JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.252.220.151

185.252.220.151 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 16%: ?

16%

ISP	M247 Europe - Bucharest Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247global.com
Country	🇷🇴 Romania
City	Bucharest, Bucharest

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.252.220.151

Whois 185.252.220.151

IP Abuse Reports for 185.252.220.151:

This IP address has been reported a total of 20 times from 15 distinct sources. 185.252.220.151 was first reported on August 6th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-23 10:17:43 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 185.252.220.151 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 185.252.220.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 23 06:17:36.824742 2026] [security2:error] [pid 9187:tid 9187] [client 185.252.220.151:35684] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|smoothiessoupssalads.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "smoothiessoupssalads.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahF-wPwi5Ndziv_PRjFFsQAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-23 05:37:28 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 185.252.220.151 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 185.252.220.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 23 01:37:23.022144 2026] [security2:error] [pid 12108:tid 12108] [client 185.252.220.151:60931] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|495metro.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "495metro.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahE9E9QTs3P9Gmr-C20riQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 wlt-blocker	2026-05-14 06:17:28 (3 weeks ago)	Unauthorized access to webpage admin	Web App Attack
🇫🇷 Little Iguana	2026-05-14 05:44:24 (3 weeks ago)	Attempt to hack Wordpress Login, XMLRPC or other login	Hacking
Anonymous	2026-04-04 22:50:03 (2 months ago)	\| Multiple SQL injection attempts from same source ip.(multiple servers)	Web App Attack Hacking SQL Injection
🇫🇮 Erpelstolz	2026-03-19 09:40:53 (2 months ago)	external host: 185.252.220.151 - - [19/Mar/2026:10:40:52 +0100] "POST /xmlrpc.php HTTP/1.1" 404 9641 ... show more external host: 185.252.220.151 - - [19/Mar/2026:10:40:52 +0100] "POST /xmlrpc.php HTTP/1.1" 404 9641 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/92.0.0.0 Safari/537.36" show less	Web App Attack
🇩🇪 Hazzard	2026-03-17 14:15:44 (2 months ago)	(wordpress) Failed wordpress login from 185.252.220.151 (RO/Romania/București/-/-/[redacted]): (CF_ ... show more (wordpress) Failed wordpress login from 185.252.220.151 (RO/Romania/București/-/-/[redacted]): (CF_ENABLE) show less	Brute-Force
Anonymous	2025-11-25 08:02:05 (6 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-22 09:42:42 (6 months ago)	scanning http requests from known botnet	Web App Attack
🇳🇱 exxos	2025-08-27 06:03:01 (9 months ago)	Attacks with Bad user agents	Hacking
🇬🇧 MrRobert	2025-06-23 12:44:19 (11 months ago)	500 Internal Server Error GET /wp-content/themes/retrogeek/	Hacking
Anonymous	2025-02-20 10:47:32 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-12-03 05:18:17 (1 year ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2024-09-04 06:29:24 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇩🇪 georgengelmann	2024-08-23 08:41:32 (1 year ago)	Attack against SearxNG instances	DDoS Attack Bad Web Bot

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 103.27.248.91

🇨🇳 220.178.39.106

🇪🇸 196.196.150.124

🇨🇳 182.204.179.18

🇺🇸 172.98.33.235

🇦🇫 116.204.160.231

🇳🇱 85.121.127.155

🇫🇮 46.62.157.119

🇩🇪 45.135.194.24

🇭🇰 34.92.125.45

🇺🇸 34.71.132.217

🇮🇳 2a02:4780:11:1850:0:65d:1987:1

🇺🇸 2604:a880:400:d1:0:4:8bf5:7001

🇺🇸 109.105.210.83

🇬🇧 80.95.194.124

🇺🇸 57.141.20.37

🇹🇭 49.231.192.36

🇺🇸 40.124.184.27

🇺🇸 34.162.191.172

🇫🇮 34.88.126.207