JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

185.213.174.125

Neutral Activity

Abuse confidence score ?

0% Low Risk

441 reports

236 reporters · latest 2 months ago

ISP	NextGenWebs, S.L.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS41608
Domain Name	nextgenwebs.es
Country	🇳🇱 Netherlands
City	Lelystad, Flevoland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

185.213.174.125 has been reported 441 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 185.213.174.125

This IP address has been reported a total of 441 times from 236 distinct sources. 185.213.174.125 was first reported on April 10th 2026, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-06-23 05:52:11 (2 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇫🇮 nNordic	2026-06-09 10:19:14 (3 months ago)	Connection attempt blocked by IDS/IPS from 185.213.174.125/32	Hacking
🇺🇸 BenTahily	2026-05-08 07:01:07 (4 months ago)	[moaem.com] Banned by Fail2Ban jails: nginx-credential-theft. Automated report.	Hacking Brute-Force Web App Attack
🇺🇸 BenTahily	2026-05-06 07:00:50 (4 months ago)	[moaem.com] Banned by Fail2Ban jails: nginx-credential-theft. Automated report.	Hacking Brute-Force Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-05-05 16:09:02 (4 months ago)	Fail2Ban - [RECIDIVE]Repeat offender across multiple jails on recidive ... [mx01,mx02,mx03,wa01,wa02 ... show more Fail2Ban - [RECIDIVE]Repeat offender across multiple jails on recidive ... [mx01,mx02,mx03,wa01,wa02] show less	Brute-Force Bad Web Bot Exploited Host Web App Attack
🇧🇷 Peregrine	2026-05-03 03:13:01 (4 months ago)	Fail2Ban S3 Jail: tomcat-honeypot \| Evidence: - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GE ... show more Fail2Ban S3 Jail: tomcat-honeypot \| Evidence: - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GET /laravel/.env HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GET /.env.production HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GET /.env.backup HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GET /.env.local HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GET /backend/.env HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GET /api/.env HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:41 -0300] "GET /.aws/credentials HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:41 -0300] "GET /.env HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:41 -0300] "GET /.env.bak HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-05-01 03:13:13 (4 months ago)	Fail2Ban S3 Jail: tomcat-honeypot \| Evidence: - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GE ... show more Fail2Ban S3 Jail: tomcat-honeypot \| Evidence: - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GET /laravel/.env HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GET /.env.production HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GET /.env.backup HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GET /.env.local HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GET /backend/.env HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GET /api/.env HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:41 -0300] "GET /.aws/credentials HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:41 -0300] "GET /.env HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:41 -0300] "GET /.env.bak HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-04-30 03:13:12 (4 months ago)	Fail2Ban S3 Jail: tomcat-honeypot \| Evidence: - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GE ... show more Fail2Ban S3 Jail: tomcat-honeypot \| Evidence: - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GET /laravel/.env HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GET /.env.production HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GET /.env.backup HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GET /.env.local HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GET /backend/.env HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GET /api/.env HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:41 -0300] "GET /.aws/credentials HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:41 -0300] "GET /.env HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:41 -0300] "GET /.env.bak HTTP/1.1" 404 414 show less	Bad Web Bot
🇬🇧 sc user	2026-04-29 03:19:39 (4 months ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan
🇧🇷 Peregrine	2026-04-29 03:13:09 (4 months ago)	Fail2Ban S3 Jail: tomcat-honeypot \| Evidence: - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GE ... show more Fail2Ban S3 Jail: tomcat-honeypot \| Evidence: - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GET /laravel/.env HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GET /.env.production HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GET /.env.backup HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GET /.env.local HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GET /backend/.env HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:40 -0300] "GET /api/.env HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:41 -0300] "GET /.aws/credentials HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:41 -0300] "GET /.env HTTP/1.1" 404 414 - 185.213.174.125 - - [26/Apr/2026:14:43:41 -0300] "GET /.env.bak HTTP/1.1" 404 414 show less	Bad Web Bot
🇩🇪 BlueWire Hosting	2026-04-28 13:54:40 (4 months ago)	Probing websites for vulnerabilities	Web App Attack
🇲🇾 Rizzy	2026-04-28 13:40:10 (4 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇬🇧 consul.to	2026-04-28 11:30:14 (4 months ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 masterguru	2026-04-28 10:50:02 (4 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 185.213.174.125 (NL/The Netherlands/- ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 185.213.174.125 (NL/The Netherlands/-): 2 in the last 3600 secs (0-193) show less	Hacking
🇮🇳 Genhost	2026-04-28 05:58:25 (4 months ago)	SCANNING OF PHP SHELL FILES	Brute-Force SSH

Showing 1 to 15 of 441 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 182.69.178.81

🇧🇷 147.15.20.173

🇺🇸 65.49.1.221

🇺🇸 52.165.92.218

🇺🇸 40.117.97.0

🇧🇪 34.79.65.226

🇭🇰 223.197.153.143

🇺🇸 184.105.139.67

🇩🇪 178.27.90.142

🇵🇰 103.244.172.138

🇭🇰 43.161.246.189

🇺🇸 35.237.94.18

🇳🇱 193.47.62.69

🇨🇭 172.71.141.133

🇨🇭 162.158.217.89

🇫🇷 104.23.229.138

🇺🇸 97.74.236.4

🇧🇪 35.233.93.132

🇹🇼 35.221.184.248

🇭🇰 20.24.194.29