JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.151.252.145

185.151.252.145 was found in our database!

This IP was reported 97 times. Confidence of Abuse is 64%: ?

64%

ISP	VEJNET.CZ s.r.o.
Usage Type	Fixed Line ISP
ASN	AS202877
Hostname(s)	252-145.nat.vejnet
Domain Name	vejnet.cz
Country	🇨🇿 Czechia
City	Karvina, Moravian-Silesian Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.151.252.145

Whois 185.151.252.145

IP Abuse Reports for 185.151.252.145:

This IP address has been reported a total of 97 times from 60 distinct sources. 185.151.252.145 was first reported on April 18th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 jkhorvath.com	2026-06-28 19:10:41 (1 day ago)	Request for URL /xmlrpc.php	Phishing Brute-Force Web App Attack
Anonymous	2026-06-27 23:15:06 (1 day ago)	[ns31.kdns.gr] httpd-xmlrpc-post: sites=ceramics-menegis.gr; logs=/var/log/httpd/domains/ceramics-me ... show more [ns31.kdns.gr] httpd-xmlrpc-post: sites=ceramics-menegis.gr; logs=/var/log/httpd/domains/ceramics-menegis.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇺🇸 integrantservices.com	2026-06-25 20:10:48 (3 days ago)	(wordpress) Failed wordpress login from 185.151.252.145 (CZ/Czechia/252-145.nat.vejnet)	Brute-Force
🇺🇸 integrantservices.com	2026-06-23 20:08:29 (5 days ago)	(wordpress) Failed wordpress login from 185.151.252.145 (CZ/Czechia/252-145.nat.vejnet)	Brute-Force
🇺🇸 TPI-Abuse	2026-06-22 19:33:56 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 185.151.252.145 (252-145.nat.vejnet): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 185.151.252.145 (252-145.nat.vejnet): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 15:33:49.338352 2026] [security2:error] [pid 18361:tid 18361] [client 185.151.252.145:57206] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|eye7graphics.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "eye7graphics.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajmOHWHSglRGxAGfIO6iSQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob.fr	2026-06-20 22:30:03 (1 week ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-20 22:25:17 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇩🇪 lespbaj	2026-06-14 10:24:50 (2 weeks ago)	{"time":"2026-06-14T10:24:49+00:00","ip":"185.151.252.145","method":"POST","uri":"/xmlrpc.php","ua": ... show more {"time":"2026-06-14T10:24:49+00:00","ip":"185.151.252.145","method":"POST","uri":"/xmlrpc.php","ua":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/89.0.0.0 Safari/537.36","referer":""} ... show less	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-06-13 09:23:08 (2 weeks ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 14:19:31 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 185.151.252.145 (252-145.nat.vejnet): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 185.151.252.145 (252-145.nat.vejnet): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 10:19:26.022585 2026] [security2:error] [pid 31021:tid 31036] [client 185.151.252.145:49860] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|thecraftsycat.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thecraftsycat.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiwVbga9Fo67FNbPQ0ZbdwAAAEw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 integrantservices.com	2026-06-11 18:03:45 (2 weeks ago)	(wordpress) Failed wordpress login from 185.151.252.145 (CZ/Czechia/252-145.nat.vejnet)	Brute-Force
🇺🇸 TPI-Abuse	2026-06-11 17:33:54 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 185.151.252.145 (252-145.nat.vejnet): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 185.151.252.145 (252-145.nat.vejnet): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 13:33:49.218669 2026] [security2:error] [pid 25602:tid 25602] [client 185.151.252.145:57087] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|superzilla.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "superzilla.com"] [uri "/wp-json/wp/v2/users"] [unique_id "airxfQGOTYa9h6D4_H5GNAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 13:18:09 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 185.151.252.145 (252-145.nat.vejnet): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 185.151.252.145 (252-145.nat.vejnet): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 09:18:05.977085 2026] [security2:error] [pid 8994:tid 8994] [client 185.151.252.145:50528] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kmelson.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kmelson.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiVvjQdDDzVxbctmLOZw6QAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-02 19:01:46 (3 weeks ago)		Web App Attack
🇩🇪 4server	2026-06-02 17:08:04 (3 weeks ago)	[TueJun0219:08:01.9638722026][security2:error][pid447362:tid447527][client185.151.252.145:0]ModSecur ... show more [TueJun0219:08:01.9638722026][security2:error][pid447362:tid447527][client185.151.252.145:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"subitotraslochi.ch\"][uri\"/xmlrpc.php\"][unique_id\"ah8N8Rf1fHMAXSOw4PWzPgAAAQo\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 97 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 118.194.233.182

🇧🇷 186.239.41.74

🇺🇸 172.214.209.153

🇧🇩 161.248.201.12

🇸🇬 129.226.197.29

🇵🇭 118.193.72.187

🇮🇩 103.112.245.85

🇷🇺 95.215.0.144

🇷🇴 80.94.95.211

🇺🇸 66.132.195.104

🇱🇹 46.29.234.126

🇮🇱 2.54.99.50

🇮🇹 188.152.238.126

🇦🇷 186.38.26.5

🇨🇴 161.18.234.168

🇻🇳 103.109.31.203

🇻🇳 103.109.31.23

🇫🇮 95.216.198.124

🇺🇸 95.173.216.11

🇮🇶 65.20.167.78