JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.242.3.222

185.242.3.222 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 69%: ?

69%

ISP	DEMENIN B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS401626
Domain Name	demenin.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.242.3.222

Whois 185.242.3.222

IP Abuse Reports for 185.242.3.222:

This IP address has been reported a total of 27 times from 18 distinct sources. 185.242.3.222 was first reported on May 24th 2026, and the most recent report was 14 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Lee Daniel	2026-09-01 07:49:36 (14 minutes ago)	185.242.3.222 - - [01/Sep/2026:03:49:35 -0400] "GET /.env HTTP/1.1" 403 6301 "-" "Mozilla/5.0 (Macin ... show more 185.242.3.222 - - [01/Sep/2026:03:49:35 -0400] "GET /.env HTTP/1.1" 403 6301 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:134.0) Gecko/20100101 Firefox/134.0" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇻🇳 trung.fun	2026-09-01 06:44:40 (1 hour ago)	DDoS, Hack, Brute Force, Web Attack ...	DDoS Attack Web Spam Hacking Brute-Force Web App Attack
🇪🇸 el-brujo	2026-09-01 06:41:40 (1 hour ago)	185.242.3.222 - - [01/Sep/2026:08:41:40 +0200] "GET /config.yml HTTP/2.0" 404 4620 "http://foro.elha ... show more 185.242.3.222 - - [01/Sep/2026:08:41:40 +0200] "GET /config.yml HTTP/2.0" 404 4620 "http://foro.elhacker.net/config.yml" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 185.242.3.222 - - [01/Sep/2026:08:41:40 +0200] "GET /credentials.yml HTTP/2.0" 404 4620 "http://foro.elhacker.net/credentials.yml" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" 185.242.3.222 - - [01/Sep/2026:08:41:40 +0200] "GET /settings.py HTTP/2.0" 404 4620 "http://foro.elhacker.net/settings.py" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Mobile/15E148 Safari/604.1" ... show less	DDoS Attack Hacking
🇬🇧 openstrike.co.uk	2026-09-01 05:13:32 (2 hours ago)	5 attacks on password grabbing URLs: GET /.aws/credentials HTTP/1.1	Hacking
🇩🇪 ghostwarriors	2026-09-01 03:50:20 (4 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-09-01 02:38:22 (5 hours ago)	Aggressive web search of vulnerable pages: /.env /.env.local /.env /.env /.env.local /.env.local /.e ... show more Aggressive web search of vulnerable pages: /.env /.env.local /.env /.env /.env.local /.env.local /.env /credentials.yml /.env.local /credential ... show less	Web App Attack
🇩🇪 LRob	2026-09-01 02:18:26 (5 hours ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.env.local (+1 more) \| 2026-09-01 02:18 UTC show less	Hacking Web App Attack
🇩🇪 MusicLibrary	2026-09-01 01:40:08 (6 hours ago)	Attempted access to sensitive configuration files (.env, .git, etc.)	Bad Web Bot Web App Attack
🇩🇪 pltcldvlpr	2026-09-01 01:16:19 (6 hours ago)	CMS/framework probe: 185.242.3.222 - - [01/Sep/2026:03:16:19 +0200] "GET /.env HTTP/1.1" 301 178 "-" ... show more CMS/framework probe: 185.242.3.222 - - [01/Sep/2026:03:16:19 +0200] "GET /.env HTTP/1.1" 301 178 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Mobile/15E148 Safari/604.1" asn=401626 org="Netiface America, Inc." country=DE ... show less	Web App Attack
🇩🇪 raph	2026-09-01 00:44:06 (7 hours ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-31 22:37:02 (9 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 xmission.com	2026-06-21 18:23:39 (2 months ago)	Blocked by UFW (TCP on 443) Source port: 59874 TTL: 47 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 443) Source port: 59874 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 185.242.3.222) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇫🇮 as211431.net	2026-06-21 05:13:02 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 xmission.com	2026-06-20 22:45:06 (2 months ago)	Blocked by UFW (TCP on 443) Source port: 59114 TTL: 50 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 443) Source port: 59114 TTL: 50 Packet length: 60 TOS: 0x00 This report (for 185.242.3.222) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 xmission.com	2026-06-20 05:31:04 (2 months ago)	Blocked by UFW (TCP on 443) Source port: 40368 TTL: 47 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 443) Source port: 40368 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 185.242.3.222) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a940:302:118:0:19::

🇦🇱 193.163.187.130

🇻🇳 103.9.77.247

🇳🇱 94.102.49.125

🇫🇷 213.136.68.185

🇺🇸 209.50.165.238

🇧🇷 187.49.144.147

🇦🇷 186.57.198.87

🇳🇱 185.224.128.16

🇨🇳 183.227.14.238

🇩🇪 167.94.146.35

🇿🇦 160.119.235.186

🇭🇰 156.245.246.50

🇵🇰 154.57.216.142

🇻🇳 113.190.61.1

🇨🇳 113.96.35.26

🇮🇳 103.18.69.54

🇺🇸 74.7.243.44

🇺🇸 74.7.242.178

🇺🇸 73.166.179.170