185.137.164.169

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
97% Critical
30 reports
23 reporters · latest 13 hours ago
ISP
IPLuo BV
Usage Type
Data Center/Web Hosting/Transit
ASN
AS137409
Domain Name
ipluo.com
Country
🇧🇬 Bulgaria
City
Sofia, Sofia-Capital
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
30 from 23 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 8 🇳🇱 Netherlands 6 🇺🇸 United States of America 6
Most common categories Web App Attack 18 Bad Web Bot 15 Brute-Force 8 Hacking 7 Port Scan 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 HoneyPot-FrPri
185.137.164.169 - - 181.214.99.65 [10/Nov/2026:09:43:19 +0100] "GET /xml/ HTTP/1.1" 404 153 "-" "Mozilla/5.0" 0.000 - - 185.137.164.169 - - 181.214.99.65 [10/Nov/2026:09:43:20 +0100] "GET /admin/ HTTP ...
Bad Web Bot Web App Attack
Anonymous
Automated vulnerability scanning.
Hacking
🇨🇭 jebla.ch
Busted by the WatchPost edge sentinel: this host was probing web-app endpoints for a way in. Blocked at the edge, logged, and shared with the community. Last seen 2026-11-10 01:51 UTC.
Web App Attack
🇺🇸 francelink.fr
Azure WAF blocked a request. Rule: 100100. Observed at: 2026-11-10T00:32:00.000Z.
Web App Attack
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇩🇪 altenglaner
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking Web App Attack
🇫🇷 Little Iguana
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
Anonymous
185.137.164.169 - - [09/Nov/2026:01:42:26 -0300] "GET /.git/HEAD HTTP/1.1" 444 0 "-" "Python-urllib/3.10" ...
Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host
🇳🇱 BlueWire Hosting
High-confidence malicious configuration/VCS probe
Web App Attack
🇩🇪 tsZero
Scan example: path=/.git/HEAD status=302
Hacking
🇳🇱 Alt255
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 185.137.164.169 - - \[08/Nov/2026:05:48:54 +0100\] "GET /.git/HEAD HTTP/1.1" 301 561 "-" "Python-urllib/3.10" ...
Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl
Auto-ban: >3000 req/min op 2026-11-07
Web App Attack SSH Hacking
🇳🇱 Alt255
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 185.137.164.169 - - \[07/Nov/2026:05:09:07 +0100\] "GET /.git/HEAD HTTP/1.1" 301 6332 "-" "Python-urllib/3.10" ...
Bad Web Bot Web App Attack
🇩🇪 kkw
[REDACTED] 185.137.164.169 - - [07/Nov/2026:04:39:09 +0100] "GET /.git/HEAD HTTP/1.1" 404 4458 "-" "Python-urllib/3.10" ... (mode: searching http-sensitive-files)
Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇴 190.146.183.13
🇲🇾 183.171.57.72
🇧🇹 163.227.22.98
🇺🇸 98.174.60.205
🇺🇸 66.132.224.24
🇺🇸 66.132.159.43
🇺🇸 45.135.1.225
🇸🇪 4.223.83.231
🇰🇭 202.79.29.108
🇳🇱 195.178.110.26
🇧🇷 189.114.136.231
🇧🇷 177.91.40.7
🇻🇳 160.30.112.147
🇫🇮 147.185.133.226
🇨🇳 121.229.206.214
🇳🇱 94.102.49.190
feedback