IP address

Search at other sites:

.000185.242.3.108

Shodan(more info)

Passive DNS

IP blacklists

CI Army

185.242.3.108 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-02-03 03:50:00.949000
Was present on blacklist at: 2026-01-29 03:50, 2026-01-30 03:50, 2026-01-31 03:50, 2026-02-01 03:50, 2026-02-02 03:50, 2026-02-03 03:50

AbuseIPDB

185.242.3.108 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-02-07 05:00:00.672000
Was present on blacklist at: 2026-01-31 05:00, 2026-02-01 05:00, 2026-02-02 05:00, 2026-02-07 05:00

Spamhaus SBL

185.242.3.108 is listed on the Spamhaus SBL blacklist.

Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-03-25 17:40:30.071000
Was present on blacklist at: 2026-02-04 17:40, 2026-02-11 17:40, 2026-02-18 17:40, 2026-02-25 17:40, 2026-03-04 17:40, 2026-03-11 17:40, 2026-03-18 17:40, 2026-03-25 17:40

Spamhaus DROP

185.242.3.108 is listed on the Spamhaus DROP blacklist.

Description: Spamhaus DROP (Don't Route Or Peer) list. Netblocks controlled by spammers or cyber criminals. The DROP lists are a tiny subset of the SBL, designed for use by firewalls and routing equipment to filter out the malicious traffic from these netblocks.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-03-25 17:40:30.071000
Was present on blacklist at: 2026-02-04 17:40, 2026-02-11 17:40, 2026-02-18 17:40, 2026-02-25 17:40, 2026-03-04 17:40, 2026-03-11 17:40, 2026-03-18 17:40, 2026-03-25 17:40

DShield Block

185.242.3.108 was recently listed on the DShield Block blacklist, but currently it is not.

Description: Recommended Block List by DShield.org. It summarizes the top 20 attacking<br>class C (/24) subnets over the last three days.
Type of feed: secondary (feed detail page)

Last checked at: 2026-03-26 04:50:00
Was present on blacklist at: 2026-03-23 04:50

Threat categories

TL	Role	Category	Details
No threat category tags assigned

---

Warden events (88)

2026-03-12

ReconScanning (node.f90c6b): 2

2026-02-06

ReconScanning (node.368407): 5

AnomalyTraffic (node.ffe95c): 1

ReconScanning (node.4dc198): 1

2026-02-05

ReconScanning (node.368407): 7

ReconScanning (node.4dc198): 1

2026-02-04

AnomalyTraffic (node.ffe95c): 2

ReconScanning (node.4dc198): 7

ReconScanning (node.368407): 8

ReconScanning (node.9c1411): 1

2026-02-03

AnomalyTraffic (node.ffe95c): 1

ReconScanning (node.4dc198): 3

ReconScanning (node.368407): 2

2026-02-02

ReconScanning (node.368407): 2

ReconScanning (node.4dc198): 2

AnomalyTraffic (node.ffe95c): 2

2026-02-01

ReconScanning (node.368407): 5

ReconScanning (node.4dc198): 9

AnomalyTraffic (node.ffe95c): 2

2026-01-31

ReconScanning (node.368407): 3

AnomalyTraffic (node.ffe95c): 2

ReconScanning (node.4dc198): 1

2026-01-30

ReconScanning (node.368407): 3

ReconScanning (node.4dc198): 6

AnomalyTraffic (node.ffe95c): 1

2026-01-29

ReconScanning (node.368407): 3

ReconScanning (node.4dc198): 2

2026-01-28

ReconScanning (node.4dc198): 2

ReconScanning (node.368407): 2

OTX pulses

[697f536887ca2766fd59e3c8] 2026-02-01 13:21:44.948000 | PostgresQL honeypot logs for 2026-02-01

Author name:	jnazario
Pulse modified:	2026-02-01 13:21:44.948000
Indicator created:	2026-02-01 13:21:45
Indicator role:	None
Indicator title:
Indicator expiration:	2026-03-03 13:00:00

Origin AS

AS60223 - NETIFACE-AS

BGP Prefix

185.242.3.0/24

geo

Netherlands

🕑 Europe/Amsterdam

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

185.242.0.0 - 185.242.3.255

last_activity

2026-03-12 22:10:56

last_warden_event

2026-03-12 22:10:56

rep

0.0

reserved_range

0

ts_added

2026-01-28 17:40:27.168000

ts_last_update

2026-03-26 17:40:30.076000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses