JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.209.196.241

185.209.196.241 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 31%: ?

31%

ISP	31173 Services AB infrastructure in Frankfurt, DE.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS39351
Domain Name	31173.se
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.209.196.241

Whois 185.209.196.241

IP Abuse Reports for 185.209.196.241:

This IP address has been reported a total of 23 times from 19 distinct sources. 185.209.196.241 was first reported on April 11th 2023, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-07-03 07:21:28 (13 hours ago)	[FriJul0309:21:21.8034332026][security2:error][pid1013525:tid1013547][client185.209.196.241:0]ModSec ... show more [FriJul0309:21:21.8034332026][security2:error][pid1013525:tid1013547][client185.209.196.241:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"verticalti.ch.sarand.ch\"][uri\"/images/favicon.ico\"][unique_id\"akdi8ck4eIYN8GALzD_R_AAAAUU\"]\,referer:https://verticalti.ch.sarand.ch show less	Hacking Web App Attack
🇮🇩 Burayot	2026-07-03 05:30:04 (15 hours ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 185.209.196.241 (DE/Germany/-): 2 in ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 185.209.196.241 (DE/Germany/-): 2 in the last 3600 secs show less	Web App Attack
🇨🇭 backslash	2026-07-03 00:42:00 (20 hours ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot
🇮🇩 Burayot	2026-07-02 23:51:01 (21 hours ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 185.209.196.241 (DE/Germany/-): 1 in ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 185.209.196.241 (DE/Germany/-): 1 in the last 3600 secs show less	Web App Attack
🇩🇪 4server	2026-07-02 12:10:53 (1 day ago)	[ThuJul0214:10:47.3560192026][security2:error][pid2942046:tid2942092][client185.209.196.241:0]ModSec ... show more [ThuJul0214:10:47.3560192026][security2:error][pid2942046:tid2942092][client185.209.196.241:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"autoconfig.creazione-siti-web-ticino.ch\"][uri\"/\"][unique_id\"akZVR1p_J1S_1sBDBBJK0QAAAEo\"]\,referer:https://autoconfig.creazione-siti-web-ticino.ch show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-07-02 11:37:04 (1 day ago)	Ports: *; Direction: 0; Trigger: CT_LIMIT	Brute-Force SSH
🇧🇪 cmbplf	2026-03-27 13:03:52 (3 months ago)	7.015 4xx requests in 1 hour (1w20h32m)	Brute-Force Bad Web Bot
🇺🇸 fortypoundhead	2026-03-01 03:04:49 (4 months ago)	Banned IP Address	Hacking Web App Attack
🇵🇹 Information Security	2026-02-22 06:59:55 (4 months ago)	Web App Attack	Web App Attack
🇩🇪 conseilgouz	2026-02-21 22:05:20 (4 months ago)	ave-12 : Block return, carriage return, ... characters=>/component/weblinks/weblink/7-droit-de-l-uni ... show more ave-12 : Block return, carriage return, ... characters=>/component/weblinks/weblink/7-droit-de-l-union-europeenne-portail-e-justice?Itemid=101&catid=16%...(') show less	Hacking
🇩🇪 HandyTreff.de	2026-02-21 02:55:17 (4 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -30.23 (Bad < -10 / Very Bad < -20 / ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -30.23 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1) Gecko/20061024 Firefox/2.0 (Swiftfox) show less	Web App Attack Bad Web Bot
🇺🇸 masterguru	2026-02-18 22:08:35 (4 months ago)	COMODO WAF: Remote File Access Attempt. Match of "contains cpanel" against "REQUEST_URI" required. ( ... show more COMODO WAF: Remote File Access Attempt. Match of "contains cpanel" against "REQUEST_URI" required. (211190-124) show less	Hacking
🇺🇸 fortypoundhead	2026-02-18 21:32:08 (4 months ago)	SQL Injection Attempt	SQL Injection Web App Attack
Anonymous	2026-01-24 12:47:20 (5 months ago)	<comment>	Web App Attack
Anonymous	2024-12-17 14:40:00 (1 year ago)	phpmyadmin attack	Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.225

🇺🇸 185.191.171.12

🇺🇸 157.230.223.41

🇺🇸 73.151.73.36

🇮🇳 72.61.229.41

🇺🇸 24.199.81.220

🇩🇪 217.181.84.47

🇰🇷 211.51.132.104

🇺🇸 209.50.174.111

🇨🇳 202.46.62.42

🇲🇽 201.102.152.228

🇭🇰 199.45.154.181

🇮🇹 188.152.238.126

🇭🇰 182.239.80.7

🇳🇱 85.11.167.183

🇫🇷 80.87.206.103

🇰🇷 59.21.37.60

🇯🇵 20.78.137.72

🇰🇷 20.41.96.96

🇭🇰 20.24.211.57