This IP address has been reported a total of
178
times from
66 distinct
sources.
185.148.3.237 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Honeypot hit: HTTP/1.1 request on 8989
GET /
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 15_ ...
show moreHoneypot hit: HTTP/1.1 request on 8989
GET /
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15
Accept: */*
Accept-Encoding: gzip; 8989 [2] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Honeypot [nx-infrastructure]: HTTP/1.1 request on 8282
GET /
User-Agent: Mozilla/5.0 (Macintosh; In ...
show moreHoneypot [nx-infrastructure]: HTTP/1.1 request on 8282
GET /
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15
Accept: */*
Accept-Encoding: gzip; 8282 [2] TCP
Reported by: Justin F.
show less
Honeypot hit: HTTP/1.1 request on 8282
GET /
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 15_ ...
show moreHoneypot hit: HTTP/1.1 request on 8282
GET /
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15
Accept: */*
Accept-Encoding: gzip; 8282 [2] TCP
show less
Honeypot [uk-production01]: HTTP/1.1 request on 4000
GET /
User-Agent: Mozilla/5.0 (Macintosh; Inte ...
show moreHoneypot [uk-production01]: HTTP/1.1 request on 4000
GET /
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15
Accept: */*
Accept-Encoding: gzip; 4000 [2] TCP
show less
Malformed or malicious web request
185.148.3.237 - - [13/Jun/2026:09:26:21 +0200] "\x16\x03\x01\x00{ ...
show moreMalformed or malicious web request
185.148.3.237 - - [13/Jun/2026:09:26:21 +0200] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03i\x83\x7F\x22-K\x16\x9F\xE1\x87\xD0\x9EH\xC5#\xD3\xB7\xEB\xD3\xBA\x17\x82l\x8Dx\x93\xED\x81J\xFC\xC2\xB9\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 400 157 "-" "-"
show less
Hacking
Web App Attack
Anonymous
Honeypot hit: HTTP/1.1 request on 4443
GET /
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 15_ ...
show moreHoneypot hit: HTTP/1.1 request on 4443
GET /
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15
Accept: */*
Accept-Encoding: gzip; 4443 [2] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
2026-06-13T03:40:40Z - Recognized attacks\bad behavior from IP address 185.148.3.237 on port 443\80 ...
show more2026-06-13T03:40:40Z - Recognized attacks\bad behavior from IP address 185.148.3.237 on port 443\80 (3 daily hits): client denied by server configuration
show less
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
Honeypot hit: HTTP/1.1 request on 4443
GET /
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 15_ ...
show moreHoneypot hit: HTTP/1.1 request on 4443
GET /
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15
Accept: */*
Accept-Encoding: gzip; 4443 [2] TCP
show less