JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.19.52.147

195.19.52.147 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 37%: ?

37%

ISP	Zelenij prospekt, 8B
Usage Type	Fixed Line ISP
ASN	AS57529
Domain Name	gtnt.ru
Country	🇷🇺 Russian Federation
City	Saint Petersburg, St.-Petersburg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.19.52.147

Whois 195.19.52.147

IP Abuse Reports for 195.19.52.147:

This IP address has been reported a total of 37 times from 21 distinct sources. 195.19.52.147 was first reported on May 24th 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-09-02 08:01:02 (10 hours ago)	Email: Login failures from Bad Reputation IP: 195.19.52.147. Threat Score: 6/10 (MEDIUM). Confidence ... show more Email: Login failures from Bad Reputation IP: 195.19.52.147. Threat Score: 6/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-02 07:01:00 (11 hours ago)	Email: Login failures from Bad Reputation IP: 195.19.52.147. Threat Score: 6.2/10 (MEDIUM). Confiden ... show more Email: Login failures from Bad Reputation IP: 195.19.52.147. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-02 06:00:09 (12 hours ago)	Email: Login failures from Bad Reputation IP: 195.19.52.147. Threat Score: 5.6/10 (MEDIUM). Reported ... show more Email: Login failures from Bad Reputation IP: 195.19.52.147. Threat Score: 5.6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇹 VHosting	2026-08-27 04:20:06 (6 days ago)	Detected mail brute force attack from different servers	Brute-Force
🇨🇿 interconnect.cz	2026-08-09 14:05:35 (3 weeks ago)	[09/Aug/2026 16:05:34] IP address 195.19.52.147 found in DNS blacklist SpamCop, mail from <ayrdgyxzj ... show more [09/Aug/2026 16:05:34] IP address 195.19.52.147 found in DNS blacklist SpamCop, mail from <[email protected]> to <[email protected]> [09/Aug/2026 16:05:34] IP address 195.19.52.147 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> [09/Aug/2026 16:05:35] IP address 195.19.52.147 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> ... show less	Brute-Force Email Spam
🇺🇸 TPI-Abuse	2026-08-07 01:04:46 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 195.19.52.147 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 195.19.52.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 06 21:04:38.880675 2026] [security2:error] [pid 3723761:tid 3723761] [client 195.19.52.147:49388] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|elsmithpest.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "elsmithpest.com"] [uri "/[email protected]"] [unique_id "anUvJiSp0NI401g8DiPlvAAAAAU"], referer: http://elsmithpest.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 NewGastroline	2026-08-04 09:46:34 (4 weeks ago)	Malicious request blocked by CrowdSec on gastro-prod1.boreus.de	Bad Web Bot Web App Attack
🇮🇩 sockominfo	2026-07-30 15:00:53 (1 month ago)	Zimbra: Login failures from malicious IP: 195.19.52.147. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 195.19.52.147. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-30 14:00:10 (1 month ago)	Zimbra: Login failures from malicious IP: 195.19.52.147. Threat Score: 6/10 (MEDIUM). Reported by Ta ... show more Zimbra: Login failures from malicious IP: 195.19.52.147. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇩🇪 NewGastroline	2026-07-29 00:06:34 (1 month ago)	Malicious request blocked by CrowdSec on gastro-prod1.boreus.de	Bad Web Bot Web App Attack
🇨🇦 DidierMX	2026-07-27 13:36:21 (1 month ago)	Wazuh Alert: Exim Auth Failed from 195.19.52.147	Brute-Force Web App Attack
🇩🇪 Admins@FBN	2026-07-20 05:08:54 (1 month ago)	FW-PortScan: Traffic Blocked srcport=58814 dstport=445	Port Scan
🇩🇪 Admins@FBN	2026-07-15 01:24:27 (1 month ago)	FW-PortScan: Traffic Blocked srcport=55526 dstport=445	Port Scan
🇨🇿 lp	2026-07-14 15:19:44 (1 month ago)	Email account brute force: 1 attempts were recorded from 195.19.52.147 2026-07-14T15:48:13+02:00 war ... show more Email account brute force: 1 attempts were recorded from 195.19.52.147 2026-07-14T15:48:13+02:00 warning: unknown[195.19.52.147]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇳🇱 maxxsense	2026-07-11 18:39:39 (1 month ago)	(postfix-unknown) Failed postfix unknown login with username [redacted] from 195.19.52.147 (RU/Russi ... show more (postfix-unknown) Failed postfix unknown login with username [redacted] from 195.19.52.147 (RU/Russia/-) show less	Hacking

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 34.19.186.210

🇦🇷 201.254.79.81

🇨🇳 118.81.205.160

🇸🇬 54.169.46.196

🇺🇸 50.234.225.110

🇧🇷 45.7.15.111

🇨🇳 42.233.178.173

🇺🇸 20.121.117.218

🇰🇬 217.29.30.135

🇹🇼 198.235.24.109

🇦🇷 190.174.141.188

🇵🇾 181.94.222.91

🇲🇦 105.157.210.113

🇬🇧 87.106.65.126

🇩🇪 87.106.4.173

🇺🇸 66.228.53.4

🇯🇵 59.142.163.25

🇺🇦 37.203.16.52

🇨🇳 36.32.70.174

🇫🇮 34.88.130.16