AbuseIPDB » 185.220.100.252

185.220.100.252 was found in our database!

This IP was reported 16,413 times. Confidence of Abuse is 100%: ?

100%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	F3 Netze E.V.
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	tor-exit-1.zbau.f3netze.de
Domain Name	f3netze.de
Country	Germany
City	Hassfurt, Bayern

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 185.220.100.252

Whois 185.220.100.252

IP Abuse Reports for 185.220.100.252:

This IP address has been reported a total of 16,413 times from 762 distinct sources. 185.220.100.252 was first reported on November 21st 2020, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Sefinek	2024-10-04 06:47:01 (2 hours ago)	Triggered Cloudflare WAF (firewallCustom) from T1. Action taken: CHALLENGE ASN: 205100 ( ... show moreTriggered Cloudflare WAF (firewallCustom) from T1. Action taken: CHALLENGE ASN: 205100 (F3NETZE) Protocol: HTTP/1.1 (method GET) Domain: sefinek.net Endpoint: /genshin-stella-mod Timestamp: 2024-10-03T21:34:55Z Ray ID: 8cd00f1b7eedd259 Rule ID: cc5e7a6277d447eca9c1818934ba65c8 UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Report generated by Node-Cloudflare-WAF-AbuseIPDB https://github.com/sefinek24/Node-Cloudflare-WAF-AbuseIPDB show less	Bad Web Bot
physke	2024-10-03 21:43:52 (11 hours ago)	REQUESTED PAGE: /.DS_Store	Web App Attack
nNordic	2024-10-03 17:57:47 (15 hours ago)	Connection attempt blocked by IDS/IPS from IP 185.220.100.252/32	Hacking
strzonnek	2024-10-03 12:35:01 (20 hours ago)	attack on webform	Brute-Force Web App Attack
Sefinek	2024-10-03 12:16:38 (20 hours ago)	Triggered Cloudflare WAF (securitylevel) from T1. Action taken: MANAGED_CHALLENGE ASN: 2 ... show moreTriggered Cloudflare WAF (securitylevel) from T1. Action taken: MANAGED_CHALLENGE ASN: 205100 (F3NETZE) Protocol: HTTP/1.0 (method GET) Domain: blocklist.sefinek.net Endpoint: /generated/127.0.0.1/forks/oisd.nsfw.txt Timestamp: 2024-10-03T02:28:03Z Ray ID: 8cc97f2168504db7 Rule ID: badscore UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36 Report generated by Node-Cloudflare-WAF-AbuseIPDB https://github.com/sefinek24/Node-Cloudflare-WAF-AbuseIPDB show less	Bad Web Bot
Bikram Thapa	2024-10-02 19:43:59 (1 day ago)	Connection attempt blocked by IDS/IPS from IP 185.220.100.252/32	Hacking
Anonymous	2024-10-02 18:21:57 (1 day ago)	Spam in form	Email Spam
nNordic	2024-10-02 14:38:27 (1 day ago)	Connection attempt blocked by IDS/IPS from IP 185.220.100.252/32	Hacking
Sefinek	2024-10-02 11:42:17 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from T1. Action taken: CHALLENGE ASN: 205100 ( ... show moreTriggered Cloudflare WAF (firewallCustom) from T1. Action taken: CHALLENGE ASN: 205100 (F3NETZE) Protocol: HTTP/1.1 (method GET) Domain: sefinek.net Endpoint: / Timestamp: 2024-10-02T02:05:15Z Ray ID: 8cc1205b5b351c22 Rule ID: cc5e7a6277d447eca9c1818934ba65c8 UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Report generated by Node-Cloudflare-WAF-AbuseIPDB https://github.com/sefinek24/Node-Cloudflare-WAF-AbuseIPDB show less	Bad Web Bot
strzonnek	2024-10-02 10:26:03 (1 day ago)	attack on webform	Brute-Force Web App Attack
niceshops.com	2024-10-02 03:00:43 (2 days ago)	Large amount of http-requests in short time ([02/Oct/2024:04:57:01.673] )	Bad Web Bot
strzonnek	2024-10-01 08:51:24 (3 days ago)	attack on webform	Brute-Force Web App Attack
virtualc.nl	2024-10-01 02:09:24 (3 days ago)	Blocked by UFW (TCP on port 9090). Source port: 25697 TTL: 52 Packet length: 60<br ... show moreBlocked by UFW (TCP on port 9090). Source port: 25697 TTL: 52 Packet length: 60 TOS: 0x00 Timestamp: [Europe/Warsaw] This report (for 185.220.100.252) was generated by: https://github.com/sefinek24/UFW-AbuseIPDB-Reporter show less	Port Scan
strzonnek	2024-09-30 07:45:43 (4 days ago)	attack on webform	Brute-Force Web App Attack
ModiranHost.com	2024-09-30 04:05:24 (4 days ago)	Sep 30 07:35:22 IN=eth0 OUT= MAC=[REMOVED]:[REMOVED]:08:00 SRC=185.220.100.252 DST=[REMOVED].152.80 ... show moreSep 30 07:35:22 IN=eth0 OUT= MAC=[REMOVED]:[REMOVED]:08:00 SRC=185.220.100.252 DST=[REMOVED].152.80 LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=4985 DF PROTO=TCP SPT=32283 DPT=8291 WINDOW=42340 RES=0x00 SYN URGP=0 ... show less	Hacking Web App Attack