AbuseIPDB » 185.120.144.6

185.120.144.6 was found in our database!

This IP was reported 166 times. Confidence of Abuse is 0%: ?

ISP	M247 Europe SRL
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	no-rdns.miniprix.ro
Domain Name	m247.com
Country	Romania
City	Bucharest, Bucuresti

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 185.120.144.6

Whois 185.120.144.6

IP Abuse Reports for 185.120.144.6:

This IP address has been reported a total of 166 times from 73 distinct sources. 185.120.144.6 was first reported on January 19th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Linuxmalwarehuntingnl	2024-06-30 09:54:29 (2 months ago)	Unauthorized connection attempt	Brute-Force
Duggy_Tuxy	2024-02-05 11:56:58 (7 months ago)	Unauthorized connection attempt detected from IP address 185.120.144.6 on port TCP/80 ... show moreUnauthorized connection attempt detected from IP address 185.120.144.6 on port TCP/80 Check us on : https://github.com/duggytuxy/malicious_ip_addresses show less	Port Scan Web App Attack
Buster	2024-02-05 11:41:48 (7 months ago)	Repeated script kiddie attack attempts on multiple sites from Perm Blocked Extremely High Risk ASN ... show moreRepeated script kiddie attack attempts on multiple sites from Perm Blocked Extremely High Risk ASN and country: show less	Open Proxy Hacking Brute-Force Web App Attack
antbr.com	2024-02-05 10:18:43 (7 months ago)	AntBR.com: [Web Probe]==> /wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php	Web App Attack
akasolutions.de	2024-02-05 06:03:19 (7 months ago)	(mod_security) mod_security triggered on hostname [redacted] 185.120.144.6 (RO/Romania/no-rdns.minip ... show more(mod_security) mod_security triggered on hostname [redacted] 185.120.144.6 (RO/Romania/no-rdns.miniprix.ro) show less	SQL Injection
mawan	2024-02-03 15:25:35 (7 months ago)	Suspected of having performed illicit activity on AMS server.	Web App Attack
4server	2024-02-03 11:23:33 (7 months ago)	[SatFeb0312:23:28.5838502024][security2:error][pid7322:tid47697740523264][client185.120.144.6:0][cli ... show more[SatFeb0312:23:28.5838502024][security2:error][pid7322:tid47697740523264][client185.120.144.6:0][client185.120.144.6]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchedphrase\"wp-config.php\"atARGS:file.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"135\"][id\"344360\"][rev\"4\"][msg\"Atomicorp.comWAFRules:UnauthorizedOperatingSystemFileAccessAttempt\"][data\"MatchedData:wp-config.phpfoundwithinARGS:file:../wp-config.php\"][severity\"CRITICAL\"][tag\"attack-lfi\"][hostname\"gmpsud.ch\"][uri\"/wp-admin/admin-ajax.php\"][unique_id\"Zb4iMLP5QWx6l31UE2VxEAAAAMo\"][SatFeb0312:23:28.7952222024][security2:error][pid7322:tid47697740523264][client185.120.144.6:0][client185.120.144.6]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchedphrase\"wp-config.php\"atARGS:img.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"135\"][id\"344360\"][rev\"4\"][msg\"Atomicorp.comWAFRules:UnauthorizedOperatingSystemFileAccessAttempt\"][data\"MatchedData:wp-config.phpfoundwithinARGS:img:../wp-co show less	Port Scan Brute-Force Web App Attack
Roderic	2024-02-03 10:02:54 (7 months ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 185.120.144.6 (RO/Romani ... show more(apache-scanners) Failed apache-scanners trigger with match [redacted] from 185.120.144.6 (RO/Romania/no-rdns.miniprix.ro) show less	Port Scan
sweplox.se	2024-02-03 06:50:22 (7 months ago)	185.120.144.6 - - [27/Jan/2024:03:12:14 +0000] "GET /wp-admin/admin-ajax.php?action=duplicator_downl ... show more185.120.144.6 - - [27/Jan/2024:03:12:14 +0000] "GET /wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 185.120.144.6 - - [27/Jan/2024:03:12:16 +0000] "GET /wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 185.120.144.6 - - [28/Jan/2024:18:30:43 +0000] "GET /wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 185.120.144.6 - - [28/Jan/2024:18:30:44 +0000] "GET /wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 185.120.144.6 - - [03/Feb/2024:06:50:21 +0000] "GET /wp-admin/admin-ajax.php?action=duplicator_downl ... show less	Bad Web Bot SSH
Burayot	2024-02-03 02:56:58 (7 months ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 185.120.144.6 (RO/Romania/no-rdns.mi ... show moreLF_MODSEC: (mod_security) mod_security (id:949110) triggered by 185.120.144.6 (RO/Romania/no-rdns.miniprix.ro): 2 in the last 3600 secs show less	Web App Attack
Swiptly	2024-02-03 01:00:41 (7 months ago)	Multiple critical ModSecurity events ...	Web Spam Bad Web Bot
Anonymous	2024-02-02 13:38:57 (7 months ago)	185.120.144.6 - - [02/Feb/2024:10:38:56 -0300] "GET /wp-admin/admin-ajax.php?action=duplicator_downl ... show more185.120.144.6 - - [02/Feb/2024:10:38:56 -0300] "GET /wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" ... show less	Web App Attack
thefoofighter	2024-02-02 10:00:46 (7 months ago)	[Fri Feb 02 10:00:39.132138 2024] [:error] [pid 297896] [client 185.120.144.6:36052] [client 185.120 ... show more[Fri Feb 02 10:00:39.132138 2024] [:error] [pid 297896] [client 185.120.144.6:36052] [client 185.120.144.6] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cathalmcnally.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Zby9R8BnBRW2sgBpH1xLwAAAAAM"] [Fri Feb 02 10:00:40.428330 2024] [:error] [pid 297898] [client 185.120.144.6:36696] [client 185.120.144.6] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [ ... show less	Bad Web Bot Web App Attack
Rizzy	2024-02-02 09:21:35 (7 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
gu-alvareza	2024-02-02 07:05:22 (7 months ago)	WordPress.HTTP.Path.Traversal	Hacking Web App Attack