JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.252.153.12

109.252.153.12 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 25%: ?

25%

ISP	Moscow Local Telephone Network (OAO MGTS)
Usage Type	Fixed Line ISP
ASN	AS25513
Hostname(s)	109-252-153-12.dynamic.spd-mgts.ru
Domain Name	spd-mgts.ru
Country	🇷🇺 Russian Federation
City	Khimki, Moscow Oblast

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.252.153.12

Whois 109.252.153.12

IP Abuse Reports for 109.252.153.12:

This IP address has been reported a total of 10 times from 7 distinct sources. 109.252.153.12 was first reported on November 9th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 julianalee.com	2026-07-07 16:59:00 (2 weeks ago)	06/Jul/26 00:44:50 #4234910 CRITICAL 520 109.252.153.12 GET /index.php - Data URI scheme or P ... show more 06/Jul/26 00:44:50 #4234910 CRITICAL 520 109.252.153.12 GET /index.php - Data URI scheme or PHP wrappers - [COOKIE:wfu_ABSPATH = php://filter/convert.iconv.UTF8.CSISO2022KR\|convert.base64-encode\|convert.iconv.UTF8.UTF7\|convert.iconv.SE2.UTF-16\|convert.iconv.CSIBM921.NAPLPS\|convert.iconv.855.CP936\|convert.ic...] - julianaleerealty.com 06/Jul/26 00:45:09 #1480579 CRITICAL 155 109.252.153.12 POST /index.php - Code injection - [POST:9 = <?php echo 409723*20;if(md5($_COOKIE["d"])=="\61\x37\60\62\x38\146\x34\70\67\143\142\x32\141\70\x34\x36\x30\67\x36\64\x36\x64\141\63\141\144\63\70\67\x38\145\143"){echo"\x6f\x6b";eval(base64_...] - julianaleerealty.com 06/Jul/26 00:45:10 #8508688 CRITICAL 520 109.252.153.12 GET /index.php - Data URI scheme or PHP wrappers - [COOKIE:wfu_ABSPATH = php://filter/convert.iconv.UTF8.CSISO2022KR\|convert.base64-encode\|convert.iconv.UTF8.UTF7\|convert.iconv.SE2.UTF-16\|convert.iconv.CSIBM921.NAPLPS\|convert.iconv.855.CP936\|convert.ic...] - julianaleerealty.com show less	Hacking SQL Injection
🇱🇻 garmtech.com	2026-07-04 22:15:37 (3 weeks ago)	IM360 WAF: Dangerous PHP functions in HTTP headers	Web App Attack
🇱🇻 garmtech.com	2026-07-04 22:15:22 (3 weeks ago)	IM360 WAF: Object Injection in PHPMailer library in WordPress 3.7 to 5.7.1 (CVE-2020-36326)	Web App Attack
Anonymous	2026-07-03 06:33:00 (3 weeks ago)		Web App Attack Hacking SQL Injection
🇳🇱 Site.eu	2026-07-02 16:20:28 (3 weeks ago)	Excessive 404/403 errors	Brute-Force
🇩🇪 FeG Deutschland	2026-06-30 20:24:32 (3 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 247	Exploited Host Web App Attack
🇱🇻 garmtech.com	2026-06-30 15:46:27 (3 weeks ago)	IM360 WAF: Object Injection in PHPMailer library in WordPress 3.7 to 5.7.1 (CVE-2020-36326)	Web App Attack
🇱🇻 garmtech.com	2026-06-30 15:46:27 (3 weeks ago)	IM360 WAF: Dangerous PHP functions in HTTP headers MV:https://atraisfoto.lv/wp-content/plugins/wp-fi ... show more IM360 WAF: Dangerous PHP functions in HTTP headers MV:https://atraisfoto.lv/wp-content/plugins/wp-file-upload/wfu_file_... show less	Web App Attack
Anonymous	2026-06-21 05:20:42 (1 month ago)	Malicious activity	Bad Web Bot Web App Attack
🇷🇺 Mga Admin	2024-11-09 10:37:25 (1 year ago)	2024-11-09T17:37:21.280677 mga-mga.mga.local sshd[3041490]: pam_sss(sshd:auth): authentication failu ... show more 2024-11-09T17:37:21.280677 mga-mga.mga.local sshd[3041490]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.252.153.12 user=lima 2024-11-09T17:37:23.176762 mga-mga.mga.local sshd[3041490]: Failed password for lima from 109.252.153.12 port 1258 ssh2 2024-11-09T17:37:25.128664 mga-mga.mga.local sshd[3041490]: Failed password for lima from 109.252.153.12 port 1258 ssh2 ... show less	Brute-Force SSH

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 145.223.134.144

🇧🇷 118.26.105.116

🇵🇰 110.36.77.150

🇺🇸 103.234.62.110

🇲🇦 102.53.15.17

🇺🇸 96.85.104.2

🇩🇪 69.5.169.88

🇮🇳 45.120.124.26

🇺🇸 45.56.115.119

🇩🇪 2a00:17d8:100::36d1

🇨🇩 196.250.94.173

🇳🇱 195.178.110.137

🇸🇬 161.118.218.103

🇵🇰 153.117.50.109

🇸🇬 145.223.134.245

🇸🇬 145.223.131.107

🇺🇸 136.112.224.208

🇺🇸 65.49.1.78

🇨🇳 59.46.150.82

🇵🇱 20.215.216.94