JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.137.164.10

185.137.164.10 was found in our database!

This IP was reported 208 times. Confidence of Abuse is 100%: ?

100%

ISP	IPLuo BV
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	ipluo.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.137.164.10

Whois 185.137.164.10

IP Abuse Reports for 185.137.164.10:

This IP address has been reported a total of 208 times from 98 distinct sources. 185.137.164.10 was first reported on March 14th 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 Olexiy Backend	2026-07-22 23:51:35 (1 hour ago)	185.137.164.10 ...	Bad Web Bot Web App Attack
🇩🇪 4server	2026-07-22 22:28:42 (3 hours ago)	[ThuJul2300:28:39.1994062026][security2:error][pid718653:tid718787][client185.137.164.10:0]ModSecuri ... show more [ThuJul2300:28:39.1994062026][security2:error][pid718653:tid718787][client185.137.164.10:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"www.bluecirclecapital.ch.136-243-54-122.cpanel.site\"][uri\"/.git/HEAD\"][unique_id\"amFEF34GBSPJjaEbNzMSiAAAABc\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 Ba-Yu	2026-07-22 22:28:20 (3 hours ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇵🇱 nakordoni.eu	2026-07-22 19:30:04 (6 hours ago)	Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matc ... show more Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matches. ISP: IPLuo BV (DE), Usage: Data Center/Web Hosting/Transit. Prior AbuseIPDB score at ban time: 100/100. show less	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-22 05:41:06 (19 hours ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 185.137.164.10 (MA/Morocco/-): 1 in t ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 185.137.164.10 (MA/Morocco/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇳🇿 Antinson	2026-07-22 04:34:09 (20 hours ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇩🇪 louis77	2026-07-21 21:08:48 (1 day ago)	Sensitive file access attempt - Path: /.git/HEAD, Method: GET, UA: Python-urllib/3.10	Web App Attack Hacking
🇫🇷 YF	2026-07-21 12:30:42 (1 day ago)	Git HEAD exposure probe	Web App Attack
🇦🇺 paulshipley.com.au	2026-07-21 12:01:40 (1 day ago)	[Tue Jul 21 22:01:39.297511 2026] [security2:error] [pid 240290] [client 185.137.164.10:30715] [clie ... show more [Tue Jul 21 22:01:39.297511 2026] [security2:error] [pid 240290] [client 185.137.164.10:30715] [client 185.137.164.10] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/.git/HEAD"] [unique_id "al9fo07MIEJX-uj9iM3YuwAAAAU"] ... show less	Web App Attack
🇩🇪 Blexyel	2026-07-21 10:41:38 (1 day ago)	185.137.164.10 - - [21/Jul/2026:12:41:38 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Python-urll ... show more 185.137.164.10 - - [21/Jul/2026:12:41:38 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Python-urllib/3.10" "pingusmc.org" ... show less	Brute-Force Web App Attack
🇮🇳 evicky2002	2026-07-21 06:00:00 (1 day ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 dispaisyenterprises	2026-07-21 04:36:32 (1 day ago)	Triggered Cloudflare WAF (bic) from DE. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /.git/H ... show more Triggered Cloudflare WAF (bic) from DE. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /.git/HEAD \| UA: Python-urllib/3.10 • Reported by DisPaisy Enterprises (dispaisy.systems) show less	Bad Web Bot
Anonymous	2026-07-20 16:32:06 (2 days ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇺🇸 TPI-Abuse	2026-07-20 14:41:06 (2 days ago)	(mod_security) mod_security (id:949110) triggered by 185.137.164.10 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:949110) triggered by 185.137.164.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 10:41:00.416317 2026] [security2:error] [pid 3129219:tid 3129219] [client 185.137.164.10:24893] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hotelrevabookings.com.hamiltonbookings.com"] [uri "/.git/HEAD"] [unique_id "al4zfECsZsM13FliQn8GfAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Lino Project	2026-07-20 14:03:06 (2 days ago)	185.137.164.10 - - [20/Jul/2026:16:03:02 +0200] "GET /.git/HEAD HTTP/1.1" 301 761 "-" "Python-urllib ... show more 185.137.164.10 - - [20/Jul/2026:16:03:02 +0200] "GET /.git/HEAD HTTP/1.1" 301 761 "-" "Python-urllib/3.10" ... show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 208 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇹 196.188.93.169

🇨🇷 186.15.99.141

🇺🇸 129.121.75.215

🇸🇬 68.178.160.25

🇺🇸 216.194.172.68

🇺🇸 205.210.31.37

🇹🇼 198.235.24.115

🇹🇼 198.235.24.55

🇹🇼 198.235.24.52

🇹🇼 198.235.24.49

🇬🇧 193.163.125.230

🇳🇱 185.226.197.52

🇪🇨 181.199.59.230

🇧🇷 179.214.126.105

🇸🇪 171.25.158.68

🇮🇩 163.7.8.79

🇫🇮 147.185.133.94

🇲🇺 102.161.15.52

🇷🇴 92.118.39.77

🇨🇦 51.161.8.211