JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

185.147.213.20

Neutral Activity

Abuse confidence score ?

0% Low Risk

209 reports

43 reporters · latest 2 years ago

ISP	Strong Technology, LLC
Usage Type	Commercial
ASN	AS62651
Hostname(s)	185-147-213-20.arn.as62651.net
Domain Name	strongtechnology.net
Country	🇸🇪 Sweden
City	Kista, Stockholm

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

185.147.213.20 has been reported 209 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 185.147.213.20

Export CSV

This IP address has been reported a total of 209 times from 43 distinct sources. 185.147.213.20 was first reported on December 2nd 2020, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2024-09-05 23:02:21 (2 years ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇱🇺 Tha_14	2024-04-15 20:10:39 (2 years ago)	Incoming UDP Connection from 185.147.213.20 to port: 1026. Honeypot was triggered at 4/15/2024 09:09 ... show more Incoming UDP Connection from 185.147.213.20 to port: 1026. Honeypot was triggered at 4/15/2024 09:09:31 PM. show less	Port Scan
Anonymous	2024-03-27 07:20:25 (2 years ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇺🇸 TPI-Abuse	2023-12-26 02:56:00 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 185.147.213.20 (185-147-213-20.arn.as54203.net) ... show more (mod_security) mod_security (id:225170) triggered by 185.147.213.20 (185-147-213-20.arn.as54203.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 25 21:55:54.795492 2023] [security2:error] [pid 16229] [client 185.147.213.20:43835] [client 185.147.213.20] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|pennygillespie.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pennygillespie.com"] [uri "/shop/wp-json/wp/v2/users/"] [unique_id "ZYpAuvbT_rbOrK2KfH-3UQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 Martain	2023-12-17 10:59:38 (2 years ago)	unauthorized VPN access attempt (user: testuser)	Hacking Brute-Force
🇺🇸 TPI-Abuse	2023-12-01 18:32:16 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 185.147.213.20 (185-147-213-20.arn.as54203.net) ... show more (mod_security) mod_security (id:225170) triggered by 185.147.213.20 (185-147-213-20.arn.as54203.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 01 13:32:12.477669 2023] [security2:error] [pid 25202] [client 185.147.213.20:42991] [client 185.147.213.20] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|baesales.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "baesales.com"] [uri "/shop/wp-json/wp/v2/users/"] [unique_id "ZWomrN3iAeBDBbKEKovsbwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2023-05-18 18:11:40 (3 years ago)	Distributed DDOS attempts for multiple sites	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2023-04-09 08:15:58 (3 years ago)	Distributed DDOS attempts for multiple sites	DDoS Attack Bad Web Bot
🇺🇸 nowyouknow	2023-04-04 09:01:56 (3 years ago)	(From [email protected]) Hey, Do you need blog posts to help you compete onli ... show more (From [email protected]) Hey, Do you need blog posts to help you compete online? Studies have shown that posting high-quality content to your blog regularly (1-4 times/week) boosts SEO and traffic. Check out my discounted rates for regular blog packages here: https://writingbybenjamin.com/ I look forward to working with you! Benjamin Avoid Marketing Messages Here: https://organictrafficexplosion.com/opt-out/ show less	Phishing Web Spam
Anonymous	2023-03-17 08:50:45 (3 years ago)	port scan and connect, tcp 443 (https)	Port Scan
🇺🇸 ISPLtd	2023-02-17 17:49:20 (3 years ago)	Feb 17 10:49:13 SRC=185.147.213.20 PROTO=UDP SPT=59301 DPT=37381 Feb 17 10:49:17 SRC=185.147.213.20 ... show more Feb 17 10:49:13 SRC=185.147.213.20 PROTO=UDP SPT=59301 DPT=37381 Feb 17 10:49:17 SRC=185.147.213.20 PROTO=TCP SPT=62641 DPT=7 SYN Feb 17 10:49:18 SRC=185.147.213.20 PROTO=TCP SPT=62641 DPT=7 SYN ... show less	Port Scan
Anonymous	2023-02-10 13:03:26 (3 years ago)	port scan and connect, tcp 80 (http)	Port Scan
🇪🇸 10dencehispahard SL	2022-12-09 12:03:03 (3 years ago)	Suspicious activity detected by Modsecurity [Application attack SQLI]	SQL Injection Web App Attack
🇯🇵 HeliJP	2022-12-09 10:15:07 (3 years ago)	2022-12-09 07:54:50 - Recognized attacks\bad behavior from IP address 185.147.213.20 on port 443\80 ... show more 2022-12-09 07:54:50 - Recognized attacks\bad behavior from IP address 185.147.213.20 on port 443\80 (9 daily hits): SQL Injection Attack Detected via libinjection, SQL Injection Attack: SQL Tautology Detected, SQL Injection Attack show less	Hacking SQL Injection
🇹🇼 kk_it_man	2022-12-09 03:12:26 (3 years ago)	hack	Hacking

Showing 1 to 15 of 209 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.223.107.86

🇧🇷 205.210.31.210

🇳🇱 195.178.110.108

🇳🇱 172.71.182.244

🇺🇸 165.154.36.130

🇱🇹 62.60.130.242

🇬🇧 20.77.26.9

🇱🇹 5.20.21.146

🇳🇱 172.71.183.28

🇫🇷 91.231.89.21

🇸🇬 47.84.144.183

🇺🇸 20.163.3.47

🇹🇭 202.44.237.245

🇮🇳 182.76.115.214

🇨🇳 180.76.57.94

🇺🇸 173.46.91.119

🇺🇸 171.22.217.33

🇺🇸 166.62.41.13

🇮🇩 163.7.6.41

🇺🇸 162.216.150.133