185.137.164.195

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
87% Critical
27 reports
18 reporters · latest 2 days ago
ISP
IPLuo BV
Usage Type
Data Center/Web Hosting/Transit
ASN
AS137409
Domain Name
ipluo.com
Country
🇧🇬 Bulgaria
City
Sofia, Sofia-Capital
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
27 from 18 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 8 🇩🇪 Germany 6 🇳🇱 Netherlands 4
Most common categories Web App Attack 23 Bad Web Bot 13 Hacking 7 Brute-Force 6 Exploited Host 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 JimArchon72
2026/11/11 05:42:34 "GET /.git/HEAD HTTP/1.1"
Web App Attack
🇳🇱 Alt255
[ti-02ra] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 185.137.164.195 - - [11/Nov/2026:05:58:18 +0100] "GET /.git/HEAD HTTP/1.1" 301 4658 "-" "Python-urllib/3.10" ...
Bad Web Bot Web App Attack
🇩🇪 BlueWire Hosting
High-confidence malicious configuration/VCS probe
Web App Attack
🇩🇪 bescared
F2B - Malicious activity detected. URL Probing. -151302cd-
Hacking Bad Web Bot Web App Attack
🇩🇪 altenglaner
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking Web App Attack
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇫🇷 mail.avx.gr
plesk-rapid-ban sensitive-file-probe host=g4samf.paladin.gr
Hacking
🇬🇧 thetomtaylor.co.uk
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice01,ice02,wa01]
Bad Web Bot Web App Attack
🇬🇧 thetomtaylor.co.uk
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [wa02]
Bad Web Bot Web App Attack
🇮🇹 sssrit
185.137.164.195 - - [09/Nov/2026:02:00:57 +0100] "GET /.git/HEAD HTTP/1.1" 404 146 "-" "Python-urllib/3.10" ...
Web App Attack
🇫🇷 security.rdmc.fr
Web scan: request for a sensitive file (.env, .git, wp-config...)
Web App Attack Bad Web Bot
🇺🇸 jcbriar
Searching for vulnerable scripts
Hacking Web App Attack
🇩🇪 altenglaner
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking Web App Attack
🇳🇱 Alt255
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 185.137.164.195 - - \[08/Nov/2026:05:48:20 +0100\] "GET /.git/HEAD HTTP/1.1" 301 558 "-" "Python-urllib/3.10" ...
Bad Web Bot Web App Attack
🇿🇦 conure.sh
csagent: score 20.0: secrets grab x2; 2 domain(s) in 0s
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇩 120.50.8.222
🇨🇭 104.244.79.113
🇺🇸 97.113.48.103
🇷🇺 89.109.46.235
🇺🇸 52.248.43.70
🇺🇸 34.171.145.122
🇳🇱 34.34.85.42
🇧🇪 34.22.224.244
🇺🇸 209.141.48.135
🇮🇩 140.213.216.33
🇮🇳 135.235.138.43
🇷🇺 85.93.58.61
🇳🇱 45.144.212.152
🇦🇷 190.30.53.250
🇧🇷 186.205.25.40
🇺🇸 136.144.42.246
🇨🇳 117.50.44.85
🇨🇳 115.190.110.42
🇩🇪 85.10.213.137
🇺🇸 67.181.141.194
feedback