JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.104.138.120

185.104.138.120 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 20%: ?

20%

ISP	Icomera AB
Usage Type	Fixed Line ISP
ASN	AS398830
Domain Name	icomera.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.104.138.120

Whois 185.104.138.120

IP Abuse Reports for 185.104.138.120:

This IP address has been reported a total of 34 times from 16 distinct sources. 185.104.138.120 was first reported on July 24th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 el-brujo	2026-09-01 09:59:23 (3 weeks ago)	Cloudflare WAF: Request Path: / Request Query: Host: forum.elhacker.net userAgent: Mozilla/5.0 (Win ... show more Cloudflare WAF: Request Path: / Request Query: Host: forum.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 Action: block Source: l7ddos ASN Description: Icomera US, Inc. Country: DE Method: GET Timestamp: 2026-09-01T09:59:23Z ruleId: 9bc0d8e988e545dea9bd4843c4bef55c. Report generated by Cloudflare-WAF-to-AbuseIPDB. show less	Hacking SQL Injection Web App Attack
🇵🇱 MatStef132	2026-08-30 09:18:16 (3 weeks ago)	MatShield L7: blocked on api.klovy.chat (ua-quarantined)	Bad Web Bot
🇵🇱 xdearboy	2026-08-23 14:02:05 (1 month ago)	HAProxy WAF: Blocked 232 requests during DDoS attack on backend default_portfolio_80	DDoS Attack
🇺🇸 Vano Ganzzz	2026-08-23 06:54:22 (1 month ago)	Triggered Cloudflare WAF (l7ddos) from DE. Action taken: BLOCK ASN: 398830 (Icomera US, Inc.) Protoc ... show more Triggered Cloudflare WAF (l7ddos) from DE. Action taken: BLOCK ASN: 398830 (Icomera US, Inc.) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-08-23T06:54:22Z Ray ID: a2f8349c29258d4f UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.0.0 Safari/537.36 show less	DDoS Attack Bad Web Bot
🇺🇸 COMPLEX	2026-07-27 22:40:46 (1 month ago)	Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · at ... show more Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · attempts=1 · SSH banner invalid / banner exchange invalid format show less	Brute-Force SSH
🇫🇷 MatStef132	2026-07-25 09:07:21 (1 month ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
Anonymous	2026-07-20 08:45:45 (2 months ago)	Detected Hacking, SQL Injection or general Web App Attack	Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-07-18 07:04:42 (2 months ago)	HTTP flood against /retreat-corp on Apache webserver	Brute-Force
🇫🇷 MatStef132	2026-07-14 20:21:42 (2 months ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇫🇷 MatStef132	2026-07-13 13:02:49 (2 months ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇹🇷 aphollone	2026-07-11 05:27:00 (2 months ago)	HTTP(S) DDoS traffic against techolay.net. This source IP was observed participating in the coordina ... show more HTTP(S) DDoS traffic against techolay.net. This source IP was observed participating in the coordinated attack during the reported attack window. The exact per-IP request count is unavailable. Supporting Cloudflare and server records are available. show less	DDoS Attack
🇹🇷 aphollone	2026-07-11 05:27:00 (2 months ago)	HTTP(S) DDoS traffic against techolay.net. This source generated approximately 23,840 requests durin ... show more HTTP(S) DDoS traffic against techolay.net. This source generated approximately 23,840 requests during the observed attack window. Supporting server and Cloudflare logs are available. show less	DDoS Attack
🇹🇷 aphollone	2026-07-11 05:27:00 (2 months ago)	HTTP(S) DDoS traffic against techolay.net. This source generated approximately 24 requests during th ... show more HTTP(S) DDoS traffic against techolay.net. This source generated approximately 24 requests during the observed attack window. Supporting server and Cloudflare logs are available. show less	DDoS Attack
🇫🇷 MatStef132	2026-07-05 19:22:59 (2 months ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇫🇷 MatStef132	2026-06-29 23:18:30 (2 months ago)	MatShield L7: blocked on dev.mathost.eu (ua-quarantined)	Bad Web Bot

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.148

🇪🇬 197.44.229.34

🇨🇳 115.190.184.184

🇲🇦 102.78.71.248

🇳🇱 34.6.203.179

🇷🇴 2.57.121.112

🇨🇳 180.76.103.111

🇮🇱 176.106.227.27

🇧🇷 138.94.168.13

🇸🇪 31.208.81.75

🇺🇸 20.98.131.159

🇺🇸 185.180.141.12

🇭🇰 156.225.1.87

🇩🇪 45.92.11.73

🇺🇸 34.11.58.23

🇺🇸 184.17.98.187

🇺🇸 162.216.150.61

🇰🇷 121.130.11.124

🇸🇪 79.136.8.69

🇺🇸 71.235.225.181