JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 88.8.52.147

88.8.52.147 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 33%: ?

33%

ISP	Telefonica de Espana SAU
Usage Type	Fixed Line ISP
ASN	AS3352
Hostname(s)	147.red-88-8-52.dynamicip.rima-tde.net
Domain Name	movistar.es
Country	🇪🇸 Spain
City	Adeje, Canary Islands

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 88.8.52.147

Whois 88.8.52.147

IP Abuse Reports for 88.8.52.147:

This IP address has been reported a total of 16 times from 11 distinct sources. 88.8.52.147 was first reported on April 8th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Cloud86 B.V.	2026-06-13 11:39:07 (1 day ago)	categories: Email Spam	Email Spam
🇮🇩 soc-yk	2026-06-03 17:54:14 (1 week ago)	Type: suspicious_network_activity Risk: 66 Events: 254 Evidence: - Persistent suspicious network ac ... show more Type: suspicious_network_activity Risk: 66 Events: 254 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Port Scan Hacking
🇫🇷 masterguru	2026-05-21 15:36:16 (3 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 88.8.52.147 (ES/Spain/147.red-88-8-52.dynamici ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 88.8.52.147 (ES/Spain/147.red-88-8-52.dynamicip.rima-tde.net): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-05-21 15:01:38 (3 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 88.8.52.147 (ES/Spain/147.red-88-8-52.dynamici ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 88.8.52.147 (ES/Spain/147.red-88-8-52.dynamicip.rima-tde.net): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 tilellit.pro	2026-05-16 11:23:18 (4 weeks ago)	Fail2Ban banned 88.8.52.147 for security violations in jail wp-armour. Log: 2026/05/16 11:23:17 [err ... show more Fail2Ban banned 88.8.52.147 for security violations in jail wp-armour. Log: 2026/05/16 11:23:17 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 88.8.52.147 \| Target: wplogin" , client: 88.8.52.147, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇫🇷 masterguru	2026-05-15 01:16:30 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 88.8.52.147 (ES/Spain/147.red-88-8-52.dynamici ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 88.8.52.147 (ES/Spain/147.red-88-8-52.dynamicip.rima-tde.net): 1 in the last 3600 secs (0-193) show less	Hacking
🇺🇸 TPI-Abuse	2026-05-08 11:09:39 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 88.8.52.147 (147.red-88-8-52.dynamicip.rima-tde ... show more (mod_security) mod_security (id:240335) triggered by 88.8.52.147 (147.red-88-8-52.dynamicip.rima-tde.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 07:09:34.521010 2026] [security2:error] [pid 27525:tid 27525] [client 88.8.52.147:50069] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 88.8.52.147 (+1 hits since last alert)\|dandksupply.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dandksupply.com"] [uri "/xmlrpc.php"] [unique_id "af3EblKaY-BGtuDNJaoAzwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Origon	2026-04-26 14:21:48 (1 month ago)	NOQUEUE - IP: 88.8.52.147 - Apr 26 16:21:48 plesk postfix/smtpd[899925]: NOQUEUE: reject: RCPT from ... show more NOQUEUE - IP: 88.8.52.147 - Apr 26 16:21:48 plesk postfix/smtpd[899925]: NOQUEUE: reject: RCPT from 147.red-88-8-52.dynamicip.rima-tde.net[88.8.52.147]: 554 5.7.1 Service unavailable; Client host [88.8.52.147] blocked using dnsbl-1.uceprotect.net; IP 88.8.52.147 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=88.8.52.147; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<aftertaste.coffee> show less	Email Spam
Anonymous	2026-04-26 01:44:46 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2026-04-24 06:10:32 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇫🇮 JimArchon72	2026-04-20 03:55:04 (1 month ago)	2026/04/20 03:54:13 "GET /wp-login.php HTTP/2.0"	Web App Attack
🇩🇪 EGP Abuse Dept	2026-04-12 03:44:42 (2 months ago)	Scanning for web/db/file exploits on www.qualm.org	SQL Injection Bad Web Bot Web App Attack
🇨🇭 backslash	2026-04-11 16:12:14 (2 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇨🇦 polycoda	2026-04-09 10:33:21 (2 months ago)	📄 Probes for wp-login.php and other inexistent URLs	Hacking Web App Attack
🇫🇮 JimArchon72	2026-04-08 10:50:03 (2 months ago)	2026/04/08 10:45:20 "GET /wp-login.php HTTP/2.0"	Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.202

🇧🇷 170.238.160.191

🇺🇸 170.187.163.133

🇩🇪 164.90.178.220

🇺🇸 91.230.168.224

🇺🇸 66.132.224.227

🇩🇪 31.76.98.214

🇷🇺 5.11.77.27

🇮🇳 223.231.213.28

🇺🇸 216.25.89.95

🇧🇷 205.210.31.164

🇬🇧 194.50.235.137

🇺🇸 162.216.150.63

🇫🇮 147.185.133.134

🇫🇷 146.70.40.68

🇺🇸 137.184.154.37

🇺🇸 71.6.240.239

🇺🇸 66.132.172.210

🇺🇸 66.132.172.135

🇺🇸 64.62.156.94