This IP address has been reported a total of
5
times from
5 distinct
sources.
185.236.214.163 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Switzerland
with 1
report;
Italy
with 1
report.
The most common categories in these recent reports were:
Bad Web Bot
2
times;
Web App Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Coordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 ...
show moreCoordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 UTC. Deliberately expensive multi-label Gitea issue-search queries (/issues?type=all&state=closed&sort=...&labels=<multiple IDs>, ~60-113s CPU each) flooded the backend via proxy/hosting networks. ~36,700 source IPs, ~1 request per IP, identical TLS fingerprint (TLS1.3 0x1301) and one spoofed Chrome UA = single automated tool.
show less
Fail2Ban: 185.236.214.163 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/ ...
show moreFail2Ban: 185.236.214.163 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
show less
[Thu Dec 18 22:55:13.522817 2025] [security2:error] [pid 233883:tid 139991616251584] [client 185.236 ...
show more[Thu Dec 18 22:55:13.522817 2025] [security2:error] [pid 233883:tid 139991616251584] [client 185.236.214.163:49404] ModSecurity: Access denied with code 403 (phase 2). Found 3 byte(s) in REQUEST_URI_RAW outside range: 32-36,38-126. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "2755"] [id "920272"] [msg "Invalid character in request (outside of printable chars below ascii 127)"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: /images/Klimatologi/ found within REQUEST_URI_RAW: /images/Klimatologi/Prakiraan/Peringatan_Dini/2025/09_September_2025/02_04/Press_Release_Kewaspadaan_Angin_Kencang_di_Jawa_Timur_02\\xe2\\x80\\x9304_September_2025_e_B_ME_02_04_049_KSUB_IX_2025.pdf request_line = GET /images/Klimatologi/Prakiraan/Peringatan_Dini/2025/09_September_2025/02_04/Press_Release_Kewaspadaan_Angin_Kencang_di_Jawa_Timur_02%E2%80%..."] [severity "CRITICAL"] [ver "OWASP_CRS/4.20.0
...
show less
Hacking
Web App Attack
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
