141.95.119.253

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
353 reports
194 reporters · latest 1 month ago
ISP
OVH SAS
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16276
Hostname(s)
neth8.1fo.fr
Domain Name
ovh.net
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
353 from 194 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇵🇰 Pakistan 1
Most common categories Brute-Force 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇵🇰 sbk97 (https://sayor.net)
SAYOR honeypot: observed attack /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input
Brute-Force
🇮🇳 evicky2002
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking Brute-Force SSH
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/141.95.119.253
SSH
🇫🇷 Murazaki
141.95.119.253 - - [01/May/2026:03:23:44 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 500 170 "-" "-" "-" ...
Hacking
Anonymous
Reported from Nginx log analysis 6. Log: 141.95.119.253 - - [01/May/2026:xx:xx:xx 0200] "POST /cgi-bin/../../../../../../../../../../bin/sh HTTP/1.1" xxx xxx "-" "-" "-" "FR France -" "AS16276" "OVH SAS"
Port Scan Brute-Force SSH
🇨🇭 zynex
URL Probing: /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Web App Attack
🇨🇭 lumi
Brute-Force SSH
🇩🇪 Teufel100
ModSecurity rejected a query'
Brute-Force Hacking Web App Attack
🇫🇷 starhelix
SSH login on honeypot.
Brute-Force SSH
🇩🇪 24-seven.io
Brute-Force SSH
🇩🇪 www.fransveldman.world
May 1 14:59:56 mail sshd[4116991]: Invalid user admin from 141.95.119.253 port 46300 May 1 15:03:48 mail sshd[4117648]: Invalid user orangepi from 141.95.119.253 port 48136 ...
Brute-Force SSH
🇺🇸 LSPCCU
TSEC Honeypot Network report. Threat score: 100/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: ssh-telnet, cowrie. Context: 141.
Port Scan Hacking Brute-Force Web App Attack SSH
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 2222 [1] TCP
Port Scan
Anonymous
Brute-Force SSH
🇳🇱 Tazit
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 220.202.112.151
🇰🇪 197.248.12.28
🇨🇴 185.244.139.84
🇺🇸 184.183.93.149
🇹🇼 123.241.190.31
🇨🇳 118.187.8.10
🇺🇸 23.234.112.115
🇺🇸 23.234.97.166
🇺🇸 23.234.92.162
🇺🇸 23.234.91.187
🇺🇸 20.55.19.11
🇬🇧 5.226.140.67
🇺🇸 184.36.15.238
🇺🇸 146.70.187.37
🇨🇳 125.84.250.123
🇰🇷 121.180.217.182
🇹🇭 110.77.204.145
🇮🇳 103.225.15.98
🇮🇳 103.168.198.6
🇷🇺 94.159.47.150
feedback