JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.137.164.21

185.137.164.21 was found in our database!

This IP was reported 191 times. Confidence of Abuse is 71%: ?

71%

ISP	IPLuo BV
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	ipluo.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.137.164.21

Whois 185.137.164.21

IP Abuse Reports for 185.137.164.21:

This IP address has been reported a total of 191 times from 79 distinct sources. 185.137.164.21 was first reported on October 6th 2023, and the most recent report was 50 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 debestelapp	2026-07-20 18:41:46 (50 minutes ago)		Web App Attack
🇫🇷 masterguru	2026-07-17 16:41:22 (3 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 185.137.164.21 (MA/Morocco/-): 1 in t ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 185.137.164.21 (MA/Morocco/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 mail.avx.gr	2026-07-17 13:22:11 (3 days ago)	Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 185.137.164.21 - - [16/Jul/2026:08:39:25 +0300] " ... show more Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 185.137.164.21 - - [16/Jul/2026:08:39:25 +0300] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Python-urllib/3.10" show less	Web App Attack
🇫🇮 mnazibo	2026-07-17 06:30:23 (3 days ago)	Date: Jul 17 09:16:14 2026 EAT \| Reported IP: 185.137.164.21 mod_security \| id: 930130 949110 \| DE/u ... show more Date: Jul 17 09:16:14 2026 EAT \| Reported IP: 185.137.164.21 mod_security \| id: 930130 949110 \| DE/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 5) show less	SQL Injection Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-17 05:51:39 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 185.137.164.21 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.137.164.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 01:51:32.857701 2026] [security2:error] [pid 455187:tid 455187] [client 185.137.164.21:57961] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.3dprinting.raynernet.com"] [uri "/.git/HEAD"] [unique_id "alnC5N_hMNnin5hyptEhbAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 05:27:53 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 185.137.164.21 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.137.164.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 01:27:45.924303 2026] [security2:error] [pid 12687:tid 12738] [client 185.137.164.21:42035] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nataxcyber.com.venezuelaguia.com"] [uri "/.git/HEAD"] [unique_id "alm9UVQE2Q8tmZBJlgSfFwAAAQo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 04:57:48 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 185.137.164.21 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.137.164.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 00:57:42.185212 2026] [security2:error] [pid 12570:tid 12570] [client 185.137.164.21:24615] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "creativemediacommunications.cmcnow.net"] [uri "/.git/HEAD"] [unique_id "alm2Ri0bpaKXmseU0XH7CQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 04:29:32 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 185.137.164.21 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.137.164.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 00:29:28.997884 2026] [security2:error] [pid 24263:tid 24333] [client 185.137.164.21:38431] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cargowebstore.newleafpro.com"] [uri "/.git/HEAD"] [unique_id "almvqINgJ_HKdsJeX33mbgAAAcc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 22:34:45 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 185.137.164.21 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.137.164.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 18:34:37.425178 2026] [security2:error] [pid 6994:tid 6994] [client 185.137.164.21:55389] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "electrolux.pamplonaserviciotecnico.com"] [uri "/.git/HEAD"] [unique_id "allcffW8VPVl1FmLI4VpsgAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Antinson	2026-07-16 06:11:31 (4 days ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-16 06:08:48 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 185.137.164.21 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.137.164.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 02:08:35.532902 2026] [security2:error] [pid 31559:tid 31559] [client 185.137.164.21:51863] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.drumfever.okwellbeing.com"] [uri "/.git/HEAD"] [unique_id "alh1Y2a91nQhF9p81vobSQAAAC0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Trueforce Threat Report	2026-07-16 04:25:59 (4 days ago)	Automated report, trolling for resource vulnerabilities	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 02:47:33 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 185.137.164.21 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.137.164.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 22:47:29.309069 2026] [security2:error] [pid 3036:tid 3036] [client 185.137.164.21:47817] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jimsvet.com.galaxyretro.com"] [uri "/.git/HEAD"] [unique_id "alhGQUSzfhyR1dX0o2Y0egAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 02:29:20 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 185.137.164.21 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.137.164.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 22:29:12.052564 2026] [security2:error] [pid 8228:tid 8228] [client 185.137.164.21:46369] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "portfolio.rnance.com"] [uri "/.git/HEAD"] [unique_id "alhB-JqEqhH6YciWgCOa8QAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 02:11:58 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 185.137.164.21 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.137.164.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 22:11:54.096737 2026] [security2:error] [pid 2224:tid 2224] [client 185.137.164.21:51293] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.representacionesthompson.com.nesetsv.com"] [uri "/.git/HEAD"] [unique_id "alg96vbLQSbAcAXK89cBwQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 191 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 130.131.231.171

🇨🇳 1.49.34.193

🇩🇪 216.26.244.48

🇩🇪 216.26.243.252

🇩🇪 216.26.243.175

🇩🇪 209.50.181.74

🇩🇪 209.50.181.61

🇩🇪 209.50.180.133

🇰🇷 203.252.10.4

🇲🇽 148.216.28.11

🇺🇸 147.185.132.246

🇹🇭 118.194.251.58

🇵🇰 110.38.254.104

🇩🇪 104.207.51.119

🇲🇲 103.59.163.135

🇩🇪 65.111.23.208

🇩🇪 65.111.22.125

🇳🇱 45.148.10.147

🇩🇪 45.3.54.159

🇺🇸 2607:ff10:c8:594::d