JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.242.3.49

185.242.3.49 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 100%: ?

100%

ISP	Felcloud
Usage Type	Data Center/Web Hosting/Transit
ASN	AS401626
Domain Name	felcloud.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.242.3.49

Whois 185.242.3.49

IP Abuse Reports for 185.242.3.49:

This IP address has been reported a total of 26 times from 20 distinct sources. 185.242.3.49 was first reported on July 1st 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 notelseit	2026-07-06 23:05:42 (3 hours ago)	2026-07-07T01:05:41.537129+02:00 mail postfix/submission/smtpd[1103479]: lost connection after CONNE ... show more 2026-07-07T01:05:41.537129+02:00 mail postfix/submission/smtpd[1103479]: lost connection after CONNECT from unknown[185.242.3.49] 2026-07-07T01:05:41.574038+02:00 mail postfix/smtpd[1103161]: lost connection after CONNECT from unknown[185.242.3.49] 2026-07-07T01:05:41.725395+02:00 mail postfix/smtps/smtpd[1103478]: lost connection after CONNECT from unknown[185.242.3.49] ... show less	Brute-Force Email Spam
🇮🇩 xveil	2026-07-06 19:12:59 (7 hours ago)	2026-07-07T02:12:56.526701 mail-honeypot postfix/submission/smtpd[1994]: warning: unknown[185.242.3. ... show more 2026-07-07T02:12:56.526701 mail-honeypot postfix/submission/smtpd[1994]: warning: unknown[185.242.3.49]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇮🇩 xveil	2026-07-04 16:15:42 (2 days ago)	2026-07-04T23:15:40.474946 mail-honeypot postfix/submission/smtpd[17455]: warning: unknown[185.242.3 ... show more 2026-07-04T23:15:40.474946 mail-honeypot postfix/submission/smtpd[17455]: warning: unknown[185.242.3.49]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇹🇭 thaizone.com	2026-07-04 15:48:39 (2 days ago)	Mail credential brute-force attack (SM6) #1	Email Spam Brute-Force
🇳🇱 e.fierstra	2026-07-04 10:43:57 (2 days ago)	Failed SMTP logins	Brute-Force
🇷🇴 iulianh	2026-07-03 17:16:49 (3 days ago)	25,465,587	Brute-Force SSH
🇷🇸 Smel	2026-07-03 14:34:19 (3 days ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇦🇩 bakunin1848	2026-07-03 11:29:04 (3 days ago)	Firewall IPS Detection on 03-07-2026 at 13:29:04	Port Scan Exploited Host
🇨🇿 interconnect.cz	2026-07-03 10:53:03 (3 days ago)	[03/Jul/2026 12:52:18] SMTP Spam attack detected from 185.242.3.49, client closed connection before ... show more [03/Jul/2026 12:52:18] SMTP Spam attack detected from 185.242.3.49, client closed connection before SMTP greeting [03/Jul/2026 12:52:28] SMTP Spam attack detected from 185.242.3.49, client closed connection before SMTP greeting [03/Jul/2026 12:53:03] SMTP Spam attack detected from 185.242.3.49, client closed connection before SMTP greeting ... show less	Brute-Force Email Spam
🇫🇮 notelseit	2026-07-03 09:11:32 (3 days ago)	2026-07-03T11:11:31.667567+02:00 mail postfix/smtps/smtpd[507495]: lost connection after CONNECT fro ... show more 2026-07-03T11:11:31.667567+02:00 mail postfix/smtps/smtpd[507495]: lost connection after CONNECT from unknown[185.242.3.49] 2026-07-03T11:11:31.667681+02:00 mail postfix/smtpd[507834]: lost connection after CONNECT from unknown[185.242.3.49] 2026-07-03T11:11:31.667790+02:00 mail postfix/submission/smtpd[507946]: lost connection after CONNECT from unknown[185.242.3.49] ... show less	Brute-Force Email Spam
Anonymous	2026-07-03 05:59:51 (3 days ago)	Authentication failure	Brute-Force
🇮🇩 aaKenshin	2026-07-03 04:29:14 (3 days ago)	Suspicious activity detected from IP 185.242.3.49 based on mailserver logs. Sample logs: 2026-07-03 ... show more Suspicious activity detected from IP 185.242.3.49 based on mailserver logs. Sample logs: 2026-07-03 12:29:04,087 INFO [qtp2102534528-157428] [name=*@.id;ip=172.16.0.182;oip=185.242.3.49;oport=63076;oproto=smtp;port=34922;soapId=1e11d0e4;] soap - AuthRequest elapsed=137 2026-07-03 12:29:13,419 INFO [qtp2102534528-157533] [name=*@.id;ip=172.16.0.182;oip=185.242.3.49;oport=64429;oproto=smtp;port=44940;soapId=1e11d0e5;] SoapEngine - handler exception: authentication failed for [], LDAP error: - unable to ldap authenticate: invalid credentials 2026-07-03 12:29:13,419 INFO [qtp2102534528-157533] [name=@.id;ip=172.16.0.182;oip=185.242.3.49;oport=64429;oproto=smtp;port=44940;soapId=1e11d0e5;] soap - AuthRequest elapsed=145 2026-07-03 12:29:14,384 INFO [qtp2102534528-157510] [name=@.id;ip=172.16.0.182;oip=185.242.3.49;oport=64429;oproto=smtp;port=44942;soapId=1e11d0e6;] SoapEngine - handler exception: authentication failed for [**], LDAP error: - unable to ldap authenticate: i show less	Brute-Force
🇬🇧 SilverZippo	2026-07-03 03:59:07 (3 days ago)	Web App Attack	Web App Attack
🇷🇺 DZBOT	2026-07-03 00:35:23 (4 days ago)	DZBOT. Brute-force users SMTP	Brute-Force
🇺🇸 bigscoots.com	2026-07-02 23:54:18 (4 days ago)	(smtpauth) Failed SMTP AUTH login from 185.242.3.49 (DE/Germany/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 185.242.3.49 (DE/Germany/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-07-02 19:53:57 dovecot_plain authenticator failed for H=(WIN-PV1O3S4G3SG) [185.242.3.49]:58263: 535 Incorrect authentication data ([email protected]) 2026-07-02 19:54:03 dovecot_login authenticator failed for H=(WIN-PV1O3S4G3SG) [185.242.3.49]:58263: 535 Incorrect authentication data ([email protected]) 2026-07-02 19:54:10 dovecot_plain authenticator failed for H=(WIN-PV1O3S4G3SG) [185.242.3.49]:59565: 535 Incorrect authentication data ([email protected]) 2026-07-02 19:54:12 dovecot_login authenticator failed for H=(WIN-PV1O3S4G3SG) [185.242.3.49]:59565: 535 Incorrect authentication data ([email protected]) 2026-07-02 19:54:15 dovecot_plain authenticator failed for H=(WIN-PV1O3S4G3SG) [185.242.3.49]:60856: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇿 213.230.127.104

🇷🇺 213.222.229.77

🇩🇪 213.209.159.154

🇮🇳 183.83.197.226

🇿🇦 105.28.108.165

🇧🇩 103.199.84.156

🇺🇸 44.218.213.38

🇺🇸 24.229.22.106

🇷🇴 2.57.122.150

🇺🇸 2a04:4e40:4410:0:19c:5e5:1e98:e5dd

🇷🇺 213.222.230.2

🇵🇱 212.127.90.124

🇳🇱 193.176.31.201

🇰🇷 112.216.129.27

🇨🇳 111.113.89.97

🇦🇷 45.224.190.82

🇺🇸 45.33.78.24

🇺🇸 44.207.53.4

🇺🇸 44.107.247.30

🇬🇧 35.203.210.220