This IP address has been reported a total of
8
times from
4 distinct
sources.
185.222.241.184 was first reported on
December 5th 2022 , and the most recent report was
2 days ago France
with 4
reports;
Greece
with 2
reports;
Portugal
with 1
report.
The most common categories in these recent reports were:
Web App Attack
5
times;
Port Scan
2
times;
Exploited Host
1
time;
Bad Web Bot
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
Sklurk
2026-10-10 11:17:07
(2 days ago)
Web App Attack
Web App Attack
🇬🇷
setupgr
2026-10-09 23:24:27
(3 days ago)
(mod_security) mod_security (id:11000011) triggered by 185.222.241.184 (DE/Germany/Baden-Wurttemberg ...
show more
(mod_security) mod_security (id:11000011) triggered by 185.222.241.184 (DE/Germany/Baden-Wurttemberg/Karlsruhe/-/[AS51167 Contabo GmbH]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Oct 10 02:24:25.082538 2026] [security2:error] [pid 655594:tid 655660] [remote 185.222.241.184:60748] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "contaboserver.net" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: vmi3591069.contaboserver.net"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/2019/07/barequip-kiosk_17-150x150.jpg"] [unique_id "asl3qbIZh94l_DjQNyRRMwAEzw4"]
show less
Port Scan
🇵🇹
PT
2026-10-09 23:00:00
(3 days ago)
web app attack
Bad Web Bot
Exploited Host
Web App Attack
🇬🇷
setupgr
2026-09-30 00:02:14
(1 week ago)
(mod_security) mod_security (id:11000011) triggered by 185.222.241.184 (DE/Germany/Baden-Wurttemberg ...
show more
(mod_security) mod_security (id:11000011) triggered by 185.222.241.184 (DE/Germany/Baden-Wurttemberg/Karlsruhe/-/[AS51167 Contabo GmbH]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Sep 30 03:02:09.481332 2026] [security2:error] [pid 1755304:tid 1755413] [remote 185.222.241.184:43746] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "contaboserver.net" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: vmi3591069.contaboserver.net"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/2019/07/%CE%95%CE%BE%CE%BF%CF%87%CE%B9%CE%BA%CE%AE-%CE%9A%CE%B1%CF%84%CE%BF%CE%B9%CE%BA%CE%AF%CE%B108-150x150.jpg"] [unique_id "arxRgTsl-f7OK7vmT0JymQABSBc"]
show less
Port Scan
🇫🇷
Sklurk
2026-09-27 05:41:51
(2 weeks ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-09-26 04:41:17
(2 weeks ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-09-22 14:40:10
(2 weeks ago)
Web App Attack
Web App Attack
🇳🇱
Savvii
2022-12-05 19:46:24
(3 years ago)
21 attempts against mh-misbehave-ban on glow
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
8
of 8 reports
