JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.121.138.166

185.121.138.166

Neutral Activity

15 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Hydra Communications Ltd

Usage Type

Fixed Line ISP

ASN

AS25369

Hostname(s)

166.138.121.185.baremetal.zare.com

Domain Name

hydracom.co.uk

Country

🇬🇧 United Kingdom of Great Britain and Northern Ireland

City

London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

185.121.138.166 has been reported 15 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 185.121.138.166:

This IP address has been reported a total of 15 times from 7 distinct sources. 185.121.138.166 was first reported on May 22nd 2021, and the most recent report was 7 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-02-04 07:02:04 (7 months ago)	(mod_security) mod_security (id:210740) triggered by 185.121.138.166 (166.138.121.185.baremetal.zare ... show more (mod_security) mod_security (id:210740) triggered by 185.121.138.166 (166.138.121.185.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 04 02:01:54.464147 2026] [security2:error] [pid 19611:tid 19611] [client 185.121.138.166:42415] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|tulsatvmemories.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "tulsatvmemories.com"] [uri "/chewsept.html/trackback/"] [unique_id "aYLu4tRQQhFnbh3zvRtdTAAAAA8"], referer: http://tulsatvmemories.com/chewsept.html/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-12-16 00:05:59 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 185.121.138.166 (166.138.121.185.baremetal.zare ... show more (mod_security) mod_security (id:210740) triggered by 185.121.138.166 (166.138.121.185.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 15 19:05:52.737959 2024] [security2:error] [pid 25711:tid 25711] [client 185.121.138.166:40078] [client 185.121.138.166] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|www.bigchus.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bigchus.com"] [uri "/caleidoscopia/wp-comments-post.php"] [unique_id "Z19u4CsEmTQkkPqBkxtKtwAAAAs"], referer: http://www.bigchus.com/caleidoscopia/?p=438 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 thefoofighter	2024-12-12 15:47:51 (1 year ago)	[Thu Dec 12 15:47:48.813986 2024] [:error] [pid 4148787] [client 185.121.138.166:60427] [client 185. ... show more [Thu Dec 12 15:47:48.813986 2024] [:error] [pid 4148787] [client 185.121.138.166:60427] [client 185.121.138.166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sourcemodding.com"] [uri "/tutorials/generic/source-control/introduction-to-perforce/trackback/"] [unique_id "Z1sFpEm1reFdwnnSjPLv5wAAAAk"], referer: https://www.sourcemodding.com/tutorials/generic/source-control/introduction-to-perforce/trackback/ [Thu Dec 12 15:47:50.965518 2024] [:error] [pid 4148847] [client 185.121.138.166:40472] [client 185.121.138.166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/ ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-12-10 04:33:27 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 185.121.138.166 (166.138.121.185.baremetal.zare ... show more (mod_security) mod_security (id:210740) triggered by 185.121.138.166 (166.138.121.185.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 09 23:33:23.717903 2024] [security2:error] [pid 1581253:tid 1581253] [client 185.121.138.166:43038] [client 185.121.138.166] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|zabyte.net\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "zabyte.net"] [uri "/trackback/"] [unique_id "Z1fEk1JF8MbZ9mEWKwIx8AAAAAE"], referer: http://zabyte.net/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-12-09 09:01:35 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 185.121.138.166 (166.138.121.185.baremetal.zare ... show more (mod_security) mod_security (id:210740) triggered by 185.121.138.166 (166.138.121.185.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 09 04:01:31.800753 2024] [security2:error] [pid 27437:tid 27460] [client 185.121.138.166:40283] [client 185.121.138.166] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|danelandia.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "danelandia.com"] [uri "/uncategorized/hello-world-0804/trackback/"] [unique_id "Z1ax6x8Fw_IFzQYCZLkYiwAAAJQ"], referer: http://danelandia.com/uncategorized/hello-world-0804/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-12-09 06:56:52 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 185.121.138.166 (166.138.121.185.baremetal.zare ... show more (mod_security) mod_security (id:210740) triggered by 185.121.138.166 (166.138.121.185.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 09 01:56:48.415720 2024] [security2:error] [pid 2950562:tid 2950562] [client 185.121.138.166:50099] [client 185.121.138.166] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|dragonflytunes.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "dragonflytunes.com"] [uri "/contact-us/trackback/"] [unique_id "Z1aUsIFTl2Y4QVCDULCaSQAAAAc"], referer: http://dragonflytunes.com/contact-us/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-15 07:56:25 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 185.121.138.166 (166.138.121.185.baremetal.zare ... show more (mod_security) mod_security (id:210740) triggered by 185.121.138.166 (166.138.121.185.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 15 02:56:14.682707 2024] [security2:error] [pid 26556:tid 26556] [client 185.121.138.166:45440] [client 185.121.138.166] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|gdhlgroup.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "gdhlgroup.com"] [uri "/uncategorized/hello-world/trackback/"] [unique_id "Zzb-nt-bol9Cv-1u3iqbqwAAAAU"], referer: http://gdhlgroup.com/uncategorized/hello-world/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-13 04:58:30 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 185.121.138.166 (166.138.121.185.baremetal.zare ... show more (mod_security) mod_security (id:210740) triggered by 185.121.138.166 (166.138.121.185.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 12 23:58:25.078567 2024] [security2:error] [pid 16089:tid 16089] [client 185.121.138.166:57757] [client 185.121.138.166] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|circleinthesquare.org\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "circleinthesquare.org"] [uri "/trackback/"] [unique_id "ZzQx8Xmvm7AnRCMF-Yi6mAAAABI"], referer: http://circleinthesquare.org/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-13 00:53:51 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 185.121.138.166 (166.138.121.185.baremetal.zare ... show more (mod_security) mod_security (id:210740) triggered by 185.121.138.166 (166.138.121.185.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 12 19:53:46.559435 2024] [security2:error] [pid 22071:tid 22071] [client 185.121.138.166:54735] [client 185.121.138.166] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|vabq.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "vabq.com"] [uri "/ShearsDesign/contact.html/trackback/"] [unique_id "ZzP4mtNLKUxgeVEun6b0iwAAAAw"], referer: http://vabq.com/ShearsDesign/contact.html/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-30 11:21:20 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 185.121.138.166 (166.138.121.185.baremetal.zare ... show more (mod_security) mod_security (id:210740) triggered by 185.121.138.166 (166.138.121.185.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 30 07:21:15.490229 2024] [security2:error] [pid 13978:tid 13978] [client 185.121.138.166:38341] [client 185.121.138.166] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|home.agingworkforcenews.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "home.agingworkforcenews.com"] [uri "/2006/09/accomodating-older-workers-health.html/trackback/"] [unique_id "ZyIWq4Sg_Op2ItNOVlZB4wAAABA"], referer: http://home.agingworkforcenews.com/2006/09/accomodating-older-workers-health.html/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇻🇳 Xuan Can	2024-01-21 23:47:21 (2 years ago)	(mod_security) mod_security (id:6) triggered by 185.121.138.166 (GB/United Kingdom/166.138.121.185.b ... show more (mod_security) mod_security (id:6) triggered by 185.121.138.166 (GB/United Kingdom/166.138.121.185.baremetal.zare.com): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 22 06:47:15.133582 2024] [security2:error] [pid 24228:tid 47466659489536] [client 185.121.138.166:33884] [client 185.121.138.166] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "63"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "Za2tAzlpUvpBrpwpTxMhZgAAAJM"], referer: https://kb.pavietnam.vn/ show less	Brute-Force SSH
🇬🇧 Steve	2024-01-08 09:53:03 (2 years ago)	Excessive crawling - not obeying robots.txt	Bad Web Bot
Anonymous	2023-07-28 03:52:05 (3 years ago)	Comment posting abuse	Hacking Brute-Force
🇨🇭 backslash	2021-10-31 01:21:34 (4 years ago)	Trackback-Spam	Brute-Force
🇩🇪 Fehlfarbe	2021-05-22 02:51:37 (5 years ago)	Ping-Back auf merkwürdige Seite	Web Spam Blog Spam Port Scan

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 47.250.158.140

🇬🇧 172.253.82.20

🇺🇸 162.216.149.7

🇸🇬 159.223.59.82

🇳🇱 158.94.209.239

🇯🇵 152.32.201.217

🇺🇸 147.185.132.123

🇨🇳 140.205.85.6

🇰🇷 121.188.221.166

🇬🇧 101.36.97.131

🇫🇷 91.231.89.237

🇬🇧 35.203.211.123

🇭🇰 34.96.156.217

🇸🇬 31.76.191.164

🇰🇷 1.209.110.147

🇵🇹 195.23.192.169

🇳🇱 193.176.31.231

🇧🇷 187.17.230.168

🇬🇧 185.247.137.54

🇵🇾 181.127.92.83