JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.244.152.128

185.244.152.128 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 31%: ?

31%

ISP	Kurdistan Net Company for Computer and Internet Ltd.
Usage Type	Fixed Line ISP
ASN	AS206206
Domain Name	knet-telecom.com
Country	🇮🇶 Iraq
City	Erbil, Erbil

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.244.152.128

Whois 185.244.152.128

IP Abuse Reports for 185.244.152.128:

This IP address has been reported a total of 42 times from 24 distinct sources. 185.244.152.128 was first reported on January 14th 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 gui-ying233	2026-07-06 00:09:00 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 nodepile	2026-07-01 11:46:55 (2 weeks ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/ ua='M ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/ ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 nodepile	2026-06-29 04:10:02 (2 weeks ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇰🇷 zlhIcd	2026-06-25 08:06:04 (3 weeks ago)	185.244.152.128 - - [16/Jun/2026:09:44:17 +0900] "GET /pcwiki/index.php?hideliu=1&hideminor=1&hidemy ... show more 185.244.152.128 - - [16/Jun/2026:09:44:17 +0900] "GET /pcwiki/index.php?hideliu=1&hideminor=1&hidemyself=0&limit=250&target=%EB%AA%A9%ED%95%84%ED%86%B5&title=%ED%8A%B9%EC%88%98%EA%B8%B0%EB%8A%A5:%EB%A7%81%ED%81%AC%EC%B5%9C%EA%B7%BC%EB%B0%94%EB%80%9C HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11.0; rv:136.0) Gecko/20100101 Firefox/136.0" ... show less	Web Spam SQL Injection Bad Web Bot Web App Attack
🇦🇺 MAGIC	2026-06-23 09:03:51 (3 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 prologic	2026-06-13 19:05:54 (1 month ago)	Distributed application-layer DoS against git.mills.io (self-hosted Gitea). High-volume automated re ... show more Distributed application-layer DoS against git.mills.io (self-hosted Gitea). High-volume automated requests to expensive Git repository endpoints (commit/diff/blame/archive views), ~1 request per IP, spoofed browser UA, rejected with HTTP 429. Residential-proxy botnet campaign, 2026-06-13/14 UTC. show less	DDoS Attack Web App Attack
🇩🇪 botreporter	2026-06-10 19:44:49 (1 month ago)	botnet ignoring robots.txt	Bad Web Bot
🇺🇸 nodepile	2026-06-08 05:36:52 (1 month ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0') show less	Web App Attack Exploited Host
Anonymous	2026-06-04 18:15:10 (1 month ago)	Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Attack Signatur ... show more Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Attack Signature Blocked: /wishlist/index/add/product/13554/form_key/UOqDP6iAKRA4PEsq/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like G... show less	Hacking Bad Web Bot Web App Attack
🇺🇸 nodepile	2026-06-03 11:01:39 (1 month ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇩🇪 HandyTreff.de	2026-05-17 14:11:03 (1 month ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -91.17 (Bad < -10 / Very Bad < -20 / ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -91.17 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.3 show less	Web App Attack Bad Web Bot
🇺🇸 fortypoundhead	2026-04-27 23:44:47 (2 months ago)	Banned IP Address	Hacking Web App Attack
🇺🇸 nodepile	2026-04-23 03:51:48 (2 months ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 Edg/136.0.0.0') show less	Web App Attack Exploited Host
🇺🇸 TPI-Abuse	2026-04-18 10:29:44 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 185.244.152.128 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 185.244.152.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 06:29:39.537946 2026] [security2:error] [pid 1866761:tid 1866761] [client 185.244.152.128:6915] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.wadenelson.com\|F\|2"] [data ".fasturtle.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.wadenelson.com"] [uri "/www.fasturtle.com"] [unique_id "aeNdE_4yb-6BkENYAFitmwAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 etu brutus	2026-03-30 16:01:16 (3 months ago)	185.244.152.128 has been banned for [WebApp Attack] ...	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.57.162.173

🇵🇱 176.53.159.198

🇩🇪 172.217.33.211

🇩🇪 167.94.145.30

🇬🇧 163.5.138.77

🇬🇧 163.5.138.74

🇺🇸 162.216.150.230

🇫🇮 147.185.133.125

🇳🇱 45.148.10.183

🇳🇱 45.148.10.147

🇺🇸 40.124.175.251

🇬🇧 35.203.210.169

🇺🇸 35.139.160.160

🇺🇸 3.83.245.221

🇨🇳 220.161.52.149

🇭🇰 199.45.155.93

🇻🇳 171.250.163.218

🇨🇳 123.12.191.141

🇧🇳 119.160.166.237

🇺🇸 91.230.168.236