37.252.221.253
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- KORABI-NET SHPK
- Usage Type
- Fixed Line ISP
- ASN
- AS211210
- Domain Name
- Unknown
- Country
- 🇦🇱 Albania
- City
- Peshkopi, Diber County
Abuse Reports
Total reports
20 from
14 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇵🇱 bmino.pl |
Autoban IP(2): 37.252.221.253 - Hostname: Korabi-net Shpk - City: Peshkopi - Country: Albania - Organization: Korabi-net Shpk - Reason: GET /?w=yoaaz155er16673eefcsggpa HTTP/1.1
|
Web App Attack | |
| 🇩🇪 FeG Deutschland |
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
|
Exploited Host Web App Attack | |
| 🇩🇪 FeG Deutschland |
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
|
Exploited Host Web App Attack | |
| 🇷🇺 AbuseIPDB informer |
nfdump top talker: 37.252.221.253 | first seen 2026-10-15 19:19:42 | duration 21.248s | flows=15 | packets=25575 | bytes=33963600 | pps=1203 | bps=12787500 | bpp=1328 | proto=udp
|
DDoS Attack Port Scan Exploited Host | |
| 🇩🇪 LRob |
Calendar filter flood (L7 DDoS) | host: www.escrimeaura.fr | path: /calendrier-2/action~agenda/time_limit~1763506800/cat_ids~146/tag_ids~442,252,449,650,224,586,679/request_format~json/ | src_port: 36550
|
DDoS Attack Web App Attack | |
| Anonymous |
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
|
Exploited Host Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇩🇪 ghostwarriors |
Webpage scraping
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇩🇪 ksol-hostmaster |
2026/09/30 13:40:14 [error] 19856#104864: *3945371 access forbidden by rule, client: 37.252.221.253, server: new.hondaforum.hu, request: "GET /topic/honda-civic/612164/ HTTP/1.1", host: "new.hondaforum.hu"
...
|
Web Spam | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
|
Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 kosada.com |
Web bot: denial-of-service flood
|
DDoS Attack Bad Web Bot | |
| 🇺🇸 kosada.com |
Web bot: denial-of-service flood
|
DDoS Attack Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown