JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.242.3.48

185.242.3.48 was found in our database!

This IP was reported 420 times. Confidence of Abuse is 100%: ?

100%

ISP	Felcloud
Usage Type	Data Center/Web Hosting/Transit
ASN	AS60223
Domain Name	felcloud.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.242.3.48

Whois 185.242.3.48

IP Abuse Reports for 185.242.3.48:

This IP address has been reported a total of 420 times from 203 distinct sources. 185.242.3.48 was first reported on February 23rd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-06-08 12:31:44 (1 day ago)	ICS Labs identified 185.242.3.48 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Brute-Force Exploited Host
🇮🇳 evicky2002	2026-05-25 06:00:00 (2 weeks ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇬🇧 sc user	2026-05-13 11:51:43 (3 weeks ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan
🇫🇷 SpaceHost-Server	2026-05-12 22:29:51 (4 weeks ago)		Brute-Force Web App Attack
🇬🇧 sc user	2026-05-12 04:42:38 (4 weeks ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan
🇬🇧 sc user	2026-05-11 03:15:26 (4 weeks ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan
Anonymous	2026-05-09 13:02:43 (1 month ago)	Pre-existing entry (Attributed to: Angara Technologies Group / mikhail-smirnov-79830322)	Web App Attack
🇳🇱 Site.eu	2026-05-09 03:03:21 (1 month ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-05-09 02:20:32 (1 month ago)	host-ipset-guard auto-report; server=server.tmg.gr; rule=httpd-suspicious-path; count=7/6; duration= ... show more host-ipset-guard auto-report; server=server.tmg.gr; rule=httpd-suspicious-path; count=7/6; duration=72h; scope=server.tmg.gr; country=UA; sites=global,crm.tmg.gr,registration.tmg.gr,tmg.gr.forms; samples=/ \| /wordpress \| /wp show less	Hacking Web App Attack
🇬🇧 andypiper	2026-05-09 01:01:22 (1 month ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇮🇹 sssrit	2026-05-09 00:02:22 (1 month ago)	185.242.3.48 - - [09/May/2026:02:02:21 +0200] "GET /wordpress HTTP/1.1" 404 40587 "-" "-" ...	Web App Attack
🇩🇪 Jarda_H	2026-05-08 23:51:52 (1 month ago)	http-probing	Web App Attack
🇩🇪 updown.io	2026-05-08 23:29:43 (1 month ago)	{"level":"info","ts":1778262392.8787127,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1778262392.8787127,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"185.242.3.48","remote_port":"60939","client_ip":"185.242.3.48","proto":"HTTP/1.1","method":"GET","host":"status.sparkpa.org","uri":"/","headers":{}},"bytes_read":0,"user_id":"","duration":0.000054084,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://status.sparkpa.org/"],"Content-Type":[]}} {"level":"info","ts":1778263269.7721527,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"185.242.3.48","remote_port":"52716","client_ip":"185.242.3.48","proto":"HTTP/1.1","method":"GET","host":"uptime.spidrweb.co.uk","uri":"/","headers":{}},"bytes_read":0,"user_id":"","duration":0.000062579,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://uptime.spidrweb.co.uk/"],"Content-Type":[]}} {"level":"info","ts":1778263269.7721527,"logger":"http.log.access.lo ... show less	DDoS Attack Web App Attack
🇳🇱 Site.eu	2026-05-08 23:22:59 (1 month ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇮🇳 Genhost	2026-05-08 23:21:37 (1 month ago)	SCANNING OF PHP SHELL FILES	Brute-Force SSH

Showing 1 to 15 of 420 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.139.218

127.0.0.1

🇳🇱 81.19.216.114

🇭🇰 223.197.178.95

🇺🇸 192.142.2.40

🇧🇷 189.73.51.142

🇨🇦 51.79.99.235

🇺🇸 34.82.23.50

🇺🇸 3.83.245.221

🇺🇸 208.69.84.112

🇮🇳 182.64.3.134

🇰🇷 175.198.62.180

🇷🇺 109.207.88.47

🇮🇳 103.248.94.27

🇺🇸 99.75.72.11

🇸🇬 68.183.234.194

🇺🇸 34.23.209.77

🇺🇸 34.20.137.37

🇳🇱 5.255.99.123

🇺🇸 162.239.89.55