JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 205.147.22.23

205.147.22.23 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 65%: ?

65%

ISP	PV-SL-HOSTED-Mexico-City-Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS208172
Domain Name	ip.me
Country	🇲🇽 Mexico
City	Mexico City, Mexico City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 205.147.22.23

Whois 205.147.22.23

IP Abuse Reports for 205.147.22.23:

This IP address has been reported a total of 51 times from 25 distinct sources. 205.147.22.23 was first reported on December 22nd 2025, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-10-16 04:23:19 (18 hours ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: High Priority: %25252F show less	Hacking Exploited Host Web App Attack
🇨🇭 ALPHANET	2026-10-16 01:50:16 (20 hours ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇩🇪 LRob	2026-10-14 03:08:08 (2 days ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /categorie/previsions-meteo/page ... show more Not following 301 redirects — wasted requests \| method: GET \| path: /categorie/previsions-meteo/page/377 \| ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 \| 2026-10-14 03:08 UTC show less	Bad Web Bot
🇫🇷 Sklurk	2026-10-13 03:39:14 (3 days ago)	Web App Attack	Web App Attack
🇫🇷 Tilellit.PRO	2026-10-11 01:16:10 (5 days ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot
🇩🇪 netclix.gr	2026-10-09 06:43:14 (1 week ago)	(old_win_chrome) Blocked old Windows Chrome 205.147.22.23 (MX/Mexico/-): (CF_ENABLE)	Hacking
🇩🇪 LRob	2026-10-08 18:52:20 (1 week ago)	Not following 301 redirects — wasted requests \| method: GET \| path: / \| ua: Mozilla/5.0 (Windows NT ... show more Not following 301 redirects — wasted requests \| method: GET \| path: / \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-10-08 10:10:58 (1 week ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking
Anonymous	2026-09-26 03:00:38 (2 weeks ago)	Large-scale coordinated botnet (6M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (6M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Offpeak: Sessionless Catalog Access Blocked: /brands/shopby/manufacturer-kramer-extron-apc-hp-aruba_networks-infocus-projectiondesign-unify.html \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-26 02:27:20 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 205.147.22.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 205.147.22.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 22:27:04.155093 2026] [security2:error] [pid 24763:tid 24763] [client 205.147.22.23:62922] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|glolady.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "glolady.com"] [uri "/production/members.sql"] [unique_id "arcteASacPoUPxfotjqqSwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-24 04:26:04 (3 weeks ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking
🇵🇱 MatStef132	2026-09-23 15:37:27 (3 weeks ago)	MatShield L7: blocked on test-clean.mathost.eu (cache-bust-detected)	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-09-13 04:49:08 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇲🇽 octageeks.com	2026-09-12 04:10:39 (1 month ago)	Wordpress malicious attack:[octablocked]	Web App Attack
Anonymous	2026-09-09 21:50:02 (1 month ago)	Malicious activity detected	Hacking Web App Attack

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.53.206.49

🇺🇿 195.158.26.59

🇬🇧 138.68.183.158

🇷🇺 86.102.111.211

🇬🇧 64.227.34.152

🇮🇳 20.244.17.248

🇮🇹 185.55.211.135

🇬🇧 178.62.127.165

🇬🇧 178.62.59.242

🇬🇧 138.68.169.106

🇬🇧 134.209.24.178

🇦🇺 134.199.175.226

🇺🇸 100.29.192.36

🇺🇸 98.168.101.169

🇧🇬 91.191.209.46

🇧🇬 78.128.113.46

🇺🇸 70.184.82.151

🇯🇵 34.97.115.191

🇺🇸 34.56.117.205

🇮🇷 178.173.174.8