JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.253.160.27

185.253.160.27 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 5%: ?

ISP	M247 LTD Armenia Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247.com
Country	🇧🇬 Bulgaria
City	Sofia, Sofia-Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.253.160.27

Whois 185.253.160.27

IP Abuse Reports for 185.253.160.27:

This IP address has been reported a total of 48 times from 36 distinct sources. 185.253.160.27 was first reported on May 21st 2025, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-23 08:53:19 (21 hours ago)	Blocked by UFW (TCP on 8999) Source port: 18672 TTL: 40 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 8999) Source port: 18672 TTL: 40 Packet length: 60 TOS: 0x08 This report (for 185.253.160.27) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-20 14:25:39 (3 days ago)	Blocked by UFW (TCP on 20932) Source port: 41564 TTL: 40 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 20932) Source port: 41564 TTL: 40 Packet length: 60 TOS: 0x08 This report (for 185.253.160.27) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-04-22 10:18:30 (2 months ago)	2026-04-22 12:18:29 ERROR util.AccessViolations - 185.253.160.27 report to fail2ban - action: block ... show more 2026-04-22 12:18:29 ERROR util.AccessViolations - 185.253.160.27 report to fail2ban - action: block ... show less	Hacking Brute-Force Bad Web Bot
🇨🇿 ptlab	2026-04-12 08:45:51 (2 months ago)	Detected wp_login attack from WP-host.	Hacking Web App Attack
🇵🇱 sefinek.net	2026-04-03 11:37:54 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from BG. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from BG. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: /genshin-stella-mod \| UA: Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 Hmorrin	2026-03-31 12:39:53 (2 months ago)		Brute-Force
🇭🇺 Lacika555	2026-03-31 10:43:16 (2 months ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇩🇪 celestialcity	2026-03-14 20:31:09 (3 months ago)	Blocked by UFW on celestialcityeu [25599/tcp] \| SPT: 51861 \| TTL: 50 \| LEN: 60 \| TOS: 0x08 • Reporte ... show more Blocked by UFW on celestialcityeu [25599/tcp] \| SPT: 51861 \| TTL: 50 \| LEN: 60 \| TOS: 0x08 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 int8	2026-03-13 07:20:41 (3 months ago)	2026-03-13T07:20:41.017453464Z Minecraft server scanner: status request	Port Scan
🇳🇱 i-turnradio.nl	2026-02-11 21:57:48 (4 months ago)	2026-02-11 22:57:47 (CET) ~ Blocked by abusescan risk assessment	Web App Attack
🇺🇸 xmission.com	2026-02-04 04:11:08 (4 months ago)	Blocked by UFW (TCP on 1) Source port: 13980 TTL: 45 Packet length: 60 TOS: 0x00 This report (for 1 ... show more Blocked by UFW (TCP on 1) Source port: 13980 TTL: 45 Packet length: 60 TOS: 0x00 This report (for 185.253.160.27) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-01-29 16:30:28 (4 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇫🇷 Dampen59	2026-01-27 16:47:54 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 185.253.160.27 (AM/Armenia/-): 5 in the last 3600 secs; Ports ... show more (smtpauth) Failed SMTP AUTH login from 185.253.160.27 (AM/Armenia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-01-27 16:44:41 dovecot_login authenticator failed for H=(ADMIN) [185.253.160.27]:20932: 535 Incorrect authentication data ([email protected]) 2026-01-27 16:44:58 dovecot_login authenticator failed for H=(ADMIN) [185.253.160.27]:4025: 535 Incorrect authentication data ([email protected]) 2026-01-27 16:44:59 dovecot_login authenticator failed for H=(ADMIN) [185.253.160.27]:58654: 535 Incorrect authentication data ([email protected]) 2026-01-27 16:47:51 dovecot_login authenticator failed for H=(ADMIN) [185.253.160.27]:60492: 535 Incorrect authentication data 2026-01-27 16:47:52 dovecot_login authenticator failed for H=(ADMIN) [185.253.160.27]:7157: 535 Incorrect authentication data show less	Port Scan
🇮🇹 Progetto1	2025-12-31 12:13:02 (5 months ago)	Mail - Multiple failed login attempts	Brute-Force Exploited Host
🇧🇷 SvrAdmin	2025-12-31 04:04:15 (5 months ago)	[101] (smtpauth) Failed SMTP AUTH login from 185.253.160.27 (AM/Armenia/-): 5 in the last 3600 secs; ... show more [101] (smtpauth) Failed SMTP AUTH login from 185.253.160.27 (AM/Armenia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2025-12-31 01:00:48 dovecot_login authenticator failed for (ADMIN) [185.253.160.27]:45668: 535 Incorrect authentication data ([email protected]) 2025-12-31 01:01:01 dovecot_login authenticator failed for (ADMIN) [185.253.160.27]:45658: 535 Incorrect authentication data ([email protected]) 2025-12-31 01:02:23 dovecot_login authenticator failed for (ADMIN) [185.253.160.27]:15307: 535 Incorrect authentication data ([email protected]) 2025-12-31 01:03:03 dovecot_login authenticator failed for (ADMIN) [185.253.160.27]:10883: 535 Incorrect authentication data ([email protected]) 2025-12-31 01:04:10 dovecot_login authenticator failed for (ADMIN) [185.253.160.27]:27069: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.94.25.243

🇺🇸 195.184.76.104

🇮🇳 182.74.4.122

🇮🇳 103.176.16.1

🇧🇬 79.124.56.146

🇺🇸 64.62.197.128

🇮🇳 2401:4900:8f6c:24bd:29cf:40a6:cfc8:749

🇨🇳 223.64.54.179

🇹🇼 198.235.24.74

🇰🇪 197.248.207.139

🇩🇪 194.88.98.115

🇦🇲 176.32.193.16

🇯🇵 155.2.216.27

🇺🇸 154.40.36.76

🇧🇩 103.180.113.226

🇨🇳 61.52.224.247

🇫🇷 51.68.111.243

🇮🇳 49.50.79.215

🇲🇽 38.35.225.197

🇺🇸 35.94.155.53