JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 141.95.172.196

141.95.172.196 was found in our database!

This IP was reported 111 times. Confidence of Abuse is 100%: ?

100%

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	ns3214560.ip-141-95-172.eu
Domain Name	ovh.net
Country	🇫🇷 France
City	Lille, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 141.95.172.196

Whois 141.95.172.196

IP Abuse Reports for 141.95.172.196:

This IP address has been reported a total of 111 times from 91 distinct sources. 141.95.172.196 was first reported on August 1st 2026, and the most recent report was 31 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 netclix.gr	2026-08-01 09:23:55 (31 minutes ago)	(PERMBLOCK) 141.95.172.196 (FR/France/ns3214560.ip-141-95-172.eu) has had more than 4 temp blocks	Hacking
🇺🇸 Starburst SysOp Team	2026-08-01 09:11:57 (43 minutes ago)	Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 196.172.95.141.rbl.malw ... show more Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 196.172.95.141.rbl.malware.expert succeeded at REQUEST_HEADERS:x-forwarded-for. (1001000-mnz6-3) show less	Hacking
🇩🇪 F242	2026-08-01 09:10:17 (45 minutes ago)	Wordpress soft lock	Web App Attack
🇨🇦 KIsmay	2026-08-01 09:09:14 (46 minutes ago)	Aug 1 04:32:34 www4 WPAudit[192764]: 141.95.172.196 www.vhsport.ca "Mozilla/5.0 (Windows NT 10.0; W ... show more Aug 1 04:32:34 www4 WPAudit[192764]: 141.95.172.196 www.vhsport.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" vhsport:Vhsport@12 FAIL Aug 1 04:35:02 www4 WPAudit[192968]: 141.95.172.196 www.trilloperelloyates.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" sbd-admin:sbd-admin@@ FAIL Aug 1 04:54:06 www4 WPAudit[194448]: 141.95.172.196 www.servicesfyi.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" ncs-admin:ncs-admin@@ FAIL Aug 1 05:00:06 www4 WPAudit[194780]: 141.95.172.196 www.westkootenayrentals.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" root:root@123! FAIL Aug 1 05:09:13 www4 WPAudit[190298]: 141.95.172.196 siscobc.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 08:49:41 (1 hour ago)	(mod_security) mod_security (id:240335) triggered by 141.95.172.196 (ns3214560.ip-141-95-172.eu): 1 ... show more (mod_security) mod_security (id:240335) triggered by 141.95.172.196 (ns3214560.ip-141-95-172.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 04:49:36.869330 2026] [security2:error] [pid 1932337:tid 1932337] [client 141.95.172.196:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 141.95.172.196 (+1 hits since last alert)\|ac.cloudex.click\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ac.cloudex.click"] [uri "/xmlrpc.php"] [unique_id "am2zIPMN0BcWQ3nDSdvyKwAAAFo"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇷 setupgr	2026-08-01 08:28:34 (1 hour ago)	(wplogin_block) Blocked WP-Login Access Attempt 141.95.172.196 (FR/France/Hauts-de-France/Wattrelos/ ... show more (wplogin_block) Blocked WP-Login Access Attempt 141.95.172.196 (FR/France/Hauts-de-France/Wattrelos/-/[AS16276 OVH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 141.95.172.196 - - [01/Aug/2026:11:28:02 +0300] "GET /wp-login.php HTTP/2.0" 200 5195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" show less	Port Scan
🇩🇪 juutis	2026-08-01 08:24:25 (1 hour ago)	141.95.172.196 - - [01/Aug/2026:04:55:46 +0200] "POST /wp-login.php HTTP/1.1" 200 9337 "https://www. ... show more 141.95.172.196 - - [01/Aug/2026:04:55:46 +0200] "POST /wp-login.php HTTP/1.1" 200 9337 "https://www.taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 141.95.172.196 - - [01/Aug/2026:07:14:26 +0200] "POST /wp-login.php HTTP/1.1" 200 9337 "https://www.taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 141.95.172.196 - - [01/Aug/2026:10:24:24 +0200] "POST /wp-login.php HTTP/1.1" 200 9291 "https://taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" show less	Web App Attack
🇦🇺 QT	2026-08-01 08:02:28 (1 hour ago)	Unauthorised WordPress admin login attempted at 2026-08-01 18:02:22 +1000	Web App Attack
🇫🇷 masterguru	2026-08-01 07:22:01 (2 hours ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇩🇪 todix	2026-08-01 07:20:57 (2 hours ago)	Wordpress brute force or spam attempt from 141.95.172.196	Brute-Force
🇩🇪 Hazzard	2026-08-01 07:08:26 (2 hours ago)	(PERMBLOCK) 141.95.172.196 (FR/France/-/-/ns3214560.ip-141-95-172.eu/[redacted]) has had more than 4 ... show more (PERMBLOCK) 141.95.172.196 (FR/France/-/-/ns3214560.ip-141-95-172.eu/[redacted]) has had more than 4 temp blocks show less	Hacking
🇩🇪 tentwentyfour	2026-08-01 07:00:20 (2 hours ago)	Blocked for brute-forcing WordPress log-in	Brute-Force Web App Attack
🇫🇷 masterguru	2026-08-01 06:50:02 (3 hours ago)	(PERMBLOCK) 141.95.172.196 (FR/France/ns3214560.ip-141-95-172.eu) has had more than 4 temp blocks in ... show more (PERMBLOCK) 141.95.172.196 (FR/France/ns3214560.ip-141-95-172.eu) has had more than 4 temp blocks in the last 86400 secs (0-193) show less	Hacking
🇲🇾 Rizzy	2026-08-01 06:49:04 (3 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇩🇪 gadix	2026-08-01 06:32:33 (3 hours ago)	141.95.172.196 - - [01/Aug/2026:05:33:50 +0200] "POST /wp-login.php HTTP/2.0" 200 15773 "https://cf- ... show more 141.95.172.196 - - [01/Aug/2026:05:33:50 +0200] "POST /wp-login.php HTTP/2.0" 200 15773 "https://cf-fahrkompetenz.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 141.95.172.196 - - [01/Aug/2026:07:55:19 +0200] "POST /wp-login.php HTTP/2.0" 200 3205 "https://proweris.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 141.95.172.196 - - ... show less	Web App Attack

Showing 1 to 15 of 111 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 2804:14d:78a6:a533:ccac:5fe1:9728:c4eb

🇩🇪 2001:4ca0:108:42:0:53:17:9

🇳🇱 213.176.26.113

🇳🇱 213.176.26.52

🇺🇸 195.184.76.207

🇦🇺 118.211.165.46

🇭🇰 118.193.36.63

🇺🇸 100.29.192.39

🇺🇸 66.132.186.196

🇳🇱 45.134.225.16

🇬🇧 35.203.210.121

🇬🇧 35.203.210.75

🇺🇸 34.168.126.206

🇧🇪 34.62.0.98

🇬🇧 2a06:4880:a000::d5

🇻🇳 203.205.37.233

🇺🇸 195.184.76.167

🇮🇩 182.253.221.210

🇵🇭 136.158.61.130

🇨🇳 118.212.121.105