JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.252.113.172

109.252.113.172 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 50%: ?

50%

ISP	Moscow Local Telephone Network (OAO MGTS)
Usage Type	Fixed Line ISP
ASN	AS25513
Hostname(s)	109-252-113-172.nat.spd-mgts.ru
Domain Name	spd-mgts.ru
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.252.113.172

Whois 109.252.113.172

IP Abuse Reports for 109.252.113.172:

This IP address has been reported a total of 33 times from 20 distinct sources. 109.252.113.172 was first reported on February 27th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Roderic	2026-06-20 19:05:13 (2 hours ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇦🇺 MAGIC	2026-06-18 01:06:47 (2 days ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 mnsf	2026-06-17 00:38:51 (3 days ago)	Scanning/Probing (15)	Brute-Force Web App Attack
🇩🇪 KiekerJan	2026-06-14 00:56:17 (6 days ago)	109.252.113.172 - - [14/Jun/2026:02:56:14 +0200] "GET /wp-content/plugins/wp-automatic/css/wp-automa ... show more 109.252.113.172 - - [14/Jun/2026:02:56:14 +0200] "GET /wp-content/plugins/wp-automatic/css/wp-automatic.css HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:49.0) Gecko/20100101 Firefox/49.0" 109.252.113.172 - - [14/Jun/2026:02:56:16 +0200] "GET /wp-content/plugins/wp-automatic/css/wp-automatic.css HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:49.0) Gecko/20100101 Firefox/49.0" ... show less	Web App Attack
🇫🇷 dynamix	2026-06-13 18:57:41 (1 week ago)	Multiple WAF Violations	Web App Attack
🇫🇷 IRISIO	2026-06-08 10:30:46 (1 week ago)	scans/SQL injection/spam posts : 10 queries	Web App Attack SQL Injection
🇫🇮 [email protected]	2026-06-08 05:04:59 (1 week ago)	Attack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on trackpunkracing.com (W ... show more Attack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on trackpunkracing.com (WP vulnerability) 109.252.113.172 (RU/Russia/109-252-113-172.nat.spd-mgts.ru): 1 in the last 3600 secs (CF_ENABLE); IP: 109.252.113.172; Ports: *; Direction: 0; Trigger: LF_CUSTOMTRIGGER; show less	Web App Attack
🇫🇮 [email protected]	2026-06-06 05:58:49 (2 weeks ago)	Attack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on trackpunkracing.com (W ... show more Attack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on trackpunkracing.com (WP vulnerability) 109.252.113.172 (RU/Russia/109-252-113-172.nat.spd-mgts.ru): 1 in the last 3600 secs (CF_ENABLE); IP: 109.252.113.172; Ports: *; Direction: 0; Trigger: LF_CUSTOMTRIGGER; show less	Web App Attack
🇩🇪 4server	2026-06-03 22:25:42 (2 weeks ago)	[ThuJun0400:25:36.8199002026][security2:error][pid2389932:tid2389964][client109.252.113.172:0]ModSec ... show more [ThuJun0400:25:36.8199002026][security2:error][pid2389932:tid2389964][client109.252.113.172:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mail.alessandrolucchini.ch\"][uri\"/wp-content/plugins/wp-automatic/css/wp-automatic.css\"][unique_id\"aiCp4DQhXF7sgwjVogzQqQAAAA4\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 ecs.ge	2026-06-03 02:26:42 (2 weeks ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇫🇮 [email protected]	2026-03-30 22:46:08 (2 months ago)	Attack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on trackpunkracing.com (W ... show more Attack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on trackpunkracing.com (WP vulnerability) 109.252.113.172 (RU/Russia/109-252-113-172.nat.spd-mgts.ru): 1 in the last 3600 secs (CF_ENABLE); IP: 109.252.113.172; Ports: *; Direction: 0; Trigger: LF_CUSTOMTRIGGER; show less	Web App Attack
🇺🇸 interbiznw.com	2026-03-26 18:33:40 (2 months ago)	wordpress-fuzzing	Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 nationaleventpros.com	2026-03-25 15:38:26 (2 months ago)	vulnerability scan	Web App Attack
🇵🇱 IROK	2026-03-23 12:43:06 (2 months ago)	Firewall Blocked - Unauthorized Port Scanning ...	Port Scan
🇫🇮 [email protected]	2026-03-23 03:46:08 (2 months ago)	Attack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on trackpunkracing.com (W ... show more Attack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on trackpunkracing.com (WP vulnerability) 109.252.113.172 (RU/Russia/109-252-113-172.nat.spd-mgts.ru): 1 in the last 3600 secs (CF_ENABLE); IP: 109.252.113.172; Ports: *; Direction: 0; Trigger: LF_CUSTOMTRIGGER; show less	Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.244.150.111

🇭🇳 186.2.156.137

🇮🇩 163.7.4.169

🇨🇳 123.7.77.219

🇨🇳 113.249.113.193

🇮🇳 103.86.180.10

🇮🇹 93.67.131.8

🇭🇰 91.208.73.57

🇳🇱 91.92.40.10

🇧🇷 45.205.1.240

🇸🇬 43.128.113.103

🇦🇺 40.82.214.8

🇬🇧 35.203.210.137

🇹🇼 198.235.24.95

🇳🇱 134.209.95.237

🇩🇿 129.45.95.28

🇨🇳 106.75.227.248

🇧🇭 77.69.132.176

🇪🇨 66.231.71.134

🇺🇸 216.25.89.141