JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.252.232.120

185.252.232.120 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 13%: ?

13%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3428060.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.252.232.120

Whois 185.252.232.120

IP Abuse Reports for 185.252.232.120:

This IP address has been reported a total of 46 times from 30 distinct sources. 185.252.232.120 was first reported on January 26th 2024, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 SentinalX by uzumaru	2026-08-31 01:50:54 (6 hours ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: query1.finance.yahoo.com:443 show less	Open Proxy Port Scan
🇯🇵 SentinalX by uzumaru	2026-08-30 00:17:27 (1 day ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: query1.finance.yahoo.com:443 show less	Open Proxy Port Scan
🇯🇵 SentinalX by uzumaru	2026-08-19 06:57:57 (1 week ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: data.tradingview.com:443 show less	Open Proxy Port Scan
🇯🇵 demonsword	2026-08-15 10:09:52 (2 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: data.tradingview.com:443 show less	Open Proxy Port Scan
🇩🇪 Marc	2024-02-03 23:34:43 (2 years ago)		Brute-Force
🇲🇹 Malta	2024-02-03 23:19:44 (2 years ago)	185.252.232.120 - - [04/Feb/2024:00:19:44 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ... show more 185.252.232.120 - - [04/Feb/2024:00:19:44 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36" show less	Hacking Web App Attack
Anonymous	2024-02-03 13:10:55 (2 years ago)	LP_FAIL on WP_LOGIN, BF_DETECTED	Hacking Brute-Force Web App Attack
🇵🇱 bmino.pl	2024-02-03 12:45:49 (2 years ago)	Autoban 185.252.232.120 BLOCK ACCESS	Brute-Force
🇩🇪 dwmp	2024-02-03 11:22:50 (2 years ago)	185.252.232.120 - - [03/Feb/2024:10:38:27 +0100] "POST /wp-login.php HTTP/1.1" 200 8474 "-" "Mozilla ... show more 185.252.232.120 - - [03/Feb/2024:10:38:27 +0100] "POST /wp-login.php HTTP/1.1" 200 8474 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.252.232.120 - - [03/Feb/2024:10:52:16 +0100] "POST /wp-login.php HTTP/1.1" 200 8451 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36" 185.252.232.120 - - [03/Feb/2024:12:22:49 +0100] "POST /wp-login.php HTTP/1.1" 200 8800 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.70 Safari/537.36" ... show less	Brute-Force
🇦🇺 MAGIC	2024-02-03 03:08:23 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇲🇹 Malta	2024-02-02 22:56:38 (2 years ago)	185.252.232.120 - - [02/Feb/2024:23:56:38 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ... show more 185.252.232.120 - - [02/Feb/2024:23:56:38 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1700.107 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 RLDD	2024-02-02 15:19:29 (2 years ago)	WP login attempts -mob	Brute-Force
Anonymous	2024-02-02 03:50:20 (2 years ago)	wordpress authentication brute force	Brute-Force Web App Attack
Anonymous	2024-02-02 02:08:02 (2 years ago)	Bot / scanning and/or hacking attempts: POST /wp-login.php HTTP/1.1	Hacking Web App Attack
🇦🇺 ozisp.com.au	2024-02-01 21:18:58 (2 years ago)	null_null_<33>1706822335 [1:2012843:2] ET POLICY Cleartext WordPress Login [Classification: Potentia ... show more null_null_<33>1706822335 [1:2012843:2] ET POLICY Cleartext WordPress Login [Classification: Potential Corporate Privacy Violation] [Priority: 1] {TCP} 185.252.232.120:47792 show less	Hacking

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.236

🇲🇾 49.124.152.145

🇨🇦 45.194.92.14

🇳🇱 45.148.10.157

🇧🇪 34.76.199.251

192.168.117.159

🇲🇽 187.190.25.154

🇵🇪 181.177.241.110

🇩🇪 167.94.145.19

🇧🇷 162.241.203.127

🇹🇷 5.11.135.25

🇳🇱 209.38.46.105

🇧🇷 200.159.0.218

🇦🇷 190.104.36.84

🇧🇷 187.94.255.130

🇺🇸 184.105.139.85

🇩🇪 178.254.28.42

🇩🇪 167.94.146.35

🇺🇸 162.216.150.195

🇺🇸 136.108.98.202