JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.194.164.36

212.194.164.36 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 69%: ?

69%

ISP	Bouygues Telecom SA
Usage Type	Mobile ISP
ASN	AS5410
Domain Name	bouyguestelecom.fr
Country	🇫🇷 France
City	Soissons, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.194.164.36

Whois 212.194.164.36

IP Abuse Reports for 212.194.164.36:

This IP address has been reported a total of 26 times from 20 distinct sources. 212.194.164.36 was first reported on April 20th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 WeCloudit-Anti-Abuse	2026-10-21 20:35:02 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇩🇪 svr	2026-10-21 06:14:26 (2 days ago)	Abusive Automated Web Scanner	Web App Attack
Anonymous	2026-10-20 12:05:39 (2 days ago)	Banned by Fail2Ban on server	Web App Attack
🇩🇪 tentwentyfour	2026-10-20 10:05:20 (2 days ago)	Blocked for brute-forcing WordPress log-in	Brute-Force Web App Attack
Anonymous	2026-10-19 22:21:25 (3 days ago)	WordPress Brute Force	Brute-Force
🇺🇸 TPI-Abuse	2026-10-16 15:22:32 (6 days ago)	(mod_security) mod_security (id:225170) triggered by 212.194.164.36 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 212.194.164.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 11:22:25.354763 2026] [security2:error] [pid 30049:tid 30049] [client 212.194.164.36:45448] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|modestosoftwater.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "modestosoftwater.net"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atJBMcPPvTPe3QOT7CR3BwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 ISPLtd	2026-10-14 20:56:54 (1 week ago)	212.194.164.36 - - [14/Oct/2026:17:56:40 -0300] "GET /author-sitemap.xml 212.194.164.36 - - [14/Oct/ ... show more 212.194.164.36 - - [14/Oct/2026:17:56:40 -0300] "GET /author-sitemap.xml 212.194.164.36 - - [14/Oct/2026:17:56:41 -0300] "GET /author-sitemap.xml 212.194.164.36 - - [14/Oct/2026:17:56:41 -0300] "GET /sitemap_index.xml 212.194.164.36 - - [14/Oct/2026:17:56:52 -0300] "GET /?rest_route=/wp/v2/course&per_page ... show less	Hacking Web App Attack
🇺🇸 dot.mg	2026-10-14 12:30:14 (1 week ago)	Bruteforce	Bad Web Bot
🇷🇺 AbuseIPDB informer	2026-10-12 16:53:29 (1 week ago)	nfdump top talker: 212.194.164.36 \| first seen 2026-10-12 19:53:29.984 \| duration 00:00:00.079 \| flo ... show more nfdump top talker: 212.194.164.36 \| first seen 2026-10-12 19:53:29.984 \| duration 00:00:00.079 \| flows=1 \| packets=22506 \| bytes=16.7 M \| pps=283 \| bps=1.7 M \| bpp=740 \| proto=udp show less	DDoS Attack Exploited Host
🇷🇺 AbuseIPDB informer	2026-10-12 09:27:47 (1 week ago)	nfdump top talker: 212.194.164.36 \| first seen 2026-10-12 12:27:47.456 \| duration 00:00:00.083 \| flo ... show more nfdump top talker: 212.194.164.36 \| first seen 2026-10-12 12:27:47.456 \| duration 00:00:00.083 \| flows=7 \| packets=229152 \| bytes=167.6 M \| pps=2745 \| bps=16.1 M \| bpp=731 \| proto=udp show less	DDoS Attack Exploited Host
Anonymous	2026-10-10 04:19:56 (1 week ago)	🔥 Web application attack detected. Vulnerability scanning and exploitation attempts identified.	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-10-09 18:47:16 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 212.194.164.36 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 212.194.164.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 14:47:10.313812 2026] [security2:error] [pid 16530:tid 16530] [client 212.194.164.36:42980] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|sutherlandyogastudio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sutherlandyogastudio.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ask2rhn7hOjnmlCdrbC_cQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-09 06:26:41 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 212.194.164.36 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 212.194.164.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 02:26:34.118139 2026] [security2:error] [pid 7436:tid 7436] [client 212.194.164.36:59694] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|pearlhomesfw.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pearlhomesfw.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "asiJGmNyPMgENj1ElNCLVAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 AbuseIPDB informer	2026-10-08 10:21:37 (2 weeks ago)	nfdump top talker: 212.194.164.36 \| first seen 2026-10-08 13:21:37.152 \| duration 00:00:00.068 \| flo ... show more nfdump top talker: 212.194.164.36 \| first seen 2026-10-08 13:21:37.152 \| duration 00:00:00.068 \| flows=5 \| packets=140151 \| bytes=103.5 M \| pps=2050 \| bps=12.1 M \| bpp=738 \| proto=any show less	DDoS Attack Port Scan Exploited Host
🇷🇺 AbuseIPDB informer	2026-10-03 17:13:04 (2 weeks ago)	nfdump top talker: 212.194.164.36 \| first seen 2026-10-03 20:13:04.768 \| duration 00:00:00.067 \| flo ... show more nfdump top talker: 212.194.164.36 \| first seen 2026-10-03 20:13:04.768 \| duration 00:00:00.067 \| flows=2 \| packets=48081 \| bytes=47.0 M \| pps=716 \| bps=5.6 M \| bpp=977 \| proto=udp show less	DDoS Attack Port Scan Exploited Host

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 119.84.164.57

🇺🇸 2602:80d:1008::99

🇮🇩 2001:4860:7:806::eb

🇨🇳 218.17.217.141

🇩🇪 217.8.118.44

🇧🇷 205.210.31.147

🇹🇼 198.235.24.125

🇬🇧 194.50.235.132

🇲🇽 187.235.34.247

🇫🇷 173.249.8.162

🇸🇬 165.245.187.248

🇸🇬 145.223.145.245

🇺🇸 143.198.238.87

🇺🇸 129.121.102.82

🇰🇷 121.180.234.9

🇫🇮 95.216.5.90

🇷🇴 92.118.39.210

🇫🇷 91.231.89.129

🇪🇸 79.153.18.168

🇮🇹 79.40.76.22