JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.137.164.14

185.137.164.14 was found in our database!

This IP was reported 189 times. Confidence of Abuse is 97%: ?

97%

ISP	IPLuo BV
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	ipluo.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.137.164.14

Whois 185.137.164.14

IP Abuse Reports for 185.137.164.14:

This IP address has been reported a total of 189 times from 88 distinct sources. 185.137.164.14 was first reported on October 6th 2023, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 mail.avx.gr	2026-07-23 11:30:04 (2 days ago)	Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 185.137.164.14 - - [17/Jul/2026:02:10:52 +0300] " ... show more Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 185.137.164.14 - - [17/Jul/2026:02:10:52 +0300] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Python-urllib/3.10" show less	Web App Attack
Anonymous	2026-07-21 06:07:49 (4 days ago)	"GET /.git/HEAD HTTP/1.1"	Hacking Web App Attack
🇨🇭 4server	2026-07-21 02:10:19 (4 days ago)	[TueJul2104:10:15.5722372026][security2:error][pid792:tid924][client185.137.164.14:0]ModSecurity:Acc ... show more [TueJul2104:10:15.5722372026][security2:error][pid792:tid924][client185.137.164.14:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.xn--sanierung-feuchter-wnde-schweiz-9vc.ch.xn--walter-wrndli-pmb.ch\"][uri\"/.git/HEAD\"][unique_id\"al7VB-5ZQKBCSwRHOXtmvQAAAEA\"] show less	Hacking Web App Attack
🇳🇱 debestelapp	2026-07-20 18:41:47 (5 days ago)		Web App Attack
🇮🇳 evicky2002	2026-07-18 06:00:00 (1 week ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇫🇷 masterguru	2026-07-17 16:41:22 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 185.137.164.14 (MA/Morocco/-): 1 in t ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 185.137.164.14 (MA/Morocco/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 mail.avx.gr	2026-07-17 13:22:10 (1 week ago)	Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 185.137.164.14 - - [17/Jul/2026:02:10:52 +0300] " ... show more Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 185.137.164.14 - - [17/Jul/2026:02:10:52 +0300] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Python-urllib/3.10" show less	Web App Attack
🇩🇪 tsZero	2026-07-17 06:45:07 (1 week ago)	Scan example: path=/.git/HEAD status=302	Hacking
🇨🇭 filou812	2026-07-17 06:08:52 (1 week ago)	url tried is "/.git/HEAD"	Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 05:58:14 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 185.137.164.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.137.164.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 01:58:08.881511 2026] [security2:error] [pid 22800:tid 22800] [client 185.137.164.14:26575] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sayhellotometamodernism.com.demberdatabase.com"] [uri "/.git/HEAD"] [unique_id "alnEcBgpQ_7qVjUBT9VyhQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 05:41:57 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 185.137.164.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.137.164.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 01:41:50.417678 2026] [security2:error] [pid 332871:tid 332871] [client 185.137.164.14:52773] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sangalgano.montepulciano.org"] [uri "/.git/HEAD"] [unique_id "alnAnlVC-_w97Z2dVNIEKwAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 05:06:11 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 185.137.164.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.137.164.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 01:06:07.078512 2026] [security2:error] [pid 20577:tid 20577] [client 185.137.164.14:62629] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "medusakenya.co.ke"] [uri "/.git/HEAD"] [unique_id "alm4P6lMztnYqkBAUdjwOwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 04:29:52 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 185.137.164.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.137.164.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 00:29:46.231594 2026] [security2:error] [pid 24264:tid 24357] [client 185.137.164.14:38679] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.resort4pets.petsentiments.com"] [uri "/.git/HEAD"] [unique_id "almvuj9k8T8vvy_YhO8X7QAAAg8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 03:01:43 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 185.137.164.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.137.164.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 23:01:39.127150 2026] [security2:error] [pid 14448:tid 14448] [client 185.137.164.14:26135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.martinka.martinka.org"] [uri "/.git/HEAD"] [unique_id "almbE3ifMugTzU4Z_6V4uAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 AvonleaConsulting	2026-07-17 02:03:55 (1 week ago)	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	Bad Web Bot Web App Attack

Showing 1 to 15 of 189 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 209.99.191.19

🇨🇦 165.140.47.249

🇺🇸 162.216.149.7

🇰🇷 118.39.50.107

🇨🇳 116.52.9.162

🇹🇷 94.154.43.140

🇺🇸 91.230.168.246

🇫🇷 85.217.140.39

🇩🇪 64.225.108.207

🇬🇧 45.8.255.151

🇬🇧 35.203.211.162

🇻🇪 201.249.192.30

🇲🇽 189.204.230.91

🇸🇪 185.246.130.20

🇳🇱 185.93.89.147

🇺🇸 162.216.149.216

🇩🇪 157.230.119.250

🇸🇪 155.212.108.165

🇺🇸 140.177.204.75

🇺🇸 137.184.197.63