JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.201.138.201

185.201.138.201 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 20%: ?

20%

ISP	NETLABS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS213954
Domain Name	netlabs.com.ua
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.201.138.201

Whois 185.201.138.201

IP Abuse Reports for 185.201.138.201:

This IP address has been reported a total of 7 times from 5 distinct sources. 185.201.138.201 was first reported on March 10th 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 tilellit.pro	2026-06-29 09:13:47 (15 hours ago)	Fail2Ban banned 185.201.138.201 for security violations in jail wp-armour. Log: 2026/06/29 09:13:46 ... show more Fail2Ban banned 185.201.138.201 for security violations in jail wp-armour. Log: 2026/06/29 09:13:46 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 185.201.138.201 \| Target: wplogin" , client: 185.201.138.201, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇫🇷 tilellit.pro	2026-06-27 19:40:22 (2 days ago)	Fail2Ban banned 185.201.138.201 for security violations in jail wp-armour. Log: 2026/06/27 19:40:21 ... show more Fail2Ban banned 185.201.138.201 for security violations in jail wp-armour. Log: 2026/06/27 19:40:21 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 185.201.138.201 \| Target: wplogin" , client: 185.201.138.201, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇫🇷 tilellit.pro	2026-06-27 06:53:23 (2 days ago)	Fail2Ban banned 185.201.138.201 for security violations in jail wp-armour. Log: 2026/06/27 06:53:22 ... show more Fail2Ban banned 185.201.138.201 for security violations in jail wp-armour. Log: 2026/06/27 06:53:22 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 185.201.138.201 \| Target: wplogin" , client: 185.201.138.201, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇩🇪 4server	2026-06-04 01:25:41 (3 weeks ago)	[ThuJun0403:25:36.5463532026][security2:error][pid2590665:tid2590747][client185.201.138.201:0]ModSec ... show more [ThuJun0403:25:36.5463532026][security2:error][pid2590665:tid2590747][client185.201.138.201:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"maxay.ch\"][uri\"/api/version\"][unique_id\"aiDUEA2yvJKZ7ES9dUD69wAAAJU\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 Lino Project	2026-06-03 21:24:08 (3 weeks ago)	185.201.138.201 - - [03/Jun/2026:23:24:07 +0200] "POST /xmlrpc.php HTTP/2.0" 403 432 "-" "Mozilla/5. ... show more 185.201.138.201 - - [03/Jun/2026:23:24:07 +0200] "POST /xmlrpc.php HTTP/2.0" 403 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-08 12:41:10 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 185.201.138.201 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 185.201.138.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 08:41:07.250521 2026] [security2:error] [pid 11918:tid 11918] [client 185.201.138.201:23577] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cactusstarvineyard.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cactusstarvineyard.com"] [uri "/wp-json/wp/v2/users"] [unique_id "af3Z46yNzRO5thwIIHm6EgAAAB8"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 kjaerulff	2026-03-10 10:16:01 (3 months ago)	Failed Wordpress login using wp-login.php	Web App Attack

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 154.16.115.17

🇬🇧 2400:cb00:1053:1000:5634:6ce2:dab3:7ccb

🇲🇽 201.106.31.79

🇺🇸 159.203.185.179

🇨🇦 137.186.84.162

🇺🇸 134.209.117.242

🇺🇸 104.168.107.226

🇳🇱 78.142.18.172

🇹🇷 46.2.108.146

🇺🇸 34.171.103.2

🇷🇺 94.181.208.194

🇫🇷 92.205.57.72

🇺🇸 64.62.197.133

🇲🇾 47.254.247.44

🇺🇸 18.213.70.100

🇰🇷 211.40.167.121

🇮🇳 202.141.9.166

🇫🇷 194.163.150.184

🇲🇽 187.138.209.2

🇫🇷 167.86.75.84