JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.132.187.82

185.132.187.82 was found in our database!

This IP was reported 146 times. Confidence of Abuse is 8%: ?

ISP	Digital Resources Management S.L.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	digitalrm.es
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.132.187.82

Whois 185.132.187.82

IP Abuse Reports for 185.132.187.82:

This IP address has been reported a total of 146 times from 50 distinct sources. 185.132.187.82 was first reported on May 14th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 BlockIT	2026-06-24 14:07:00 (1 month ago)		Brute-Force
🇺🇸 threatintelligence_bvc	2026-06-23 18:29:47 (1 month ago)		Brute-Force
🇺🇸 threatintelligence_bvc	2026-04-30 23:15:40 (2 months ago)		Brute-Force
🇳🇱 i-turnradio.nl	2026-04-29 16:38:51 (2 months ago)	2026-04-29 @ 18:38:51 (CET) ~ Blocked for trying to access: /wp-content/plugins/filester/assets/css/ ... show more 2026-04-29 @ 18:38:51 (CET) ~ Blocked for trying to access: /wp-content/plugins/filester/assets/css/404.php show less	Web App Attack
🇫🇷 dynamix	2026-04-29 14:23:34 (2 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 horsemedia	2026-04-25 03:24:43 (3 months ago)	probing for exploits /wp-admin/wso.php	Web App Attack
🇫🇷 dynamix	2026-04-25 02:38:43 (3 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-04-06 05:04:55 (3 months ago)	(mod_security) mod_security (id:234930) triggered by 185.132.187.82 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:234930) triggered by 185.132.187.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 01:04:51.416615 2026] [security2:error] [pid 4599:tid 4599] [client 185.132.187.82:50427] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|title6.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "title6.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "adM-83bheU3gW4wZWp0OsAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 TechnoSolutions CL	2026-03-21 07:48:52 (4 months ago)	185.132.187.82 - - [21/Mar/2026:07:48:50 +0000] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 400 ... show more 185.132.187.82 - - [21/Mar/2026:07:48:50 +0000] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 400 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 185.132.187.82 - - [21/Mar/2026:07:48:52 +0000] "GET //2020/wp-includes/wlwmanifest.xml HTTP/1.1" 400 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ... show less	Hacking Brute-Force Bad Web Bot Web App Attack
🇬🇧 pinguin	2026-03-16 23:25:31 (4 months ago)	Triggered Cloudflare WAF (firewallManaged) from BE. Action taken: LOG Protocol: HTTP/1.1 (HEAD metho ... show more Triggered Cloudflare WAF (firewallManaged) from BE. Action taken: LOG Protocol: HTTP/1.1 (HEAD method) Endpoint: /back/www.zip UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-11 06:52:24 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 185.132.187.82 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 185.132.187.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 02:52:16.290359 2026] [security2:error] [pid 29777:tid 29777] [client 185.132.187.82:58025] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|headcount.dev\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "headcount.dev"] [uri "/www.sql"] [unique_id "abERIN75r4mVzDRHfuXKoAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-26 01:04:21 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 185.132.187.82 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.132.187.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 25 20:04:14.390990 2026] [security2:error] [pid 32272:tid 32272] [client 185.132.187.82:63931] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pellman-world.com"] [uri "/.env"] [unique_id "aZ-cDnr7pbARd0vj-PXZUgAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 pinguin	2026-02-26 00:32:42 (5 months ago)	Triggered Cloudflare WAF (firewallManaged) from BE. Action taken: LOG Protocol: HTTP/2 (HEAD method) ... show more Triggered Cloudflare WAF (firewallManaged) from BE. Action taken: LOG Protocol: HTTP/2 (HEAD method) Endpoint: /back/archive.zip UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 consul.to	2026-02-22 14:37:39 (5 months ago)	Web attack/malicious scanning detected	Web App Attack
🇪🇸 gnom4ik	2026-02-21 11:46:32 (5 months ago)	ban-reviewer auto report; ip=185.132.187.82; scenario=http:scan; verdict=valid_ban; confidence=0.85; ... show more ban-reviewer auto report; ip=185.132.187.82; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14,15,18,22; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for 'http:scan' scenario; Port Scan (category 14) is in default categories; Hacking (category 15) is in default categories; Brute-Force (category 18) is in default categories; SSH (category 22) is in default categories show less	Port Scan Hacking Brute-Force SSH

Showing 1 to 15 of 146 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a09:bac5:2a96:2c8::47:61a

🇩🇪 2a09:bac5:2a96:2478::3a2:1d

🇩🇪 2a09:bac5:2a95:1b4b::2b8:15

🇩🇪 2a09:bac5:2a94:28d2::411:29

🇩🇪 2a09:bac5:2a94:1282::1d8:223

🇩🇪 2a09:bac5:2a93:1282::1d8:60

🇺🇸 144.202.92.17

🇬🇭 41.139.10.75

🇩🇪 2a09:bac5:2a92:18f0::27c:6a

🇩🇪 2a09:bac5:2a91:18fa::27d:c1

🇩🇪 2a09:bac5:2a91:2c8::47:650

🇩🇪 2a09:bac5:2a90:2496::3a5:53

🇩🇪 2a09:bac5:2a90:2482::3a3:1c

🇲🇽 189.203.163.10

🇷🇺 178.209.97.14

🇨🇳 113.140.95.250

🇺🇸 104.22.104.77

🇳🇱 80.82.77.202

🇳🇱 45.148.10.183

🇳🇱 45.148.10.157