JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.132.187.54

185.132.187.54 was found in our database!

This IP was reported 151 times. Confidence of Abuse is 0%: ?

ISP	Digital Resources Management S.L.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	digitalrm.es
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.132.187.54

Whois 185.132.187.54

IP Abuse Reports for 185.132.187.54:

This IP address has been reported a total of 151 times from 53 distinct sources. 185.132.187.54 was first reported on April 24th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-04-24 22:42:53 (2 months ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Savvii	2026-03-21 01:27:30 (3 months ago)	10 attempts against mh-misc-ban on lead	Web App Attack
🇫🇷 dynamix	2026-03-19 07:52:28 (3 months ago)	Multiple WAF Violations	Web App Attack
🇬🇧 pinguin	2026-03-15 04:04:59 (3 months ago)	Triggered Cloudflare WAF (firewallManaged) from BE. Action taken: LOG Protocol: HTTP/1.1 (HEAD metho ... show more Triggered Cloudflare WAF (firewallManaged) from BE. Action taken: LOG Protocol: HTTP/1.1 (HEAD method) Endpoint: /backups/bak.zip UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-05 08:20:12 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 185.132.187.54 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 185.132.187.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 05 03:20:06.183092 2026] [security2:error] [pid 25900:tid 25900] [client 185.132.187.54:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|eddysgroup.com\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "eddysgroup.com"] [uri "/backups/wallet.dat"] [unique_id "aak8tqUYVscEwYuwd0qvCwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-26 08:23:21 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 185.132.187.54 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.132.187.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 26 03:23:13.449784 2026] [security2:error] [pid 31293:tid 31293] [client 185.132.187.54:62587] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "powderriverinc.com"] [uri "/.env"] [unique_id "aaAC8ThG3Yyc8FwoVo29BgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 pinguin	2026-02-26 00:32:40 (4 months ago)	Triggered Cloudflare WAF (firewallManaged) from BE. Action taken: LOG Protocol: HTTP/2 (HEAD method) ... show more Triggered Cloudflare WAF (firewallManaged) from BE. Action taken: LOG Protocol: HTTP/2 (HEAD method) Endpoint: /restore/bak.rar UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-02-24 21:20:21 (4 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇵🇾 armandosaucedo.me	2026-02-24 10:44:17 (4 months ago)	185.132.187.54 - - [24/Feb/2026:10:44:06 +0000] "GET /cryptoconfrontation.com.zip HTTP/1.1" 404 196 ... show more 185.132.187.54 - - [24/Feb/2026:10:44:06 +0000] "GET /cryptoconfrontation.com.zip HTTP/1.1" 404 196 "-" "-" show less	Web App Attack
Anonymous	2026-02-22 21:55:04 (4 months ago)	[redacted] 185.132.187.54 - - [22/Feb/2026:22:54:59 +0100] "GET /wp-admin/css/colors/tfileman.php HT ... show more [redacted] 185.132.187.54 - - [22/Feb/2026:22:54:59 +0100] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" [redacted] 185.132.187.54 - - [22/Feb/2026:22:54:59 +0100] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" [redacted] 185.132.187.54 - - [22/Feb/2026:22:55:00 +0100] "GET /wp-admin/maint/cong.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" [redacted] 185.132.187.54 - - [22/Feb/2026:22:55:00 +0100] "GET /wp-admin/css/glex.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR ... show less	Hacking Web App Attack
🇬🇧 consul.to	2026-02-22 15:45:12 (4 months ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-02-21 21:15:07 (4 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇪🇸 gnom4ik	2026-02-21 11:51:10 (4 months ago)	ban-reviewer auto report; ip=185.132.187.54; scenario=http:scan; verdict=valid_ban; confidence=0.85; ... show more ban-reviewer auto report; ip=185.132.187.54; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14,15,18; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for 'Port Scan' (category 14) in abuseipdb context; IP involved in 'http:scan' scenario; Decision made by CAPI with 7920m duration (132h); IP has no active decisions in lookback window but shows scan behavior show less	Port Scan Hacking Brute-Force
🇺🇸 threatintelligence_bvc	2026-02-21 07:44:43 (4 months ago)		Brute-Force
Anonymous	2026-02-18 21:10:09 (4 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking

Showing 1 to 15 of 151 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 202.105.98.252

🇳🇱 45.148.10.157

🇬🇧 2a06:4883:7000::89

🇺🇸 216.25.89.95

🇺🇸 194.180.237.99

🇺🇸 185.61.221.17

🇨🇱 179.8.113.28

🇺🇸 108.6.43.152

🇮🇩 103.165.227.178

🇮🇩 103.132.237.18

🇨🇳 101.96.221.207

🇨🇳 101.96.199.69

🇺🇸 72.253.251.3

🇫🇷 54.38.241.200

🇳🇱 46.151.178.13

🇺🇸 44.170.110.86

🇺🇸 40.124.174.155

🇬🇧 35.203.211.142

🇹🇼 34.81.72.185

🇸🇪 194.68.17.149