JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.137.164.7

185.137.164.7 was found in our database!

This IP was reported 230 times. Confidence of Abuse is 100%: ?

100%

ISP	IPLuo BV
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	ipluo.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.137.164.7

Whois 185.137.164.7

IP Abuse Reports for 185.137.164.7:

This IP address has been reported a total of 230 times from 114 distinct sources. 185.137.164.7 was first reported on January 23rd 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Starburst SysOp Team	2026-07-25 12:06:19 (1 week ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-stl2-14)	Hacking Web App Attack
🇦🇺 Bay13	2026-07-25 10:49:14 (1 week ago)	CrowdSec:custom/modsecurity	Web App Attack
🇳🇿 Antinson	2026-07-25 10:37:18 (1 week ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇨🇭 4server	2026-07-25 09:15:30 (1 week ago)	[SatJul2511:15:26.6703082026][security2:error][pid3230548:tid3230798][client185.137.164.7:0]ModSecur ... show more [SatJul2511:15:26.6703082026][security2:error][pid3230548:tid3230798][client185.137.164.7:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"giardinonoleggioticino.ch.81-17-25-250.cpanel.site\"][uri\"/.git/HEAD\"][unique_id\"amR-rtdWh14GeN48V6t71QAAAUU\"] show less	Hacking Web App Attack
🇿🇦 conure	2026-07-25 07:02:57 (1 week ago)	csagent: score 19.2: secrets grab x2; 2 domain(s) in 15s	Web App Attack
🇺🇸 xxkodedxx	2026-07-24 23:30:01 (1 week ago)	[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 2× edge-block in 10 ... show more [Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 2× edge-block in 10m window. Origin: MA / AS137409 GSL Networks Pty LTD Active: 23:29:04 UTC Volume: 2 HTTP req Probed: /.git/HEAD Status mix: 444×2 Vhost fishing: atc.zvxlabs.com UA: "Python-urllib/3.10" Auto-banned 30d. zorvexus-banner. show less	Bad Web Bot Web App Attack
🇩🇪 4server	2026-07-24 10:02:19 (1 week ago)	[FriJul2412:02:14.8785082026][security2:error][pid2771112:tid2771299][client185.137.164.7:0]ModSecur ... show more [FriJul2412:02:14.8785082026][security2:error][pid2771112:tid2771299][client185.137.164.7:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"www.areatbroker.ch.136-243-54-122.cpanel.site\"][uri\"/.git/HEAD\"][unique_id\"amM4JrVJsA-qZavZhcnwZwAAAQE\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-07-24 09:41:53 (1 week ago)	185.137.164.7 - - [24/Jul/2026:06:41:51 -0300] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Python-urllib/ ... show more 185.137.164.7 - - [24/Jul/2026:06:41:51 -0300] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Python-urllib/3.10" ... show less	Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host
🇨🇭 4server	2026-07-24 06:23:45 (1 week ago)	[FriJul2408:23:40.9565282026][security2:error][pid2190498:tid2190602][client185.137.164.7:0]ModSecur ... show more [FriJul2408:23:40.9565282026][security2:error][pid2190498:tid2190602][client185.137.164.7:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.allegrafamiglia.ch.81-17-25-250.cpanel.site\"][uri\"/.git/HEAD\"][unique_id\"amME7NlObFHJZ0hAWYaY4wAAAFY\"] show less	Hacking Web App Attack
🇧🇷 dominioz	2026-07-24 01:42:58 (1 week ago)	2026-07-24 01:42:22 GET /.env - - 185.137.164.7 HTTP/1.1 Python-urllib/3.10 - 301 603 2026-07-24 01: ... show more 2026-07-24 01:42:22 GET /.env - - 185.137.164.7 HTTP/1.1 Python-urllib/3.10 - 301 603 2026-07-24 01:42:24 GET /err/ 404;https://www.leandro.dominioz.com.br:443/.env - 185.137.164.7 HTTP/1.1 Python-urllib/3.10 - 200 2919 2026-07-24 01:42:23 GET /.env - - 185.137.164.7 HTTP/1.1 Python-urllib/3.10 - 301 603 2026-07-24 01:42:23 GET /err/ 404;https://www.dominioz.com.br:443/.env - 185.137.164.7 HTTP/1.1 Python-urllib/3.10 - 302 813 ... show less	Web App Attack
🇺🇸 lnklnx	2026-07-24 01:42:23 (1 week ago)	quiddler.lnklnx.com:443 185.137.164.7 - - [23/Jul/2026:20:42:20 -0500] "GET /.git/HEAD HTTP/1.1" 404 ... show more quiddler.lnklnx.com:443 185.137.164.7 - - [23/Jul/2026:20:42:20 -0500] "GET /.git/HEAD HTTP/1.1" 404 5598 "-" "Python-urllib/3.10" ... show less	Web App Attack
🇺🇸 FreeMyIP	2026-07-23 20:36:18 (1 week ago)	Automated fail2ban report: web application attack / scanning for exploitable paths.	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-07-23 07:07:24 (1 week ago)	185.137.164.7 - - [23/Jul/2026:10:07:23 +0300] "GET /.env HTTP/1.1" 404 4689 "-" "Python-urllib/3.10 ... show more 185.137.164.7 - - [23/Jul/2026:10:07:23 +0300] "GET /.env HTTP/1.1" 404 4689 "-" "Python-urllib/3.10" 185.137.164.7 - - [23/Jul/2026:10:07:23 +0300] "GET /.env HTTP/1.1" 404 4688 "-" "Python-urllib/3.10" ... show less	Web App Attack
🇩🇪 4server	2026-07-23 03:18:47 (1 week ago)	[ThuJul2305:18:43.3023332026][security2:error][pid1190965:tid1191130][client185.137.164.7:0]ModSecur ... show more [ThuJul2305:18:43.3023332026][security2:error][pid1190965:tid1191130][client185.137.164.7:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"www.alessandrolucchini.ch\"][uri\"/.git/HEAD\"][unique_id\"amGIE7D7g2lxAQxza10x0gAAABE\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 Bedios GmbH	2026-07-23 01:29:14 (1 week ago)	Login credentials theft attempt	Hacking

Showing 1 to 15 of 230 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.95

🇮🇳 216.10.242.215

🇺🇸 195.184.76.180

🇺🇸 192.210.150.198

🇮🇩 157.10.182.14

🇺🇸 137.184.121.63

🇨🇳 116.181.10.21

🇨🇳 110.229.182.231

🇻🇳 103.172.236.241

🇺🇿 89.126.223.123

🇮🇷 77.77.93.88

🇫🇷 51.159.110.167

🇳🇱 45.148.10.147

🇻🇪 38.196.243.233

🇨🇦 38.35.220.139

🇹🇷 31.57.187.212

🇺🇸 2607:f8b0:4004:c1b::12a

🇺🇸 209.87.169.159

🇺🇸 209.38.157.61

🇧🇪 207.175.50.82