JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.209.199.52

185.209.199.52 was found in our database!

This IP was reported 71 times. Confidence of Abuse is 69%: ?

69%

ISP	31173 Services AB infrastructure in Gothenburg, SE.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS39351
Domain Name	31173.se
Country	🇸🇪 Sweden
City	Gothenburg, Vastra Gotaland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.209.199.52

Whois 185.209.199.52

IP Abuse Reports for 185.209.199.52:

This IP address has been reported a total of 71 times from 37 distinct sources. 185.209.199.52 was first reported on September 4th 2024, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-07-26 09:18:31 (9 hours ago)	185.209.199.52 - - [26/Jul/2026:12:18:29 +0300] "GET /.git/index HTTP/1.1" 301 590 "-" "moving-to-bi ... show more 185.209.199.52 - - [26/Jul/2026:12:18:29 +0300] "GET /.git/index HTTP/1.1" 301 590 "-" "moving-to-bins/1.0" 185.209.199.52 - - [26/Jul/2026:12:18:30 +0300] "GET /.git/index HTTP/1.1" 404 4691 "-" "moving-to-bins/1.0" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 08:51:38 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 185.209.199.52 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.209.199.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 04:51:31.928075 2026] [security2:error] [pid 2842626:tid 2842626] [client 185.209.199.52:37452] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "centuryabsinthe.com"] [uri "/.git/index"] [unique_id "amXKkwVmwtrQa9O1IdoFfQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-26 08:47:22 (10 hours ago)	Web Server Exposed Git Repository Information Disclosure.	Hacking
🇬🇧 Oakley	2026-07-26 08:21:50 (10 hours ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇺🇸 TPI-Abuse	2026-07-26 08:18:39 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 185.209.199.52 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.209.199.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 04:18:31.558349 2026] [security2:error] [pid 3946155:tid 3946155] [client 185.209.199.52:42888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "catzpaw.com"] [uri "/.git/index"] [unique_id "amXC15RJzYYuNHuusk6p9AAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 07:59:06 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 185.209.199.52 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.209.199.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 03:59:00.093856 2026] [security2:error] [pid 1984048:tid 1984048] [client 185.209.199.52:57688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "casadelsolmexico.net"] [uri "/.git/index"] [unique_id "amW-RP0qiPCzBbWR-8jjYQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 07:36:45 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 185.209.199.52 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.209.199.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 03:36:40.620734 2026] [security2:error] [pid 3835283:tid 3835283] [client 185.209.199.52:54774] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carbonless.net"] [uri "/.git/index"] [unique_id "amW5CPOyNZzUYbArG4F8JwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-26 07:14:55 (11 hours ago)	"GET /.git/index HTTP/1.1"	Hacking Web App Attack
🇬🇧 consul.to	2026-07-26 07:12:51 (11 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 07:10:26 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 185.209.199.52 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.209.199.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 03:10:22.837835 2026] [security2:error] [pid 3517720:tid 3517720] [client 185.209.199.52:42418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cameronwv.com"] [uri "/.git/index"] [unique_id "amWy3vYcJhqTOiaOkgNkugAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 06:53:29 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 185.209.199.52 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.209.199.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 02:53:22.713263 2026] [security2:error] [pid 1526345:tid 1526345] [client 185.209.199.52:40110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "caferutadelaseda.com"] [uri "/.git/index"] [unique_id "amWu4nrQyAQJZkr-hKYzowAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-07-26 06:43:36 (12 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 06:10:07 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 185.209.199.52 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.209.199.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 02:09:58.310760 2026] [security2:error] [pid 30642:tid 30642] [client 185.209.199.52:43302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "buenasfrecuencias.com"] [uri "/.git/index"] [unique_id "amWkto6x1C5lJv7TYJ2dWQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-07-26 06:00:24 (12 hours ago)	Try to access /.git/index	Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 05:51:47 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 185.209.199.52 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.209.199.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 01:51:42.842980 2026] [security2:error] [pid 3150880:tid 3150880] [client 185.209.199.52:51598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brooklynmeeting.org"] [uri "/.git/index"] [unique_id "amWgbpQQTLncqKe70sRg2AAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 71 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.254

🇺🇸 108.165.123.121

🇷🇴 92.118.39.204

🇳🇱 45.148.10.30

🇺🇸 205.210.31.71

🇩🇪 164.92.240.151

🇲🇲 103.59.163.135

🇹🇷 94.154.43.230

🇹🇷 85.209.120.167

🇺🇸 72.210.6.207

🇺🇸 65.181.111.130

🇸🇳 41.83.52.109

🇫🇷 212.47.71.15

🇨🇭 209.99.190.115

🇩🇪 194.88.98.108

🇯🇵 158.101.144.198

🇨🇳 115.159.31.185

🇫🇷 82.64.209.249

🇩🇪 2a0f:580:7:42:be24:11ff:fe27:e14

🇺🇸 205.210.31.55