JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

61.7.147.252

Neutral Activity

Abuse confidence score ?

0% Low Risk

67 reports

36 reporters · latest 11 months ago

ISP	National Telecom Public Company Limited 7 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
Usage Type	Fixed Line ISP
ASN	AS131090
Domain Name	ntplc.co.th
Country	🇹🇭 Thailand
City	Bangkok, Bangkok

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

61.7.147.252 has been reported 67 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 61.7.147.252

Export CSV

This IP address has been reported a total of 67 times from 36 distinct sources. 61.7.147.252 was first reported on April 9th 2023, and the most recent report was 11 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 mkaraki	2025-10-25 05:50:21 (11 months ago)	1761371413 # Service_probe # SIGNATURE_SEND # source_ip:61.7.147.252 # dst_port:51922 ...	Port Scan
🇩🇪 FeG Deutschland	2025-10-06 21:36:10 (11 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27	Exploited Host Web App Attack
🇮🇹 VHosting	2025-09-24 02:02:35 (1 year ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇺🇸 nowyouknow	2025-09-04 09:19:14 (1 year ago)	(From [email protected])	Phishing Web Spam
🇳🇱 antikirra	2025-09-02 04:10:16 (1 year ago)	Proxy Port Scanning	Port Scan
🇬🇧 relianoid.com	2025-09-01 09:51:45 (1 year ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇺🇸 nowyouknow	2025-08-30 09:39:24 (1 year ago)	(From [email protected])	Phishing Web Spam
Anonymous	2025-06-20 11:01:14 (1 year ago)	RUPLDE WEBFORM SPAM 61.7.147.252 (61.7.147.252)	Web Spam
🇷🇺 nyuuzyou	2025-05-18 15:10:36 (1 year ago)	{"action": "connection", "dest_ip": "0.0.0.0", "dest_port": "22", "server": "ssh_server", "src_ip": ... show more {"action": "connection", "dest_ip": "0.0.0.0", "dest_port": "22", "server": "ssh_server", "src_ip": "61.7.147.252", "src_port": "46700", "timestamp": "2025-05-18T15:10:22.116701"} show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-05-05 23:40:30 (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/61.7.147.252	SSH
🇺🇸 TPI-Abuse	2025-05-01 23:18:49 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 61.7.147.252 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 61.7.147.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 01 19:18:43.888106 2025] [security2:error] [pid 996544:tid 996544] [client 61.7.147.252:39796] [client 61.7.147.252] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|dianamead.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dianamead.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aBQBUzA8QJkSjUqnrNdOlwAAAAA"], referer: https://dianamead.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 unhfree.net	2025-04-29 09:51:15 (1 year ago)	Apr 29 09:45:29 canopus postfix/smtpd[1872480]: 4393CDC0E9A: reject: RCPT from unknown[61.7.147.252] ... show more Apr 29 09:45:29 canopus postfix/smtpd[1872480]: 4393CDC0E9A: reject: RCPT from unknown[61.7.147.252]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 29 09:45:29 canopus postfix/smtpd[1872480]: too many errors after RCPT from unknown[61.7.147.252] Apr 29 11:38:28 canopus postfix/smtpd[1895006]: NOQUEUE: reject: RCPT from unknown[61.7.147.252]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 29 11:38:28 canopus postfix/smtpd[1895006]: too many errors after RCPT from unknown[61.7.147.252] Apr 29 11:51:15 canopus postfix/smtpd[1895305]: NOQUEUE: reject: RCPT from unknown[61.7.147.252]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reache ... show less	Brute-Force Exploited Host
🇨🇳 ThreatBook.io	2025-04-15 23:40:02 (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/61.7.147.252	SSH
🇨🇿 unhfree.net	2025-04-11 04:57:14 (1 year ago)	Apr 11 06:10:48 canopus postfix/smtpd[83153]: NOQUEUE: reject: RCPT from unknown[61.7.147.252]: 554 ... show more Apr 11 06:10:48 canopus postfix/smtpd[83153]: NOQUEUE: reject: RCPT from unknown[61.7.147.252]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 11 06:10:48 canopus postfix/smtpd[83153]: NOQUEUE: reject: RCPT from unknown[61.7.147.252]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 11 06:10:48 canopus postfix/smtpd[83153]: NOQUEUE: reject: RCPT from unknown[61.7.147.252]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 11 06:10:48 canopus postfix/smtpd[83153]: NOQUEUE: reject: RCPT from unknown[61.7.147.252]: 554 5.7.1 <[email protected]>: Recipient addres ... show less	Brute-Force Exploited Host
🇨🇿 unhfree.net	2025-04-04 02:44:12 (1 year ago)	Apr 4 00:47:17 canopus postfix/smtpd[3510488]: too many errors after RCPT from unknown[61.7.147.252 ... show more Apr 4 00:47:17 canopus postfix/smtpd[3510488]: too many errors after RCPT from unknown[61.7.147.252] Apr 4 02:32:29 canopus postfix/smtpd[3510203]: NOQUEUE: reject: RCPT from unknown[61.7.147.252]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 4 02:32:29 canopus postfix/smtpd[3510203]: too many errors after RCPT from unknown[61.7.147.252] Apr 4 04:44:11 canopus postfix/smtpd[3543295]: NOQUEUE: reject: RCPT from unknown[61.7.147.252]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 4 04:44:11 canopus postfix/smtpd[3543295]: too many errors after RCPT from unknown[61.7.147.252] ... show less	Brute-Force Exploited Host

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.73.216.91

🇷🇺 213.180.203.233

🇨🇴 186.82.4.75

🇫🇮 147.185.133.116

🇫🇷 51.68.226.87

🇦🇺 20.5.85.204

🇺🇸 206.189.219.115

🇨🇱 190.22.2.97

🇨🇦 174.7.32.199

🇺🇸 162.216.150.38

🇺🇸 91.230.168.69

🇳🇱 89.21.67.182

🇩🇪 69.5.169.21

🇩🇪 43.165.2.110

🇺🇸 23.236.68.192

🇻🇳 180.93.234.96

🇳🇱 176.65.148.80

🇧🇼 168.167.228.85

🇻🇳 160.22.106.131

🇫🇮 147.185.133.4