JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.180.188.21

194.180.188.21 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 99%: ?

99%

ISP	HOSTKEY B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS57043
Domain Name	hostkey.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.180.188.21

Whois 194.180.188.21

IP Abuse Reports for 194.180.188.21:

This IP address has been reported a total of 40 times from 18 distinct sources. 194.180.188.21 was first reported on August 18th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Savvii	2026-08-23 19:13:38 (2 days ago)	20 attempts against mh-misbehave-ban on kiwi	Brute-Force Bad Web Bot Web App Attack
🇩🇪 conseilgouz	2026-08-23 17:05:39 (2 days ago)	vee-Joomla Admin : try to force the door...	Hacking
🇫🇷 Stara	2026-08-23 16:55:18 (2 days ago)	Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kinesk ... show more Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kineskinja) show less	Hacking Brute-Force Web App Attack
🇳🇱 Savvii	2026-08-23 16:37:39 (2 days ago)	20 attempts against mh-misbehave-ban on choy	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-08-23 15:50:59 (2 days ago)	20 attempts against mh-misbehave-ban on ethyl	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-08-23 15:45:15 (2 days ago)	[SunAug2317:45:08.9195442026][security2:error][pid4014394:tid4014418][client194.180.188.21:0]ModSecu ... show more [SunAug2317:45:08.9195442026][security2:error][pid4014394:tid4014418][client194.180.188.21:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"sito-online.ch\"][uri\"/\"][unique_id\"aosVhIvFjwsETggFmewJAgAAAAI\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 mail.avx.gr	2026-08-23 13:25:00 (2 days ago)	Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: 194.180.188.21 - - [23/Aug/2026:16:24:59 +0300] "G ... show more Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: 194.180.188.21 - - [23/Aug/2026:16:24:59 +0300] "GET /administrator/manifests/packages/pkg_sourcerer.xml HTTP/1.1" 404 80345 "https://candiatrade.gr/plugins/system/sourcerer/sourcerer.xml" "Mozilla/5.0 (Windows NT 5.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-23 12:56:19 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 194.180.188.21 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 194.180.188.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 08:56:16.168376 2026] [security2:error] [pid 24301:tid 24301] [client 194.180.188.21:37938] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|buildpower.com\|F\|2"] [data ".pkg_sourcerer.sys.ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "buildpower.com"] [uri "/language/en-GB/en-GB.pkg_sourcerer.sys.ini"] [unique_id "aort8NRjakC8CaCtWma5fQAAAAc"], referer: https://buildpower.com/administrator/manifests/packages/pkg_sourcerer.xml show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-08-23 10:07:21 (2 days ago)	20 attempts against mh-misbehave-ban on solar	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-08-23 09:32:55 (2 days ago)	[SunAug2311:32:51.1105962026][security2:error][pid2404594:tid2404619][client194.180.188.21:0]ModSecu ... show more [SunAug2311:32:51.1105962026][security2:error][pid2404594:tid2404619][client194.180.188.21:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"hosting-domini.ch\"][uri\"/media/com_fabrik/css/package.css\"][unique_id\"aoq-Q5FQaLSyGuqUaiagwwAAAFU\"] show less	Hacking Web App Attack
🇮🇩 Burayot	2026-08-23 06:58:16 (2 days ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 194.180.188.21 (DE/Germany/-): 1 in ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 194.180.188.21 (DE/Germany/-): 1 in the last 3600 secs show less	Web App Attack
🇳🇱 Savvii	2026-08-23 02:22:03 (2 days ago)	20 attempts against mh-misbehave-ban on frost	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-08-22 23:09:31 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇳🇱 Savvii	2026-08-22 17:47:49 (3 days ago)	20 attempts against mh-misbehave-ban on eris	Brute-Force Bad Web Bot Web App Attack
🇩🇪 conseilgouz	2026-08-22 16:51:30 (3 days ago)	lae-Joomla Admin : try to force the door...	Hacking

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.46.255.86

🇧🇷 187.49.144.147

🇨🇦 85.217.149.35

🇸🇪 46.59.91.172

🇧🇷 45.160.231.44

🇺🇸 45.61.177.185

🇦🇺 34.40.145.110

🇨🇳 222.176.201.57

🇺🇸 158.101.21.209

🇩🇪 69.5.169.224

🇮🇳 152.52.227.94

🇩🇪 135.125.199.17

🇮🇳 122.177.247.38

🇲🇾 103.40.204.60

🇳🇱 91.92.47.120

🇩🇪 85.203.15.252

🇷🇺 83.172.17.138

🇩🇪 81.199.26.11

🇳🇱 62.238.195.91

🇳🇱 45.198.224.26