JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.225.41.144

185.225.41.144 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 37%: ?

37%

ISP	Tarassul Internet Service Provider
Usage Type	Fixed Line ISP
ASN	AS29256
Domain Name	syriantelecom.sy
Country	🇸🇾 Syrian Arab Republic
City	Qadsayya, Rif-dimashq

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.225.41.144

Whois 185.225.41.144

IP Abuse Reports for 185.225.41.144:

This IP address has been reported a total of 12 times from 11 distinct sources. 185.225.41.144 was first reported on December 10th 2025, and the most recent report was 56 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nodepile	2026-07-01 20:48:41 (56 minutes ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 kosada.com	2026-06-29 10:28:43 (2 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇸🇬 mypatricks	2026-06-14 01:06:13 (2 weeks ago)	185.225.41.144 \| Port: 13723 \| DNS: 185.225.41.144 2026-06-14T09:06:12+08:00 Asia/Damascus \| IPs res ... show more 185.225.41.144 \| Port: 13723 \| DNS: 185.225.41.144 2026-06-14T09:06:12+08:00 Asia/Damascus \| IPs res erved list \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /zh/author/mypatricks/page/2?e9de9ffdc9da8=efff9fbacecacbc8 \| Ref: - \| Country: SY/Syrian Arab Republic/+02:00 IP City: Khirbat Ghazālah macOS a0b56e561d7dee5d-MXP/Milan, Italy 1 hits/0 secs Browser 1 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇩🇪 Vegascosmetics	2026-06-09 23:50:43 (3 weeks ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
Anonymous	2026-06-08 00:30:56 (3 weeks ago)	Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Attack Signatur ... show more Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Attack Signature Blocked: /wishlist/index/add/product/237/form_key/RsoJIGvGrqthx1IF/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gec... show less	Hacking Bad Web Bot Web App Attack
🇷🇸 Smel	2026-06-04 08:48:24 (3 weeks ago)	Unauthorized Probe/Connection, Hack -	Port Scan Hacking
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 month ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 1175168a-7e6d-467e-bb9a-dd1cdfa3fb9e	DDoS Attack
🇺🇸 TPI-Abuse	2026-05-07 13:07:49 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 185.225.41.144 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 185.225.41.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 09:07:44.626953 2026] [security2:error] [pid 27705:tid 27705] [client 185.225.41.144:52256] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.baliaccommodationpadangpadang.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.baliaccommodationpadangpadang.com"] [uri "/[email protected]"] [unique_id "afyOoF815aOqfceCnpQggwAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2026-04-28 00:04:09 (2 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇷🇴 INTEQ	2026-03-26 10:42:48 (3 months ago)	Web attack from 185.225.41.144	Web App Attack
🇪🇸 el-brujo	2026-02-28 13:45:22 (4 months ago)	Cloudflare WAF: Request Path: /category/linux/ Request Query: Host: hwagm.elhacker.net userAgent: M ... show more Cloudflare WAF: Request Path: /category/linux/ Request Query: Host: hwagm.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Action: log Source: firewallManaged ASN Description: INT-PDN-STE-AS STE PDN Internal AS Country: SY Method: POST Timestamp: 2026-02-28T13:45:22Z ruleId: 00da180570d34b5bae2121acd0023a36. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (6 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 20.78.33.180

🇩🇪 2a0a:4cc0:c1:b656:44b:87ff:fef0:281a

🇺🇸 172.174.250.151

🇮🇩 165.154.151.207

🇨🇳 113.249.101.176

🇺🇸 107.129.80.133

🇫🇮 77.105.161.120

🇨🇳 47.98.119.69

🇳🇮 45.170.225.214

🇳🇱 45.156.87.216

🇳🇱 45.153.34.167

🇫🇷 13.140.158.44

🇧🇦 195.222.57.190

🇹🇭 165.154.120.211

🇺🇸 141.11.88.11

🇨🇳 140.224.112.39

🇺🇸 135.237.126.12

🇰🇷 115.91.48.142

🇫🇷 91.231.89.231

🇩🇪 69.5.169.209