Critical Alert
IP 185.238.75.151 is a high-risk threat actor address associated with sustained web application reconnaissance and probing activity, assessed at a maximum threat level of 10/10 by community and sensor reporting standards.
Registered to ZINET.NET.PL Sp. z.o.o. and operating within ASN AS41508 in Poland, this address has accumulated 195 total abuse reports since first being flagged in August 2025, with the most recent activity recorded in May 2026. The 20 most recent reports consistently categorise the malicious behaviour as web application attacks, with detection attributed entirely to automated honeypot sensors. Activity frequency of 4/10 indicates consistent, ongoing engagement with target infrastructure over approximately ten months rather than isolated burst activity.
Web application attacks encompass a broad spectrum of exploitation techniques targeting vulnerabilities in internet-facing software, including but not limited to injection flaws, authentication weaknesses, and information-gathering probes aligned with OWASP Top 10 categories. The persistent, methodical nature of the activity detected from 185.238.75.151 suggests an automated scanning campaign systematically probing for misconfigurations or known vulnerabilities across exposed web services. This reconnaissance poses a concrete risk to unpatched or poorly hardened applications, as successful exploitation could lead to data disclosure, service compromise, or further network penetration.
Administrators should immediately block or rate-limit this address at the network perimeter and consider implementing a Web Application Firewall to detect and neutralise probing patterns. Regular security audits, timely patch management for all internet-facing applications, and enforcement of strong input validation controls will reduce exposure to the attack vectors this actor is observed employing. Automated blocking tools such as fail2ban can ingest honeypot intelligence feeds to proactively defend infrastructure against repeated reconnaissance from this source.
PH 
HK 
UG 
BD 
ID