JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.195.237.146

185.195.237.146 was found in our database!

This IP was reported 110 times. Confidence of Abuse is 0%: ?

ISP	VibeGAMES B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS48925
Domain Name	vibegames.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.195.237.146

Whois 185.195.237.146

IP Abuse Reports for 185.195.237.146:

This IP address has been reported a total of 110 times from 32 distinct sources. 185.195.237.146 was first reported on March 7th 2021, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Zandro	2025-09-02 21:33:00 (11 months ago)	ranged TCP flood attack	DDoS Attack
🇳🇱 Study Bitcoin 🤗	2025-09-02 20:53:20 (11 months ago)	2 port probes: 2x tcp/25 (smtp) [srv130]	Email Spam Port Scan
🇩🇪 hbrks	2024-04-14 03:29:16 (2 years ago)	HEAD http://ncs.guru/backup/website.zip * statusCode: 503 *	Web Spam Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2024-04-13 10:22:41 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 185.195.237.146 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 185.195.237.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 13 06:22:35.710383 2024] [security2:error] [pid 16484] [client 185.195.237.146:21739] [client 185.195.237.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gcigmbh.com"] [uri "/backup/sftp-config.json"] [unique_id "Zhpc654JFZp2wtN2UnqxHgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 hbrks	2024-04-13 09:32:51 (2 years ago)	HEAD http://techtronicgambia.com/backups/techtronicgambia.com.rar * statusCode: 503 *	Web Spam Hacking Bad Web Bot
🇩🇪 hbrks	2024-04-08 02:47:53 (2 years ago)	HEAD http://marche-be.com/backups/marche-be.com.rar * statusCode: 503 *	Web Spam Hacking Bad Web Bot
🇩🇪 hbrks	2024-04-08 02:28:03 (2 years ago)	HEAD http://marche-be.com/back/wallet.zip * statusCode: 503 *	Web Spam Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2024-04-06 20:13:02 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 185.195.237.146 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 185.195.237.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 06 16:12:57.194452 2024] [security2:error] [pid 11614] [client 185.195.237.146:50769] [client 185.195.237.146] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|cvgandhes.investments\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cvgandhes.investments"] [uri "/backup/sql.sql"] [unique_id "ZhGsyev1nLFnp9YPEa53VQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 octageeks.com	2024-03-31 04:07:57 (2 years ago)	Wordpress malicious attack:[octa404]	Web App Attack
🇺🇸 octageeks.com	2024-03-29 04:08:00 (2 years ago)	Wordpress malicious attack:[octa404]	Web App Attack
🇺🇸 TPI-Abuse	2024-03-28 18:18:39 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 185.195.237.146 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 185.195.237.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 28 14:18:31.369094 2024] [security2:error] [pid 21432:tid 47670657828608] [client 185.195.237.146:20955] [client 185.195.237.146] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.fishrapper.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.fishrapper.com"] [uri "/backup/www.sql"] [unique_id "ZgW0dyTTOI06ZtmUrrXq5AAAAIc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 octageeks.com	2024-03-27 04:07:53 (2 years ago)	Wordpress malicious attack:[octa404]	Web App Attack
🇧🇬 pa4080	2024-03-26 16:05:08 (2 years ago)	Detected by ModSecurity. Request URI: /wl.api.php?imgIWL=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3E ... show more Detected by ModSecurity. Request URI: /wl.api.php?imgIWL=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)), show less	Hacking Web App Attack
🇺🇸 octageeks.com	2024-03-25 04:08:32 (2 years ago)	Wordpress malicious attack:[octa404]	Web App Attack
🇫🇷 Sklurk	2024-03-24 16:04:02 (2 years ago)	Web App Attack	Web App Attack

Showing 1 to 15 of 110 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 92.255.196.185

🇺🇸 75.127.6.2

🇺🇸 74.128.96.114

🇺🇸 24.229.22.106

🇺🇸 20.106.213.5

🇨🇳 223.109.252.244

🇳🇱 213.124.148.22

🇧🇷 179.87.241.184

🇫🇮 147.185.133.127

🇺🇸 141.148.174.48

🇨🇦 135.19.213.156

🇮🇳 125.23.204.74

🇸🇬 118.194.234.189

🇱🇹 62.60.130.253

🇷🇺 46.18.204.177

🇳🇱 45.148.10.152

🇮🇩 36.68.160.154

🇳🇱 185.223.235.11

🇫🇷 185.177.72.24

🇧🇷 177.138.149.96