JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.168.29.55

185.168.29.55 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 4%: ?

ISP	NETLABS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS213954
Domain Name	netlabs.com.ua
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.168.29.55

Whois 185.168.29.55

IP Abuse Reports for 185.168.29.55:

This IP address has been reported a total of 13 times from 10 distinct sources. 185.168.29.55 was first reported on March 5th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-19 13:46:45 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 185.168.29.55 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 185.168.29.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 09:46:41.019205 2026] [security2:error] [pid 30022:tid 30022] [client 185.168.29.55:51835] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.creartest.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.creartest.com"] [uri "/hacertests-117069-Fisica.php"] [unique_id "atYfQUdyjAHz_m5dU88pHAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 00:21:15 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 185.168.29.55 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 185.168.29.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 20:21:07.805645 2026] [security2:error] [pid 1405855:tid 1405855] [client 185.168.29.55:41553] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kippert.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kippert.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amFec2XLHkWixKPzvhc4jgAAAAE"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 librebit	2026-07-14 23:36:33 (3 months ago)	Brute force	Brute-Force
🇮🇩 Burayot	2026-05-18 00:51:44 (5 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 185.168.29.55 (UA/Ukraine/-): 1 in ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 185.168.29.55 (UA/Ukraine/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 octageeks.com	2026-05-04 04:08:14 (5 months ago)	Wordpress malicious attack:[octaxmlrpc]	Web App Attack
🇺🇸 TPI-Abuse	2026-05-02 21:51:06 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 185.168.29.55 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 185.168.29.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 17:51:00.159812 2026] [security2:error] [pid 31660:tid 31660] [client 185.168.29.55:14465] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|churchtop.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "churchtop.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afZxxH3cOYAQ9yzUR2Z9owAAAAI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-02 21:12:12 (5 months ago)	PARMACOM WEBEXPLOIT 185.168.29.55 (185.168.29.55)	Web App Attack
🇩🇪 4server	2026-04-29 11:50:33 (5 months ago)	[WedApr2913:50:27.5573692026][security2:error][pid1647792:tid1647834][client185.168.29.55:0]ModSecur ... show more [WedApr2913:50:27.5573692026][security2:error][pid1647792:tid1647834][client185.168.29.55:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"xmlrpc\\\\\\\\.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/03_asl_dos.conf\"][line\"65\"][id\"392331\"][rev\"3\"][msg\"Atomicorp.comWAFRules:xmlrpcDOSattack\"][severity\"CRITICAL\"][hostname\"feldenkraisticino.ch\"][uri\"/xmlrpc.php\"][unique_id\"afHwg2ekv55o2i8BZyaBYQAAAQY\"] show less	Port Scan Brute-Force Web App Attack
🇨🇿 ptlab	2026-04-20 22:49:02 (6 months ago)	Detected wp_login attack from WP-host.	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-04-18 06:45:46 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 185.168.29.55 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 185.168.29.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 02:45:41.511622 2026] [security2:error] [pid 1714025:tid 1714025] [client 185.168.29.55:45501] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|unitedletter.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "unitedletter.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeMolfvb3eJ8Lw0Nl5hKLgAAAAU"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Shadymint	2026-04-17 06:38:57 (6 months ago)	cms login attempt	Web App Attack
🇺🇸 mnsf	2026-03-19 16:11:43 (7 months ago)	Scanning/Probing (14)	Brute-Force Web App Attack
🇫🇷 masterguru	2026-03-05 04:23:53 (7 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 185.168.29.55 (DE/Germany/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 185.168.29.55 (DE/Germany/-): 1 in the last 3600 secs (0-197) show less	Hacking

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 183.56.216.153

🇨🇴 181.141.109.249

🇺🇸 162.216.150.118

🇧🇷 160.238.26.12

🇭🇰 156.225.1.99

🇫🇮 147.185.133.132

🇺🇸 136.112.17.32

🇨🇳 125.46.38.18

🇧🇩 121.200.221.148

🇺🇸 71.6.134.233

🇧🇪 34.79.243.153

🇺🇸 2600:1f14:314:8500:6b9b:a9fd:ee61:81cc

🇺🇸 216.73.217.12

🇧🇪 198.235.24.165

🇺🇸 195.184.76.217

🇳🇱 192.253.248.223

🇨🇴 186.194.161.58

🇩🇪 172.120.37.141

🇺🇸 154.193.26.7

🇫🇮 147.185.133.8