JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.195.233.149

185.195.233.149 was found in our database!

This IP was reported 90 times. Confidence of Abuse is 15%: ?

15%

ISP	31173 Services AB infrastructure in Stockholm, SE.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS39351
Domain Name	31173.se
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.195.233.149

Whois 185.195.233.149

IP Abuse Reports for 185.195.233.149:

This IP address has been reported a total of 90 times from 56 distinct sources. 185.195.233.149 was first reported on October 24th 2021, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ke1v3y_OTU	2026-06-28 23:44:16 (2 days ago)	SQL injection attempt against a public web endpoint.	SQL Injection Web App Attack
🇷🇺 Agrohim	2026-06-26 01:28:28 (4 days ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇷🇺 Agrohim	2026-05-30 00:59:01 (1 month ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇪🇸 librebit	2026-05-30 00:56:26 (1 month ago)	RDWeb scan	Web App Attack
🇺🇸 Mundo Bueno	2026-04-18 03:04:44 (2 months ago)	[ISILIA Protection v2.1] Tentative d'accès: /.env \| Pays: SE \| UA: Mozilla/5.0 (Macintosh; Intel Mac ... show more [ISILIA Protection v2.1] Tentative d'accès: /.env \| Pays: SE \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 show less	Hacking Web App Attack
🇺🇸 vdub144	2026-04-18 02:55:04 (2 months ago)	Automated report from Gross Automation security system. \| Attack type: attack_path \| Path: /wp-conte ... show more Automated report from Gross Automation security system. \| Attack type: attack_path \| Path: /wp-content/ \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 \| Blocked by: nginx-bot-hell show less	Web App Attack
🇱🇻 garmtech.com	2026-04-17 22:15:19 (2 months ago)	IM360 WAF: Laravel .env file access	Web App Attack
🇺🇸 TPI-Abuse	2026-04-17 20:46:28 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 185.195.233.149 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 185.195.233.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 16:46:22.105583 2026] [security2:error] [pid 27733:tid 27733] [client 185.195.233.149:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abdulhameeds.art"] [uri "/.env"] [unique_id "aeKcHth18OIS118fLqetLgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-17 18:03:50 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 185.195.233.149 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 185.195.233.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 14:03:44.465909 2026] [security2:error] [pid 1669786:tid 1669786] [client 185.195.233.149:17381] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tausiet.com"] [uri "/.env"] [unique_id "aeJ2ALcKLU4Dr5K3ZX7SkAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Tripwire	2026-04-17 17:41:21 (2 months ago)	Scanning for exploits - /.env	Web App Attack
🇺🇸 TPI-Abuse	2026-04-17 16:07:51 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 185.195.233.149 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 185.195.233.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 12:07:46.949816 2026] [security2:error] [pid 2716203:tid 2716220] [client 185.195.233.149:42204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tamarkummel.com"] [uri "/.env"] [unique_id "aeJa0mIkA_1kDSyBp0rJ4gAAAI4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇰 swrlly	2026-04-05 07:28:13 (2 months ago)	1 unauthorized webserver connection	Web App Attack
🇺🇸 octageeks.com	2026-02-23 05:06:12 (4 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇺🇸 xmission.com	2026-02-15 21:12:07 (4 months ago)	Blocked by UFW (TCP on 61114) Source port: 50390 TTL: 52 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 61114) Source port: 50390 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 185.195.233.149) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇱🇻 garmtech.com	2026-02-15 20:08:02 (4 months ago)	IM360 WAF: SQL Injection Attack: Common DB Names Detected	SQL Injection

Showing 1 to 15 of 90 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2a12:da85:440d:1f00:971b:e3ba:cf5a:d4ca

🇺🇸 195.184.76.110

🇺🇸 192.101.65.118

🇦🇷 186.22.18.70

🇲🇴 182.93.50.90

🇦🇺 170.64.200.173

🇧🇩 114.130.85.36

🇰🇷 106.243.155.71

🇸🇬 101.47.156.21

🇩🇪 87.156.185.61

🇺🇸 66.154.109.226

🇨🇳 60.16.208.61

🇳🇱 45.148.10.157

🇪🇸 212.231.190.106

🇰🇷 211.107.118.105

🇳🇱 160.119.71.136

🇺🇸 159.89.224.69

🇫🇮 147.185.133.155

🇺🇸 147.185.132.46

🇭🇰 144.48.243.18