185.231.239.252

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
24% Elevated
22 reports
15 reporters · latest 2 days ago
ISP
MOSES Internet s.r.o.
Usage Type
Fixed Line ISP
ASN
AS205044
Hostname(s)
185.231.239.252.moses.cz
Domain Name
moses.cz
Country
🇨🇿 Czechia
City
Krnov, Moravian-Silesian Region
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
22 from 15 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇨🇿 Czechia 3 🇵🇱 Poland 1 🇷🇴 Romania 1
Most common categories Hacking 3 Brute-Force 2 Web App Attack 2 Bad Web Bot 2 DDoS Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
IP matched detection query Detection of too many failed responses.
Brute-Force Bad Web Bot Hacking
🇵🇱 MatStef132
MatShield L7: blocked on a protected site (sec-fetch-before-safari-16)
DDoS Attack
🇷🇴 DamonOne
Blocked by OPNsense; 6 hits, proto=udp, ports=25854
Port Scan Hacking
Anonymous
IP matched detection query 20 more in short time bad rqs.
Brute-Force Web App Attack Hacking
🇨🇿 ptlab
Web attack probes: 46 suspicious URL paths (23 known-malicious), 56 requests; 26 successful (2xx) requests to attack paths; seen on 2 of our servers; last seen 2026-09-29 (UTC). Reported automatically by PathDB log analysis.
Bad Web Bot Web App Attack
Anonymous
IP matched detection query 20 more in short time bad rqs.
Brute-Force Web App Attack Hacking
Anonymous
Hacking Bad Web Bot Web App Attack
🇺🇸 bitblockit
Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. Decoy listen port: 37167/tcp. Observed event time: 2026-05-23 23:52:26 UTC. Report from passive honeypot only; no payload or credentials included.
Port Scan
🇺🇸 TPI-Abuse
"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access"
DDoS Attack SQL Injection Exploited Host
Anonymous
scanning http requests from known botnet
Web App Attack
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
🇦🇺 MAGIC
Distributed DDOS attempts for multiple sites
DDoS Attack Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇽 187.245.215.114
🇦🇷 186.12.169.145
🇧🇷 179.228.180.136
🇷🇺 109.106.138.63
🇸🇮 31.57.216.46
🇩🇪 102.220.162.137
🇺🇸 70.184.96.147
🇳🇱 45.148.10.151
🇻🇳 210.245.30.140
🇨🇭 104.251.180.156
🇵🇱 81.162.213.244
🇩🇪 69.5.169.229
🇩🇪 64.188.91.167
🇨🇦 45.198.224.251
🇺🇸 172.174.128.184
🇺🇸 40.124.123.24
🇯🇵 8.211.168.73
🇰🇿 212.154.254.116
🇺🇸 156.242.64.5
🇺🇸 68.167.206.124
feedback