JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 84.55.2.163

84.55.2.163 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 88%: ?

88%

ISP	ipxo
Usage Type	Fixed Line ISP
ASN	AS8881
Domain Name	ipxo.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 84.55.2.163

Whois 84.55.2.163

IP Abuse Reports for 84.55.2.163:

This IP address has been reported a total of 44 times from 21 distinct sources. 84.55.2.163 was first reported on March 17th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SiyCah	2026-06-25 03:00:02 (2 days ago)	IP banned by fail2ban; banned in jail apache-modsecurity. Report generated by fail2abuseipdb.	Hacking Brute-Force Web App Attack
🇨🇭 4server	2026-06-24 14:20:16 (2 days ago)	[WedJun2416:20:09.5766852026][security2:error][pid1737247:tid1737448][client84.55.2.163:0]ModSecurit ... show more [WedJun2416:20:09.5766852026][security2:error][pid1737247:tid1737448][client84.55.2.163:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:drivermysql\\|jfactory\\|databasedriver\\|\(}_\\|\^\\\\\\\\:\)\)\"atREQUEST_HEADERS:user-agent.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"157\"][id\"337106\"][rev\"2\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:JoomlaRCEattackblocked\"][severity\"CRITICAL\"][hostname\"shadowdrummer.com\"][uri\"/wp-content/plugins/updraftplus/js/tour.js\"][unique_id\"ajvnmZ3igUP_Ol6LsHaQFgAAAFY\"]\,referer:https://www.google.com show less	Hacking Web App Attack
🇫🇷 masterguru	2026-06-24 05:05:53 (3 days ago)	Illegal Accept header: charset parameter. Match of "rx ^(?:(?:\\\\*\| (920600-195)	Hacking
🇩🇪 4server	2026-06-24 03:20:54 (3 days ago)	[WedJun2405:20:50.6954652026][security2:error][pid3880602:tid3880696][client84.55.2.163:0]ModSecurit ... show more [WedJun2405:20:50.6954652026][security2:error][pid3880602:tid3880696][client84.55.2.163:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:drivermysql\\|jfactory\\|databasedriver\\|\(}_\\|\^\\\\\\\\:\)\)\"atREQUEST_HEADERS:user-agent.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"157\"][id\"337106\"][rev\"2\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:JoomlaRCEattackblocked\"][severity\"CRITICAL\"][hostname\"studio-portale.ch\"][uri\"/wp-content/plugins/updraftplus/includes/jquery-ui-1.8.22.custom.css\"][unique_id\"ajtNEqsHzta1eT7iu069hAAAANc\"]\,referer:https://www.google.com show less	Port Scan Brute-Force Web App Attack
🇦🇺 MAGIC	2026-06-24 01:03:05 (3 days ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 paulshipley.com.au	2026-06-22 15:14:46 (4 days ago)	[Tue Jun 23 01:14:46.123084 2026] [security2:error] [pid 127507] [client 84.55.2.163:40791] [client ... show more [Tue Jun 23 01:14:46.123084 2026] [security2:error] [pid 127507] [client 84.55.2.163:40791] [client 84.55.2.163] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mareeshefford.com"] [uri "/wp-content/plugins/updraftplus/includes/updraft-admin-ui.js"] [unique_id "ajlRZn0VOVizUYI500pJEgAAACU"], referer: https://www.google.com ... show less	Web App Attack
🇬🇧 Mendip_Defender	2026-06-22 11:00:35 (5 days ago)	84.55.2.163 - - [22/Jun/2026:12:00:28 +0100] "GET /wp-content/plugins/updraftplus/includes/updraft-a ... show more 84.55.2.163 - - [22/Jun/2026:12:00:28 +0100] "GET /wp-content/plugins/updraftplus/includes/updraft-admin-ui.js HTTP/1.1" 404 4866 "https://www.google.com" ": Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:146.0) Gecko/20100101 Firefox/146.0" 84.55.2.163 - - [22/Jun/2026:12:00:28 +0100] "GET /wp-content/plugins/updraftplus/js/tour.js HTTP/1.1" 404 4866 "https://www.google.com" ": Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:146.0) Gecko/20100101 Firefox/146.0" 84.55.2.163 - - [22/Jun/2026:12:00:28 +0100] "GET /wp-content/plugins/updraftplus/includes/jquery-ui-1.8.22.custom.css HTTP/1.1" 404 4866 "https://www.google.com" ": Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:146.0) Gecko/20100101 Firefox/146.0" ... show less	Hacking Web App Attack
🇩🇪 4server	2026-06-22 09:29:32 (5 days ago)	[MonJun2211:29:26.9977602026][security2:error][pid1827422:tid1827445][client84.55.2.163:0]ModSecurit ... show more [MonJun2211:29:26.9977602026][security2:error][pid1827422:tid1827445][client84.55.2.163:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:drivermysql\\|jfactory\\|databasedriver\\|\(}_\\|\^\\\\\\\\:\)\)\"atREQUEST_HEADERS:user-agent.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"157\"][id\"337106\"][rev\"2\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:JoomlaRCEattackblocked\"][severity\"CRITICAL\"][hostname\"admin-services.ch\"][uri\"/wp-content/plugins/updraftplus/includes/jquery-ui-1.8.22.custom.css\"][unique_id\"ajkAduZgXy0B4MlcW3g2SwAAAAw\"]\,referer:https://www.google.com show less	Port Scan Brute-Force Web App Attack
🇩🇪 paissangroup	2026-06-22 07:55:04 (5 days ago)	Multiple WAF Violations	Web App Attack
🇫🇷 masterguru	2026-06-22 03:59:11 (5 days ago)	Illegal Accept header: charset parameter. Match of "rx ^(?:(?:\\\\*\| (920600-197)	Hacking
🇫🇮 YF	2026-06-22 01:00:29 (5 days ago)	WordPress content enumeration	Web App Attack
🇬🇧 consul.to	2026-06-21 19:06:24 (5 days ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 masterguru	2026-06-21 16:56:54 (5 days ago)	Illegal Accept header: charset parameter. Match of "rx ^(?:(?:\\\\*\| (920600-193)	Hacking
🇨🇭 TheCoon	2026-06-21 14:45:01 (5 days ago)	Automated: Web tarpit scanner detected	Web App Attack Hacking
🇫🇷 masterguru	2026-06-21 12:21:45 (6 days ago)	Illegal Accept header: charset parameter. Match of "rx ^(?:(?:\\\\*\| (920600-196)	Hacking

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 185.30.32.114

🇧🇬 79.124.58.142

🇬🇧 35.203.210.199

🇩🇪 2a01:4f8:271:2ad1::2

🇺🇸 2400:cb00:1273:1000:2bfa:bb84:b86:1d77

🇮🇩 203.194.115.25

🇩🇪 194.88.98.112

🇲🇽 189.160.46.21

🇨🇳 180.76.61.232

🇺🇸 162.216.150.135

🇩🇪 162.55.98.46

🇺🇸 104.21.73.199

🇧🇬 78.128.113.22

🇳🇱 52.174.187.187

🇧🇷 177.129.250.50

🇮🇹 172.213.2.229

🇮🇳 165.232.182.138

🇮🇳 49.207.244.28

🇩🇪 43.228.157.8

🇦🇺 27.96.219.187