JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.233.20.187

152.233.20.187 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 48%: ?

48%

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-152-233-20-187.datapacket.com
Domain Name	datacamp.co.uk
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.233.20.187

Whois 152.233.20.187

IP Abuse Reports for 152.233.20.187:

This IP address has been reported a total of 18 times from 12 distinct sources. 152.233.20.187 was first reported on June 2nd 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 BestFans.com	2026-07-19 21:44:56 (2 days ago)	Credential brute-force attacks on webpage logins	Brute-Force
🇺🇸 kosada.com	2026-07-14 13:28:45 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇧🇪 cmbplf	2026-07-12 19:05:03 (1 week ago)	5.282 post requests in 1 hour (1yr10mos3w)	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-12 18:44:21 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 152.233.20.187 (unn-152-233-20-187.datapacket.c ... show more (mod_security) mod_security (id:225170) triggered by 152.233.20.187 (unn-152-233-20-187.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 14:44:14.109511 2026] [security2:error] [pid 339755:tid 339755] [client 152.233.20.187:52636] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|denkyusalesca.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "denkyusalesca.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "alPgfqSCyCjpdbTz9OkPJgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-02 22:20:05 (2 weeks ago)	\| [Dangerous/Brazil] Aggressive IP 152.233.20.187 (~30 hits). Type: DoS Defender- Web server 400 err ... show more \| [Dangerous/Brazil] Aggressive IP 152.233.20.187 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇩🇪 BestFans.com	2026-07-01 21:58:32 (2 weeks ago)	Credential brute-force attacks on webpage logins	Brute-Force
Anonymous	2026-06-30 06:10:51 (3 weeks ago)	[osotir.org] httpd-xmlrpc-post: sites=agonistes.gr.synathlountes; logs=/var/log/httpd/domains/agonis ... show more [osotir.org] httpd-xmlrpc-post: sites=agonistes.gr.synathlountes; logs=/var/log/httpd/domains/agonistes.gr.synathlountes.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇪🇸 librebit	2026-06-25 08:19:54 (3 weeks ago)	Brute force	Brute-Force
🇳🇱 enpepet	2026-06-24 22:10:24 (3 weeks ago)	GENERAL: parametres: [url:uploadCustomIcon=] UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) YUZA/1.0 U ... show more GENERAL: parametres: [url:uploadCustomIcon=] UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) YUZA/1.0 URL:/index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon show less	Port Scan Hacking Brute-Force Bad Web Bot
🇱🇻 garmtech.com	2026-06-24 21:45:23 (3 weeks ago)	IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 ( ... show more IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907) MV:t_1782337518_96.php show less	Hacking
🇺🇸 TPI-Abuse	2026-06-18 20:31:37 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 152.233.20.187 (unn-152-233-20-187.datapacket.c ... show more (mod_security) mod_security (id:210730) triggered by 152.233.20.187 (unn-152-233-20-187.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 16:31:32.207901 2026] [security2:error] [pid 3603:tid 3603] [client 152.233.20.187:61444] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ssion.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ssion.com"] [uri "/ssion.sql"] [unique_id "ajRVpKfGoUhvtuPJXUeBcgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 BestFans.com	2026-06-16 19:19:12 (1 month ago)	Credential brute-force attacks on webpage logins	Brute-Force
🇺🇸 TPI-Abuse	2026-06-14 22:02:27 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 152.233.20.187 (unn-152-233-20-187.datapacket.c ... show more (mod_security) mod_security (id:225170) triggered by 152.233.20.187 (unn-152-233-20-187.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 18:02:20.514002 2026] [security2:error] [pid 3874:tid 3874] [client 152.233.20.187:58515] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.jdsqrd.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.jdsqrd.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ai8k7OD--Jf33Ya1D0akUgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-06-14 20:37:00 (1 month ago)	5.603 requests with url.path //xmlrpc.php 5.587 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
Anonymous	2026-06-14 16:46:03 (1 month ago)	Bot / scanning and/or hacking attempts: POST //xmlrpc.php HTTP/1.1	Hacking Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 157.10.53.135

🇺🇸 172.202.100.37

🇩🇪 139.28.241.54

🇺🇸 66.132.186.134

🇨🇳 58.19.80.114

🇳🇱 45.156.128.179

🇳🇱 45.154.98.134

🇳🇱 45.148.10.152

🇳🇱 43.239.90.168

🇺🇸 3.87.52.46

🇳🇱 195.178.110.241

🇻🇳 171.254.94.73

🇦🇺 118.208.240.52

🇫🇷 91.196.152.221

🇨🇦 85.217.149.16

🇮🇩 69.5.20.205

🇬🇧 45.133.173.180

🇨🇳 223.221.36.42

🇺🇸 66.132.172.194

🇨🇳 36.106.167.156