.163.195.92

🇷🇴 193.46.255.86