JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.137.164.15

185.137.164.15 was found in our database!

This IP was reported 181 times. Confidence of Abuse is 46%: ?

46%

ISP	IPLuo BV
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	ipluo.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.137.164.15

Whois 185.137.164.15

IP Abuse Reports for 185.137.164.15:

This IP address has been reported a total of 181 times from 81 distinct sources. 185.137.164.15 was first reported on October 14th 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-06-20 11:48:53 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇯🇵 SentinalX by uzumaru	2026-06-11 06:07:13 (3 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.expressapisv2.net:443 show less	Open Proxy Port Scan
🇫🇷 dynamix	2026-06-08 19:28:24 (4 weeks ago)	Multiple WAF Violations	Web App Attack
🇫🇷 Octopuce	2026-06-08 14:53:21 (1 month ago)	Aggressive web search of vulnerable pages: /wp-includes/Requests/index.php /wp-includes/ID3/about.ph ... show more Aggressive web search of vulnerable pages: /wp-includes/Requests/index.php /wp-includes/ID3/about.php/wp-content/x/index.php /wp-includes/ID3/a ... show less	Web App Attack
🇳🇱 ConsulHosting	2026-06-08 14:47:54 (1 month ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇦🇺 paulshipley.com.au	2026-06-06 00:41:57 (1 month ago)	[Sat Jun 06 10:41:56.981328 2026] [security2:error] [pid 680772] [client 185.137.164.15:63823] [clie ... show more [Sat Jun 06 10:41:56.981328 2026] [security2:error] [pid 680772] [client 185.137.164.15:63823] [client 185.137.164.15] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bermanfamily.com.au"] [uri "/.git/HEAD"] [unique_id "aiNs1K8f_lNOMMPAa6AYPQAAAAo"] ... show less	Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-05 22:02:49 (1 month ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-04. show less	Web App Attack SSH Hacking
🇫🇷 masterguru	2026-06-05 13:15:47 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "python" at REQUEST_HEADERS:User-Agent. (1100000-196 ... show more BAD BOT - Detected and Blocked.. Matched phrase "python" at REQUEST_HEADERS:User-Agent. (1100000-196) show less	Bad Web Bot
🇩🇪 filstal.org	2026-06-05 12:44:49 (1 month ago)	Bad bot activity detected (automated scraping/probing) UA: Python-urllib/3.10	Bad Web Bot Web App Attack
🇫🇷 dwmp	2026-06-05 08:17:09 (1 month ago)	Url probing: /.git/HEAD/	Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 06:16:10 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 185.137.164.15 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.137.164.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 02:16:06.468479 2026] [security2:error] [pid 26182:tid 26268] [client 185.137.164.15:29427] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "retrieversocal.com.ceol.us"] [uri "/.git/HEAD"] [unique_id "aiJpppIir5Ks8Nn8UVFCEwAAAME"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 04:59:25 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 185.137.164.15 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.137.164.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 00:59:19.769742 2026] [security2:error] [pid 8219:tid 8219] [client 185.137.164.15:59039] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bfpsamoa.com.theroyalhouseofelohim.org"] [uri "/.git/HEAD"] [unique_id "aiJXp29cOPsc21cmmhBT7AAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-05 02:04:59 (1 month ago)	7 hits, proto=tcp, ports=80	Port Scan Hacking
🇩🇪 Mr-Money	2026-06-04 23:41:40 (1 month ago)	185.137.164.15 - - [05/Jun/2026:01:41:39 +0200] "GET /.git/HEAD HTTP/1.1" 404 400 "-" "Python-urllib ... show more 185.137.164.15 - - [05/Jun/2026:01:41:39 +0200] "GET /.git/HEAD HTTP/1.1" 404 400 "-" "Python-urllib/3.10" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 23:32:34 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 185.137.164.15 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.137.164.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 19:32:27.759159 2026] [security2:error] [pid 10594:tid 10594] [client 185.137.164.15:29595] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.brainwavecenters.com"] [uri "/.git/HEAD"] [unique_id "aiILC13th-eqMGJEgxkrSgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 181 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.228.203.3

🇿🇦 2c0f:fb50:4001:1::122

🇨🇳 2409:8c44:3d01:ff31::1e

🇰🇷 211.223.107.86

🇳🇱 195.178.110.217

🇳🇱 176.65.148.185

🇧🇷 168.121.114.63

🇮🇩 103.168.135.187

🇳🇱 93.123.118.30

🇺🇸 73.197.147.225

🇺🇸 64.62.156.150

🇳🇱 45.153.34.161

🇻🇳 14.177.7.45

🇷🇴 2.57.122.238

🇧🇷 2804:14c:ca26:8dca:cd49:226b:bfaa:5e1d

🇺🇸 2607:f8b0:4001:c2b::12b

🇳🇱 192.253.248.66

🇳🇱 185.223.235.34

🇮🇹 172.253.13.150

🇵🇱 91.224.237.93