JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.213.174.51

185.213.174.51 was found in our database!

This IP was reported 437 times. Confidence of Abuse is 100%: ?

100%

ISP	NextGenWebs, S.L.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS41608
Domain Name	nextgenwebs.es
Country	🇳🇱 Netherlands
City	Dronten, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.213.174.51

Whois 185.213.174.51

IP Abuse Reports for 185.213.174.51:

This IP address has been reported a total of 437 times from 218 distinct sources. 185.213.174.51 was first reported on April 11th 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 gadix	2026-04-19 13:59:48 (1 month ago)	[19/Apr/2026:15:59:46.826887 +0200] aeTf0hessd0r6wlGLoMZtQAAAAI 185.213.174.51 42642 127.0.0.1 7081 ... show more [19/Apr/2026:15:59:46.826887 +0200] aeTf0hessd0r6wlGLoMZtQAAAAI 185.213.174.51 42642 127.0.0.1 7081 [19/Apr/2026:15:59:46.854974 +0200] aeTf0qkaibzHTd1Y3fs_FQAAAAA 185.213.174.51 42664 127.0.0.1 7081 [19/Apr/2026:15:59:47.018395 +0200] aeTf05e8Z53Xhgal4lnWhgAAAAU 185.213.174.51 42668 127.0.0.1 7081 ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-19 13:52:56 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 185.213.174.51 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.213.174.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 19 09:52:51.397222 2026] [security2:error] [pid 1809436:tid 1809436] [client 185.213.174.51:34026] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nldi.us"] [uri "/.git/config"] [unique_id "aeTeM4-aV18QRab_rllecwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 sdos.es	2026-04-19 13:31:38 (1 month ago)	"Restricted File Access Attempt - Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"	Web App Attack
🇧🇪 cmbplf	2026-04-19 13:27:09 (1 month ago)	923 requests with url.path /.git/config 871 requests with url.path .env	Brute-Force Bad Web Bot
🇳🇱 wlt-blocker	2026-04-19 13:22:15 (1 month ago)	Unauthorized access to webpage admin	Web App Attack
🇺🇸 TPI-Abuse	2026-04-19 13:12:43 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 185.213.174.51 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.213.174.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 19 09:12:36.010130 2026] [security2:error] [pid 2092305:tid 2092305] [client 185.213.174.51:53336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rdj.us"] [uri "/.git/config"] [unique_id "aeTUxIp60-CeSwuJPScYsQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-19 13:00:07 (1 month ago)	Bot / scanning and/or hacking attempts: GET /.env.local HTTP/1.1, GET /.env HTTP/1.1, GET /.env.prod ... show more Bot / scanning and/or hacking attempts: GET /.env.local HTTP/1.1, GET /.env HTTP/1.1, GET /.env.production HTTP/1.1, GET / HTTP/1.1, GET /wp-content/plugins/elementskit-lite/widgets/init/assets/js show less	Hacking Web App Attack
🇫🇷 pm33	2026-04-19 12:48:22 (1 month ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
🇧🇪 voormedia	2026-04-19 12:26:31 (1 month ago)	Accessed trap at '/.git/config'	Web App Attack
🇩🇪 Viveronese	2026-04-19 12:15:33 (1 month ago)	HTTP vulnerability scanning	Web App Attack
🇫🇷 Lino Project	2026-04-19 12:09:15 (1 month ago)	185.213.174.51 - - [19/Apr/2026:14:09:12 +0200] "GET /.git/config HTTP/1.1" 404 4108 "-" "Mozilla/5. ... show more 185.213.174.51 - - [19/Apr/2026:14:09:12 +0200] "GET /.git/config HTTP/1.1" 404 4108 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 185.213.174.51 - - [19/Apr/2026:14:09:12 +0200] "GET /.git/HEAD HTTP/1.1" 404 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-04-19 12:08:58 (1 month ago)	[SunApr1914:08:55.5645482026][security2:error][pid463918:tid463971][client185.213.174.51:0]ModSecuri ... show more [SunApr1914:08:55.5645482026][security2:error][pid463918:tid463971][client185.213.174.51:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"domoticaswiss.ch\"][uri\"/.git/config\"][unique_id\"aeTF1znM8x3VOTeR-9TEmgAAAE4\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 ger-stg-sifi1	2026-04-19 12:03:44 (1 month ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 FeG Deutschland	2026-04-19 12:02:56 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇬🇧 consul.to	2026-04-19 11:47:47 (1 month ago)	Web attack/malicious scanning detected	Web App Attack

Showing 406 to 420 of 437 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 185.190.142.231

🇮🇳 103.19.134.115

🇨🇳 219.147.30.198

🇬🇧 217.146.80.108

🇭🇰 199.45.154.181

🇸🇬 193.37.32.17

🇲🇽 187.230.115.212

🇩🇪 185.242.3.12

🇫🇷 185.2.103.52

🇳🇱 176.65.149.233

🇺🇸 172.238.188.122

🇩🇪 151.243.11.34

🇭🇰 123.58.209.112

🇭🇰 121.202.146.144

🇫🇷 91.196.152.88

🇬🇧 87.236.176.117

🇳🇱 86.54.31.36

🇨🇦 85.217.149.3

🇫🇷 85.69.240.210

🇪🇪 85.29.246.199