JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.195.237.149

185.195.237.149 was found in our database!

This IP was reported 145 times. Confidence of Abuse is 0%: ?

ISP	VibeGAMES B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS48925
Domain Name	vibegames.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.195.237.149

Whois 185.195.237.149

IP Abuse Reports for 185.195.237.149:

This IP address has been reported a total of 145 times from 30 distinct sources. 185.195.237.149 was first reported on December 1st 2020, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Zandro	2025-09-02 21:33:00 (11 months ago)	ranged TCP flood attack	DDoS Attack
🇳🇱 Study Bitcoin 🤗	2025-09-02 20:53:00 (11 months ago)	2 port probes: 2x tcp/25 (smtp) [srv130]	Email Spam Port Scan
🇺🇸 TPI-Abuse	2024-10-06 11:10:28 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 185.195.237.149 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 185.195.237.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 06 07:10:24.747843 2024] [security2:error] [pid 19561:tid 19561] [client 185.195.237.149:36901] [client 185.195.237.149] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|casinoaffiliateprogramsonline.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "casinoaffiliateprogramsonline.com"] [uri "/restore/dump.sql"] [unique_id "ZwJwIPoU3uuvgeFoiQr9pwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-02 02:34:48 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 185.195.237.149 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 185.195.237.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 01 22:34:40.813148 2024] [security2:error] [pid 1225:tid 1225] [client 185.195.237.149:5487] [client 185.195.237.149] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bitcoinpornhub.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bitcoinpornhub.com"] [uri "/backups/mysql.sql"] [unique_id "ZvyxQGLlKZj92NbL3KozugAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-28 14:54:03 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 185.195.237.149 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 185.195.237.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 28 10:53:57.925207 2024] [security2:error] [pid 728787:tid 728787] [client 185.195.237.149:12759] [client 185.195.237.149] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|usbea.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "usbea.com"] [uri "/site_name_com.sql"] [unique_id "ZvgYhdqrE-xXBjbfX4QkbQAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-28 09:53:58 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 185.195.237.149 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 185.195.237.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 28 05:53:53.158366 2024] [security2:error] [pid 18620:tid 18620] [client 185.195.237.149:34995] [client 185.195.237.149] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|symbarenewables.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "symbarenewables.com"] [uri "/bak/www.sql"] [unique_id "ZvfSMe8qsFqwIFtfIIhPTAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-28 04:51:44 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 185.195.237.149 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 185.195.237.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 28 00:51:40.404770 2024] [security2:error] [pid 18261:tid 18261] [client 185.195.237.149:34249] [client 185.195.237.149] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.dudleyanddudley.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dudleyanddudley.com"] [uri "/bak/dump.sql"] [unique_id "ZveLXN-0702QIxHqC_80EAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 rtbh.com.tr	2024-09-18 20:54:31 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2024-09-18 19:58:27 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇧🇪 taivas.nl	2024-09-18 16:32:12 (1 year ago)	Bad_requests	Bad Web Bot
Anonymous	2024-09-17 19:02:41 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-09-16 16:16:03 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇧🇪 cmbplf	2024-09-15 15:29:57 (1 year ago)	1.867 requests to */xmlrpc.php	Brute-Force Bad Web Bot
Anonymous	2024-09-15 15:05:44 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-09-05 03:32:31 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 185.195.237.149 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 185.195.237.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 04 23:32:26.218571 2024] [security2:error] [pid 13013:tid 13013] [client 185.195.237.149:34789] [client 185.195.237.149] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.spectorworld.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.spectorworld.com"] [uri "/backup/sql.sql"] [unique_id "ZtkmSnZU6mScLJWFhHgvxgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 145 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 186.81.100.15

🇺🇸 34.86.19.40

🇺🇸 216.25.89.129

🇺🇸 158.51.126.147

🇨🇳 112.40.108.193

🇸🇬 45.78.194.186

🇺🇸 185.150.190.130

🇫🇷 91.231.89.192

🇫🇷 91.231.89.11

🇺🇸 35.87.50.5

🇺🇸 13.221.244.98

🇺🇸 52.176.211.73

🇮🇩 34.101.236.71

🇳🇱 185.93.89.66

🇪🇸 158.158.100.150

🇫🇷 141.101.68.100

🇺🇸 139.144.239.72

🇺🇸 136.56.163.132

🇺🇸 35.221.56.125

🇫🇷 141.101.68.101