JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.242.3.224

185.242.3.224 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 54%: ?

54%

ISP	Felcloud
Usage Type	Data Center/Web Hosting/Transit
ASN	AS60223
Domain Name	felcloud.net
Country	🇳🇱 Netherlands
City	Eindhoven, North Brabant

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.242.3.224

Whois 185.242.3.224

IP Abuse Reports for 185.242.3.224:

This IP address has been reported a total of 21 times from 15 distinct sources. 185.242.3.224 was first reported on April 11th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-20 05:18:20 (2 hours ago)	Blocked by UFW (TCP on 443) Source port: 58880 TTL: 48 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 443) Source port: 58880 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 185.242.3.224) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 sandra361	2026-06-19 21:42:44 (10 hours ago)	Port scan detected: 25 attempts across 2 ports (443,80). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=18 ... show more Port scan detected: 25 attempts across 2 ports (443,80). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=185.242.3.224 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=15 DF PROTO=TCP SPT=47362 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 xmission.com	2026-06-19 20:50:47 (11 hours ago)	Blocked by UFW (TCP on 443) Source port: 43638 TTL: 50 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 443) Source port: 43638 TTL: 50 Packet length: 60 TOS: 0x00 This report (for 185.242.3.224) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇨🇭 4server	2026-06-16 00:20:16 (4 days ago)	[TueJun1602:20:10.7381992026][security2:error][pid1513525:tid1513758][client185.242.3.224:0]ModSecur ... show more [TueJun1602:20:10.7381992026][security2:error][pid1513525:tid1513758][client185.242.3.224:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mdd-network.ch\"][uri\"/\"][unique_id\"ajCWun3h8zvZ1jEGhnpShAAAAMA\"] show less	Hacking Web App Attack
🇺🇸 nodepile	2026-06-15 05:00:32 (5 days ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/ ua='Mozilla/5.0 (Macintosh ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/ ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Version/16.2 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 xmission.com	2026-06-12 23:00:40 (1 week ago)	Blocked by UFW (TCP on 443) Source port: 35246 TTL: 48 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 443) Source port: 35246 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 185.242.3.224) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
Anonymous	2026-06-12 19:02:02 (1 week ago)	Malicious activity detected	Hacking Web App Attack
🇩🇪 Kreisausschuss des Odenwaldkreises	2026-06-11 21:43:11 (1 week ago)	HAProxy NOSRV or BADREQ	Web App Attack
🇺🇸 xmission.com	2026-06-11 03:27:20 (1 week ago)	Blocked by UFW (TCP on 443) Source port: 53310 TTL: 50 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 443) Source port: 53310 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 185.242.3.224) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇷🇸 Smel	2026-06-09 11:18:04 (1 week ago)	Unauthorized Probe/Connection, Hack -	Port Scan Hacking
🇷🇸 Smel	2026-06-02 01:03:03 (2 weeks ago)	Unauthorized Probe/Connection, Hack -	Port Scan Hacking
🇺🇸 xmission.com	2026-05-31 14:34:20 (2 weeks ago)	Blocked by UFW (TCP on 443) Source port: 46806 TTL: 51 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 443) Source port: 46806 TTL: 51 Packet length: 60 TOS: 0x00 This report (for 185.242.3.224) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇦🇺 paulshipley.com.au	2026-05-31 00:34:53 (2 weeks ago)	[Sun May 31 10:34:53.206971 2026] [security2:error] [pid 864530] [client 185.242.3.224:56918] [clien ... show more [Sun May 31 10:34:53.206971 2026] [security2:error] [pid 864530] [client 185.242.3.224:56918] [client 185.242.3.224] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "furst.com.au"] [uri "/"] [unique_id "ahuCLT3KlK1PvKVBMDkH7wAAAAY"] ... show less	Web App Attack
🇬🇧 poundawebsiteltd	2026-05-29 12:30:18 (3 weeks ago)	Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 185.242.3.224 - - [29/May/2026:1 ... show more Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 185.242.3.224 - - [29/May/2026:13:30:14 +0100] GET / HTTP/1.1 403 3030 - Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 show less	Web App Attack
🇦🇺 MAGIC	2026-05-29 01:07:21 (3 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 34.39.120.233

🇺🇸 209.141.46.157

🇺🇸 209.50.167.209

🇨🇳 182.204.180.227

🇺🇸 166.62.41.190

🇺🇸 154.197.57.56

🇰🇷 115.140.161.61

🇨🇳 58.83.234.85

🇨🇳 223.86.148.242

🇧🇬 213.222.48.22

🇧🇷 205.210.31.155

🇨🇳 120.48.124.164

🇫🇷 85.217.140.49

🇫🇷 51.77.158.34

🇺🇸 45.148.233.72

🇫🇷 194.163.183.39

🇸🇬 152.32.220.188

🇨🇳 118.196.129.25

🇺🇸 74.7.243.195

🇨🇦 216.26.238.76