JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.242.177.4

185.242.177.4 was found in our database!

This IP was reported 293 times. Confidence of Abuse is 84%: ?

84%

ISP	Blue Shield Security GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35369
Domain Name	blue-shield.at
Country	🇦🇹 Austria
City	Linz, Upper Austria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.242.177.4

Whois 185.242.177.4

IP Abuse Reports for 185.242.177.4:

This IP address has been reported a total of 293 times from 83 distinct sources. 185.242.177.4 was first reported on August 23rd 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 Burayot	2026-06-16 13:45:38 (1 day ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 185.242.177.4 (AT/Austria/-): 1 in t ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 185.242.177.4 (AT/Austria/-): 1 in the last 3600 secs show less	Web App Attack
🇧🇷 diego	2026-06-16 07:06:40 (2 days ago)	[rede-164-29] Port Scan detected from 185.242.177.4 (AT/Austria/-). 11 hits in the last 80 seconds ... show more [rede-164-29] Port Scan detected from 185.242.177.4 (AT/Austria/-). 11 hits in the last 80 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Jun 16 04:05:29 kernel: [10788285.645331] Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=185.242.177.4 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=64018 DF PROTO=TCP SPT=52774 DPT=443 WINDOW=42340 RES=0x00 SYN URGP=0 Jun 16 04:05:30 kernel: [10788286.649334] Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=185.242.177.4 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=64019 DF PROTO=TCP SPT=52774 DP show less	Port Scan
🇧🇷 diego	2026-06-15 07:48:14 (3 days ago)	[rede-164-29] Port Scan detected from 185.242.177.4 (AT/Austria/-). 11 hits in the last 171 second ... show more [rede-164-29] Port Scan detected from 185.242.177.4 (AT/Austria/-). 11 hits in the last 171 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Jun 15 04:47:02 kernel: [10704381.318656] Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=185.242.177.4 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=36251 DF PROTO=TCP SPT=38416 DPT=443 WINDOW=42340 RES=0x00 SYN URGP=0 Jun 15 04:47:03 kernel: [10704382.355723] Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=185.242.177.4 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=36252 DF PROTO=TCP SPT=38416 DP show less	Port Scan
🇫🇮 as211431.net	2026-06-14 22:06:17 (3 days ago)	Triggered Cloudflare WAF (linkMaze) from AT. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GE ... show more Triggered Cloudflare WAF (linkMaze) from AT. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GET method) Endpoint: / UA: axios/1.7.2 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 HandyTreff.de	2026-06-10 10:53:24 (1 week ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -73.839 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -73.839 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: axios/1.7.2 show less	Web App Attack Bad Web Bot
🇨🇭 4server	2026-06-09 21:17:24 (1 week ago)	[TueJun0923:17:17.1752992026][security2:error][pid2918611:tid2918817][client185.242.177.4:0]ModSecur ... show more [TueJun0923:17:17.1752992026][security2:error][pid2918611:tid2918817][client185.242.177.4:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.hosting-ticino-svizzera.ch\"][uri\"/gallery/favicons/favicon.ico\"][unique_id\"aiiC3QXGhKFM9x6_Gtyx6gAAAA8\"] show less	Hacking Web App Attack
🇩🇪 Petros Stefanakis	2026-06-09 11:07:17 (1 week ago)	(bind) bind triggered by 185.242.177.4 (AT/Austria/-)	Hacking
🇫🇮 nNordic	2026-06-09 09:12:18 (1 week ago)	Connection attempt blocked by IDS/IPS from 185.242.177.4/32	Hacking
🇳🇱 Roderic	2026-06-08 15:36:07 (1 week ago)	(bind) bind triggered by 185.242.177.4 (AT/Austria/-/-/-/[redacted])	DNS Poisoning
🇳🇱 lid3rc	2026-06-08 15:21:40 (1 week ago)	According to the AbuseIPDB risk analysis, the IP address is too high risk.	Web App Attack
🇩🇪 4server	2026-06-07 11:15:06 (1 week ago)	[SunJun0713:15:04.5163262026][security2:error][pid3748275:tid3748376][client185.242.177.4:0]ModSecur ... show more [SunJun0713:15:04.5163262026][security2:error][pid3748275:tid3748376][client185.242.177.4:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"sisuconsulting.net\"][uri\"/wp-content/uploads/2020/10/favicon.jpg\"][unique_id\"aiVSuHH774Shfc-1_q3-OQAAAII\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 ITSNF	2026-06-07 09:00:09 (1 week ago)	Blocked by os-abuseipdb; 4 hits, proto=tcp,udp, ports=25,53	Port Scan Hacking
🇬🇧 Oakley	2026-06-05 09:05:38 (1 week ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇧🇷 diego	2026-06-05 02:52:11 (1 week ago)	[rede-164-29] Port Scan detected from 185.242.177.4 (AT/Austria/-). 11 hits in the last 250 second ... show more [rede-164-29] Port Scan detected from 185.242.177.4 (AT/Austria/-). 11 hits in the last 250 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Jun 4 23:50:57 kernel: [9822642.578326] Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=185.242.177.4 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=36288 DF PROTO=TCP SPT=42270 DPT=443 WINDOW=42340 RES=0x00 SYN URGP=0 Jun 4 23:50:58 kernel: [9822643.626639] Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=185.242.177.4 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=36289 DF PROTO=TCP SPT=42270 DPT= show less	Port Scan
🇺🇸 Starburst SysOp Team	2026-06-03 17:07:11 (2 weeks ago)	BAD BOT, BAD BOT, WHAT YA GONNA DO - Detected and Blocked.. Matched phrase "Java" at REQUEST_HEADERS ... show more BAD BOT, BAD BOT, WHAT YA GONNA DO - Detected and Blocked.. Matched phrase "Java" at REQUEST_HEADERS:User-Agent. (1100000-mnz6-1) show less	Bad Web Bot

Showing 1 to 15 of 293 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 81.30.98.144

🇺🇸 192.185.4.109

🇧🇷 187.17.228.218

🇯🇵 168.138.213.115

🇸🇪 155.4.244.169

🇺🇸 154.83.197.11

🇮🇳 152.32.158.219

🇺🇸 45.58.52.17

🇧🇷 179.83.134.101

🇺🇸 170.253.206.5

🇺🇸 162.216.150.6

🇨🇳 120.198.138.185

🇨🇳 116.179.32.235

🇰🇭 110.235.250.5

🇮🇩 103.89.78.39

🇭🇰 38.76.160.193

🇳🇱 5.61.209.224

🇨🇳 218.11.1.2

🇺🇸 200.71.127.105

🇧🇩 182.48.80.240