185.137.164.204

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
28 reports
22 reporters · latest 22 hours ago
ISP
IPLuo BV
Usage Type
Data Center/Web Hosting/Transit
ASN
AS137409
Domain Name
ipluo.com
Country
🇧🇬 Bulgaria
City
Sofia, Sofia-Capital
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
28 from 22 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇳🇱 Netherlands 7 🇺🇸 United States of America 7 🇩🇪 Germany 6
Most common categories Web App Attack 20 Bad Web Bot 14 Brute-Force 8 Hacking 8 SQL Injection 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇩🇪 Holger
Bruteforce WebAttack
Brute-Force Web App Attack
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alt255
[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 185.137.164.204 - - [11/Nov/2026:05:56:22 +0100] "GET /.git/HEAD HTTP/1.1" 301 682 "-" "Python-urllib/3.10" ...
Bad Web Bot Web App Attack
🇩🇪 bescared
F2B - Malicious activity detected. URL Probing. -151302cd-
Hacking Bad Web Bot Web App Attack
🇳🇱 Selckie
fail2ban: NGINX unusual impact
Web App Attack
🇩🇪 altenglaner
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking Web App Attack
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇨🇦 CentiDevOps
Web app scan: 6 requests in 14 min across 6 domains (301/404). Paths: /fr/.git/HEAD, /.git/HEAD. Sample: 2026-11-10T05:01:21Z "GET /fr/.git/HEAD" 404
Hacking Web App Attack
🇫🇷 Little Iguana
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
🇳🇱 Alt255
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 185.137.164.204 - - [09/Nov/2026:04:28:06 +0100] "GET /.git/HEAD HTTP/1.1" 301 4713 "-" "Python-urllib/3.10" ...
Bad Web Bot Web App Attack
🇫🇮 mnazibo
Date: Nov 08 15:04:52 2026 EAT | Reported IP: 185.137.164.204 mod_security | id: 920350 | BG/usernameab.my_domain/- | Connections: 1 | Blocked: Permanent Block: [LF_MODSEC] | Logs: ; Host header is a numeric IP address
SQL Injection Brute-Force Bad Web Bot
🇳🇱 JCB
Bad Web Bot Web App Attack
🇺🇸 Vano Ganzzz
Triggered Cloudflare WAF (bic) from BG. Action taken: BLOCK ASN: 137409 (GSL Networks Pty LTD) Protocol: HTTP/1.1 (GET method) Endpoint: /.git/HEAD Timestamp: 2026-11-08T04:42:28Z Ray ID: a571e9486de8f9bb UA: Python-urllib/3.10
Bad Web Bot
🇨🇦 csnavarro2020
Automated scan for known vulnerable/nonexistent path: /.git/HEAD
Web App Attack Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇹 151.28.162.101
🇺🇸 107.133.110.216
🇮🇩 103.59.161.117
🇫🇷 93.1.227.151
🇳🇱 89.21.67.174
🇩🇪 45.90.120.70
🇸🇬 43.160.207.19
🇧🇪 35.210.116.204
🇧🇪 35.210.39.217
🇺🇸 34.73.250.105
🇪🇨 157.100.87.165
🇳🇵 103.162.3.108
🇺🇸 52.167.144.184
🇯🇵 43.130.240.158
🇧🇪 35.210.48.46
🇺🇸 35.149.9.137
🇨🇳 8.134.203.138
🇺🇸 3.84.206.151
🇺🇸 199.165.159.113
🇮🇳 117.223.152.94
feedback