JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.223.235.2

185.223.235.2 was found in our database!

This IP was reported 1,328 times. Confidence of Abuse is 100%: ?

100%

ISP	Infrawatch Limited
Usage Type	Fixed Line ISP
ASN	AS25369
Hostname(s)	185-223-235-2.infrawat.ch
Domain Name	infrawat.ch
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.223.235.2

Whois 185.223.235.2

IP Abuse Reports for 185.223.235.2:

This IP address has been reported a total of 1,328 times from 152 distinct sources. 185.223.235.2 was first reported on April 24th 2026, and the most recent report was 57 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 SSP	2026-06-17 17:25:32 (57 minutes ago)	Automatically generated from firewall_v2 logs on Server_ID: SPPX01 Category: Port Scan Occurrences ... show more Automatically generated from firewall_v2 logs on Server_ID: SPPX01 Category: Port Scan Occurrences: 10 Unique Ports: 40 Destination Ports: 20256, 2078, 6016, 119, 12691, 4007, 6215, 24354, 3722, 42159, 63049, 25482, 35553, 13941, 11387, 25024, 54058, 12040, 34949, 63385, 7856, 18299, 38073, 30241, 36193, 3834, 14774, 35519, 53398, 65062, 61946, 38765, 10343, 27627, 11332, 64228, 29973, First Seen: 2026-06-16 13:05 UTC Last Seen: 2026-06-17 17:25 UTC show less	Port Scan
🇺🇸 thororen	2026-06-17 17:14:56 (1 hour ago)	Blocked by UFW [81/tcp] Source port: 25650 TTL: 53 Packet length: 40 TOS: 0x00 This report was gene ... show more Blocked by UFW [81/tcp] Source port: 25650 TTL: 53 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇷 diego	2026-06-17 16:37:00 (1 hour ago)	[rede-top188] 06/17/2026-13:37:00.688618, 185.223.235.2, Protocol: 6, ET CINS Active Threat Intellig ... show more [rede-top188] 06/17/2026-13:37:00.688618, 185.223.235.2, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 251 show less	Hacking
🇺🇸 MPL	2026-06-17 16:08:03 (2 hours ago)	tcp port scan (8 or more attempts)	Port Scan
🇺🇸 sefinek.net	2026-06-17 16:07:53 (2 hours ago)	Blocked by UFW on NY01 [19725/tcp] \| SPT: 16662 \| TTL: 53 \| LEN: 40 \| TOS: 0x08 • Reported by: githu ... show more Blocked by UFW on NY01 [19725/tcp] \| SPT: 16662 \| TTL: 53 \| LEN: 40 \| TOS: 0x08 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 JPPO	2026-06-17 15:52:38 (2 hours ago)	Multiport scan 6 ports : 17238 24857 30002 32465 35014 36343	Port Scan
🇺🇸 RAP	2026-06-17 13:54:54 (4 hours ago)	2026-06-17 13:54:54 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇲🇿 delsio	2026-06-17 13:33:57 (4 hours ago)	AS37697 ntopng observed inbound attack; alert=Live Flow High Score; source=185.223.235.2; destinatio ... show more AS37697 ntopng observed inbound attack; alert=Live Flow High Score; source=185.223.235.2; destination=160.119.114.134; destination_port=322; score=110; action=bgp_blackhole_and_flowspec_discard; block_duration=18000s; reason=high-confidence ntopng_blacklisted alert=Live Flow High Score dst=160.119.114.134 port=322 show less	Port Scan
Anonymous	2026-06-17 12:59:29 (5 hours ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 xmission.com	2026-06-17 12:57:26 (5 hours ago)	Blocked by UFW (TCP on 4567) Source port: 62044 TTL: 53 Packet length: 40 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 4567) Source port: 62044 TTL: 53 Packet length: 40 TOS: 0x08 This report (for 185.223.235.2) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 london2038.com	2026-06-17 12:24:37 (5 hours ago)	Connection atttempts against closed TCP ports Jun 17 09:12:26 BLOCK SRC=185.223.235.2 LEN=40 TOS=0x0 ... show more Connection atttempts against closed TCP ports Jun 17 09:12:26 BLOCK SRC=185.223.235.2 LEN=40 TOS=0x00 PREC=0x00 TTL=57 ID=0 PROTO=TCP SPT=22958 DPT=30216 WINDOW=65535 RES=0x00 SYN Jun 17 12:37:25 BLOCK SRC=185.223.235.2 LEN=40 TOS=0x00 PREC=0x00 TTL=57 ID=0 PROTO=TCP SPT=49946 DPT=53516 WINDOW=65535 RES=0x00 SYN Jun 17 14:24:36 BLOCK SRC=185.223.235.2 LEN=40 TOS=0x00 PREC=0x00 TTL=57 ID=0 PROTO=TCP SPT=31053 DPT=40254 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇩🇪 Admins@FBN	2026-06-17 11:49:02 (6 hours ago)	FW-PortScan: Traffic Blocked srcport=63762 dstport=39031	Port Scan
🇧🇷 diego	2026-06-17 11:48:58 (6 hours ago)	[rede-168-134] 06/17/2026-08:48:58.649921, 185.223.235.2, Protocol: 6, ET CINS Active Threat Intelli ... show more [rede-168-134] 06/17/2026-08:48:58.649921, 185.223.235.2, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 251 show less	Hacking
🇺🇸 MPL	2026-06-17 10:57:19 (7 hours ago)	tcp port scan (9 or more attempts)	Port Scan
🇩🇪 Admins@FBN	2026-06-17 10:47:56 (7 hours ago)	FW-PortScan: Traffic Blocked srcport=32567 dstport=59778	Port Scan

Showing 1 to 15 of 1328 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 209.38.255.6

🇲🇰 185.193.240.246

🇸🇬 165.22.101.210

🇮🇳 125.23.204.74

🇭🇰 103.103.245.61

🇸🇬 103.13.206.100

🇧🇬 193.24.211.107

🇦🇪 165.154.12.108

🇭🇰 123.58.213.118

🇨🇳 114.234.101.12

🇺🇸 91.230.168.91

🇵🇱 83.168.95.29

🇨🇳 58.19.140.232

🇨🇳 42.123.122.110

🇨🇦 20.104.75.74

🇺🇸 20.65.195.126

🇨🇳 14.103.115.141

🇺🇸 172.173.67.22

🇭🇰 118.26.36.195

🇺🇸 104.243.42.167