JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.252.113.199

109.252.113.199 was found in our database!

This IP was reported 147 times. Confidence of Abuse is 100%: ?

100%

ISP	Moscow Local Telephone Network (OAO MGTS)
Usage Type	Fixed Line ISP
ASN	AS25513
Hostname(s)	109-252-113-199.nat.spd-mgts.ru
Domain Name	spd-mgts.ru
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.252.113.199

Whois 109.252.113.199

IP Abuse Reports for 109.252.113.199:

This IP address has been reported a total of 147 times from 32 distinct sources. 109.252.113.199 was first reported on May 6th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 ddw	2026-06-08 20:05:26 (1 day ago)	WordPress Brute Force Attack.	Hacking Brute-Force Web App Attack
🇩🇪 sverson	2026-06-08 09:19:54 (1 day ago)	Abusive use detected / Unauthorized connection attempt	Hacking Brute-Force
🇨🇭 4server	2026-06-08 03:19:38 (2 days ago)	[MonJun0805:19:34.5456542026][security2:error][pid2209231:tid2209251][client109.252.113.199:0]ModSec ... show more [MonJun0805:19:34.5456542026][security2:error][pid2209231:tid2209251][client109.252.113.199:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"salonesamire.ch\"][uri\"/\"][unique_id\"aiY0xu89ukdAJMA0fSWPsAAAAUs\"] show less	Hacking Web App Attack
🇬🇧 consul.to	2026-06-07 05:15:53 (3 days ago)	Web attack/malicious scanning detected	Web App Attack
🇨🇭 4server	2026-06-05 16:26:13 (4 days ago)	[FriJun0518:26:08.2661702026][security2:error][pid1916622:tid1916848][client109.252.113.199:0]ModSec ... show more [FriJun0518:26:08.2661702026][security2:error][pid1916622:tid1916848][client109.252.113.199:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"salonesamire.ch\"][uri\"/wp-admin/admin-ajax.php\"][unique_id\"aiL4oARLB_5CStuv7spNcgAAARc\"]\,referer:https://salonesamire.ch/ show less	Hacking Web App Attack
🇳🇱 pixelXp	2026-06-05 05:25:20 (5 days ago)	Reason:10 (Web Spam), Via: jasperjaspers.nl/index-ajax.php, Message: detectSuspiciousPost count:6 de ... show more Reason:10 (Web Spam), Via: jasperjaspers.nl/index-ajax.php, Message: detectSuspiciousPost count:6 details: Array - show less	Web Spam
🇬🇧 andypiper	2026-06-05 01:03:08 (5 days ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇳🇱 Roderic	2026-06-05 00:09:52 (5 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇨🇿 ddw	2026-06-03 21:59:08 (6 days ago)	WordPress Brute Force Attack.	Hacking Brute-Force Web App Attack
🇨🇭 4server	2026-06-03 15:49:28 (6 days ago)	[WedJun0317:49:22.9106512026][security2:error][pid3731878:tid3731904][client109.252.113.199:0]ModSec ... show more [WedJun0317:49:22.9106512026][security2:error][pid3731878:tid3731904][client109.252.113.199:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mail.marcionetti.es\"][uri\"/\"][unique_id\"aiBNApHMhhSfQhVbc5yVkwAAAUs\"] show less	Hacking Web App Attack
🇳🇱 pixelXp	2026-06-03 02:05:33 (1 week ago)	Reason:10 (Web Spam), Via: jasperjaspers.nl/index-ajax.php, Message: detectSuspiciousPost count:6 de ... show more Reason:10 (Web Spam), Via: jasperjaspers.nl/index-ajax.php, Message: detectSuspiciousPost count:6 details: Array - show less	Web Spam
🇨🇿 ddw	2026-06-01 11:43:57 (1 week ago)	WordPress Brute Force Attack.	Hacking Brute-Force Web App Attack
🇬🇧 consul.to	2026-05-31 20:51:40 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇨🇭 4server	2026-05-31 20:19:21 (1 week ago)	[SunMay3122:19:14.8805802026][security2:error][pid1056722:tid1057574][client109.252.113.199:0]ModSec ... show more [SunMay3122:19:14.8805802026][security2:error][pid1056722:tid1057574][client109.252.113.199:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"salonesamire.ch\"][uri\"/wp-admin/admin-ajax.php\"][unique_id\"ahyXwjW-Gr0P85IvGxIxBAAAAE0\"]\,referer:https://salonesamire.ch/ show less	Hacking Web App Attack
Anonymous	2026-05-31 13:05:07 (1 week ago)	Command Injection Exploit Sensor - HTTP (Request) - Variant 2	Hacking

Showing 1 to 15 of 147 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 179.43.182.202

🇱🇹 141.98.11.224

🇺🇸 91.230.168.133

🇩🇪 69.5.169.166

🇺🇸 3.18.132.111

🇦🇱 130.49.189.41

🇮🇳 117.192.108.123

🇷🇴 92.118.39.236

🇫🇷 91.231.89.105

🇺🇸 91.230.168.181

🇺🇸 91.230.168.85

🇻🇳 79.108.218.58

🇩🇪 69.5.169.234

🇩🇪 69.5.169.173

🇮🇳 45.120.59.124

🇺🇸 40.124.173.6

🇨🇳 39.98.185.209

🇬🇧 35.203.210.138

🇬🇧 195.96.139.128

🇨🇭 172.253.11.25