185.137.164.152

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
74% Elevated
21 reports
15 reporters · latest 1 hour ago
ISP
IPLuo BV
Usage Type
Data Center/Web Hosting/Transit
ASN
AS137409
Domain Name
ipluo.com
Country
🇧🇬 Bulgaria
City
Sofia, Sofia-Capital
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
21 from 15 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇳🇱 Netherlands 5 🇺🇸 United States of America 4 🇩🇪 Germany 3
Most common categories Web App Attack 15 Bad Web Bot 12 Brute-Force 5 Hacking 2 Web Spam 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 Alt255
[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 185.137.164.152 - - [11/Nov/2026:06:06:31 +0100] "GET /.git/HEAD HTTP/1.1" 301 573 "-" "Python-urllib/3.10" ...
Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇩🇪 todix
"GET /.git/HEAD HTTP/1.1" 403 6544 "-" "Python-urllib/3.10"
Web App Attack
🇳🇱 GabrielJST
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 185.137.164.152 (MA/Morocco/-)
Bad Web Bot
🇳🇱 Alt255
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 185.137.164.152 - - [10/Nov/2026:00:39:39 +0100] "GET /.git/HEAD HTTP/1.1" 301 454 "-" "Python-urllib/3.10" ...
Bad Web Bot Web App Attack
🇫🇷 Little Iguana
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
🇯🇵 ki3
Fail2Ban: Web App Attacks and Forum Spam 185.137.164.152 1794197948.0(JST)
Web Spam Bad Web Bot Web App Attack
🇩🇪 tsZero
Scan example: path=/.git/HEAD status=302
Hacking
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/443 (HTTPS); 2 application-level events across 2 source port(s). Sensor(s): H0neytr4p.
Port Scan
🇿🇦 conure.sh
csagent: score 20.5: secrets grab x2, 404 noise floor x2; 2 domain(s) in 0s
Web App Attack
🇧🇪 boxed-it
GET /.git/HEAD (Tarpitted for 16s, wasted 1.05kB)
Web App Attack
🇫🇮 YF
Git HEAD exposure probe
Web App Attack
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alt255
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 185.137.164.152 - - \[07/Nov/2026:04:37:19 +0100\] "GET /.git/HEAD HTTP/1.1" 301 579 "-" "Python-urllib/3.10" ...
Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 220.127.148.6
🇨🇳 218.94.16.158
🇧🇪 207.175.202.245
🇧🇷 205.210.31.171
🇧🇷 205.210.31.133
🇹🇼 198.235.24.28
🇦🇺 140.238.207.64
🇧🇪 35.210.199.32
🇺🇸 20.81.44.174
🇨🇱 200.120.91.27
🇨🇷 186.15.121.32
🇺🇸 171.22.217.85
🇳🇱 109.160.32.157
🇩🇪 109.160.32.45
🇺🇸 98.89.204.118
🇵🇹 94.62.64.240
🇸🇪 81.224.114.119
🇧🇪 35.210.195.99
🇧🇪 35.210.193.11
🇺🇸 205.210.31.104
feedback