JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.199.136.184

138.199.136.184 was found in our database!

This IP was reported 67 times. Confidence of Abuse is 69%: ?

69%

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	static.184.136.199.138.clients.your-server.de
Domain Name	hetzner.com
Country	🇩🇪 Germany
City	Falkenstein, Saxony

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.199.136.184

Whois 138.199.136.184

IP Abuse Reports for 138.199.136.184:

This IP address has been reported a total of 67 times from 37 distinct sources. 138.199.136.184 was first reported on December 13th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-20 19:40:14 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 138.199.136.184 (static.184.136.199.138.clients ... show more (mod_security) mod_security (id:210730) triggered by 138.199.136.184 (static.184.136.199.138.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 15:40:11.522753 2026] [security2:error] [pid 26361:tid 26361] [client 138.199.136.184:34204] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.dalessalesandservice.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dalessalesandservice.com"] [uri "/about-us/[email protected]"] [unique_id "ajbsm5h9lYt7B3CEScJJqgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇷 setupgr	2026-06-18 18:23:03 (3 days ago)	(mod_security) mod_security (id:11000011) triggered by 138.199.136.184 (DE/Germany/Saxony/Falkenstei ... show more (mod_security) mod_security (id:11000011) triggered by 138.199.136.184 (DE/Germany/Saxony/Falkenstein/-/[AS24940 HETZNER-AS]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 18 21:22:59.978217 2026] [security2:error] [pid 3299840:tid 3376328] [remote 138.199.136.184:37322] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "clients.your-server.de" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "131"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: static.184.136.199.138.clients.your-server.de"] [severity "CRITICAL"] [hostname "cpanagiotou.gr"] [uri "/%CE%B5%CF%80%CE%B9%CE%BA%CE%BF%CE%B9%CE%BD%CF%89%CE%BD%CE%AF%CE%B1/"] [unique_id "ajQ3g8_FiMTLiRjcoVqTfgABWCI"] show less	Port Scan
🇩🇪 strzonnek	2026-06-16 18:36:13 (5 days ago)	attack on webform	Brute-Force Web App Attack
🇬🇷 setupgr	2026-06-15 19:53:33 (6 days ago)	(mod_security) mod_security (id:11000011) triggered by 138.199.136.184: 1 in the last 86400 secs; Po ... show more (mod_security) mod_security (id:11000011) triggered by 138.199.136.184: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 15 22:53:28.840185 2026] [security2:error] [pid 1917021:tid 1917122] [remote 138.199.136.184:59210] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "clients.your-server.de" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: static.184.136.199.138.clients.your-server.de"] [hostname "babis.photo"] [uri "/"] [unique_id "ajBYMw799xbSHUG5HIrgVgAA0QA"] show less	Port Scan
🇺🇸 Charlesiv	2026-06-14 12:00:59 (1 week ago)	Triggered Cloudflare WAF (botFight) from DE. Action taken: MANAGED_CHALLENGE ASN: 24940 (Hetzner Onl ... show more Triggered Cloudflare WAF (botFight) from DE. Action taken: MANAGED_CHALLENGE ASN: 24940 (Hetzner Online GmbH) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-06-14T11:29:06Z Ray ID: a0b8fecd4e65dbd8 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-06-14 01:32:19 (1 week ago)	2026-06-14 03:32:18 ERROR util.AccessViolations - 138.199.136.184 report to fail2ban - action: block ... show more 2026-06-14 03:32:18 ERROR util.AccessViolations - 138.199.136.184 report to fail2ban - action: block ... show less	Hacking Brute-Force Bad Web Bot
🇬🇷 setupgr	2026-06-13 00:37:02 (1 week ago)	(mod_security) mod_security (id:11000011) triggered by 138.199.136.184: 1 in the last 86400 secs; Po ... show more (mod_security) mod_security (id:11000011) triggered by 138.199.136.184: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 03:36:56.873736 2026] [security2:error] [pid 566853:tid 567007] [remote 138.199.136.184:53648] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "clients.your-server.de" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: static.184.136.199.138.clients.your-server.de"] [hostname "villa-izabela.com"] [uri "/"] [unique_id "aiymKJRIuzvfUdGz6DmdygABRRg"] show less	Port Scan
🇬🇷 setupgr	2026-06-12 21:24:48 (1 week ago)	(mod_security) mod_security (id:11000011) triggered by 138.199.136.184: 1 in the last 86400 secs; Po ... show more (mod_security) mod_security (id:11000011) triggered by 138.199.136.184: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 00:24:44.436288 2026] [security2:error] [pid 351324:tid 351459] [remote 138.199.136.184:45332] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "clients.your-server.de" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: static.184.136.199.138.clients.your-server.de"] [hostname "pankoskal.gr"] [uri "/product-category/%CE%B3%CE%B5%CE%BD%CE%B9%CE%BA%CE%AE%CF%82-%CF%87%CF%81%CE%AE%CF%83%CE%B7%CF%82/"] [unique_id "aix5HK6PDvwc_i5kBP5bhgAAwAg"] show less	Port Scan
🇩🇪 ITSNF	2026-06-09 02:20:06 (1 week ago)	Blocked by os-abuseipdb; 11 hits, proto=tcp, ports=80	Port Scan Hacking
🇮🇹 Progetto1	2026-06-08 11:15:02 (2 weeks ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇬🇧 Oakley	2026-06-04 01:29:58 (2 weeks ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇺🇸 LotPhantom	2026-06-03 15:53:02 (2 weeks ago)	2026/06/03 15:53:02 [error] 46370#46370: 11018 connect() failed (111: Connection refused) while con ... show more 2026/06/03 15:53:02 [error] 46370#46370: 11018 connect() failed (111: Connection refused) while connecting to upstream, client: 138.199.136.184, server: wynnesmiles.com, request: "GET / HTTP/2.0", upstream: "http://127.0.0.1:4001/", host: "www.wynnesmiles.com" ... show less	Web App Attack
Anonymous	2026-06-03 10:30:00 (2 weeks ago)	form spam	Web Spam
🇭🇳 unph	2026-06-03 09:57:43 (2 weeks ago)	Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin	Brute-Force
🇫🇷 Sklurk	2026-06-03 08:09:19 (2 weeks ago)	Web App Attack	Web App Attack

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.222.101.194

🇷🇴 193.46.255.86

🇹🇷 185.226.93.62

🇭🇰 118.26.36.195

🇳🇱 91.92.40.52

🇩🇪 77.36.8.13

🇵🇱 70.34.253.190

🇳🇱 45.148.10.147

🇺🇸 195.184.76.117

🇬🇧 185.216.145.183

🇸🇬 185.200.116.83

🇷🇺 178.210.53.133

🇫🇷 145.239.10.137

🇨🇳 121.229.107.184

🇮🇳 103.203.37.101

🇵🇱 89.68.245.7

🇺🇸 47.90.196.34

🇩🇪 213.209.159.108

🇳🇱 178.62.133.230

🇩🇪 167.94.145.29