JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.252.220.147

185.252.220.147 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 21%: ?

21%

ISP	M247 Europe - Bucharest Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247global.com
Country	🇷🇴 Romania
City	Bucharest, Bucharest

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.252.220.147

Whois 185.252.220.147

IP Abuse Reports for 185.252.220.147:

This IP address has been reported a total of 23 times from 19 distinct sources. 185.252.220.147 was first reported on September 3rd 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 contactcrm	2026-07-17 14:24:46 (2 weeks ago)	Form Spam : Form Spam	Web Spam
🇺🇸 Jason Howell	2026-07-04 12:51:49 (4 weeks ago)	185.252.220.147 - - [04/Jul/2026:05:12:20 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4991 "-" "Mozilla/5 ... show more 185.252.220.147 - - [04/Jul/2026:05:12:20 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4991 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.0.0 Safari/537.36" 185.252.220.147 - - [04/Jul/2026:05:12:20 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4992 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/11.0.0.0 Safari/537.36" 185.252.220.147 - - [04/Jul/2026:05:24:01 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4992 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/15.0.0.0 Safari/537.36" 185.252.220.147 - - [04/Jul/2026:05:24:08 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4991 "-" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/78.0.0.0 Safari/537.36" 185.252.220.147 - - [04/Jul/2026:05:24:32 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4992 "-" "Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/95.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 01:23:05 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 185.252.220.147 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 185.252.220.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 21:22:58.671410 2026] [security2:error] [pid 4763:tid 4763] [client 185.252.220.147:6918] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mosheimlib.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mosheimlib.org"] [uri "/wp-json/wp/v2/users"] [unique_id "akMacnDV7y4RIa7Fe06NbgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-06-29 13:43:03 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇸🇬 serverutama	2026-06-13 23:03:01 (1 month ago)	Nginx scanner: 185.252.220.147 - - [14/Jun/2026:05:50:21 +0700] "GET /mysql.sql HTTP/1.1" 301 162 "- ... show more Nginx scanner: 185.252.220.147 - - [14/Jun/2026:05:50:21 +0700] "GET /mysql.sql HTTP/1.1" 301 162 "-" "python-requests/2.32.5" "-" 185.252.220.147 - - [14/Jun/2026:05:50:22 +0700] "GET /mysql.sql HTTP/1.1" 444 0 "-" "python-requests/2.32.5" "-" show less	Web App Attack Bad Web Bot
🇹🇷 Doruk	2026-05-31 11:20:01 (2 months ago)	Unauthorized connection attempt	Brute-Force
🇲🇹 Malta	2026-03-11 13:50:20 (4 months ago)	185.252.220.147 - - [11/Mar/2026:14:50:20 +0100] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Linux; An ... show more 185.252.220.147 - - [11/Mar/2026:14:50:20 +0100] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.0.0 Safari/537.36" show less	Hacking Web App Attack VPN IP
Anonymous	2025-11-26 11:20:44 (8 months ago)	26-11-2025 12:20:44.11 ERROR util.AccessViolations - 185.252.220.147 report to fail2ban - action: bl ... show more 26-11-2025 12:20:44.11 ERROR util.AccessViolations - 185.252.220.147 report to fail2ban - action: block ... show less	Hacking Brute-Force Bad Web Bot
Anonymous	2025-11-24 07:02:42 (8 months ago)	Web attack	Bad Web Bot Web App Attack
🇳🇱 exxos	2025-11-07 12:03:34 (8 months ago)	Attacks with Bad user agents	Hacking
Anonymous	2025-10-18 16:02:23 (9 months ago)	Web attack	Bad Web Bot Web App Attack
🇺🇸 xmission.com	2025-07-14 17:26:31 (1 year ago)	Blocked by UFW (TCP on 1) Source port: 46953 TTL: 50 Packet length: 60 TOS: 0x00 This report (for 1 ... show more Blocked by UFW (TCP on 1) Source port: 46953 TTL: 50 Packet length: 60 TOS: 0x00 This report (for 185.252.220.147) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2025-02-19 07:22:28 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇲🇾 syokadmin	2025-02-14 00:49:46 (1 year ago)	185.252.220.147 (RO/Romania/-), 2 distributed imapd attacks on account [[email protected]] in the las ... show more 185.252.220.147 (RO/Romania/-), 2 distributed imapd attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
Anonymous	2025-01-28 05:15:17 (1 year ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.4.91.162

🇯🇵 205.234.242.74

🇨🇳 182.105.123.10

🇮🇩 163.7.14.140

🇸🇬 156.240.235.180

🇨🇳 111.225.148.85

🇨🇴 108.174.156.122

🇳🇱 45.156.128.56

🇺🇸 43.153.7.119

🇧🇪 34.78.66.75

🇺🇸 20.65.217.70

🇺🇸 20.64.105.236

🇹🇼 198.235.24.100

🇺🇸 162.217.100.36

🇦🇺 144.48.37.90

🇸🇪 130.49.10.50

🇨🇳 116.232.22.43

🇺🇸 107.172.200.4

🇺🇸 104.247.197.189

🇸🇬 104.233.33.184