AbuseIPDB » 195.140.178.20
195.140.178.20
This IP was reported 8 times. Confidence of
Abuse
is 16% : ?
ISP
Merezha LTD
Usage Type
Data Center/Web Hosting/Transit
ASN
AS25288
Domain Name
merezha.net
Country
🇺🇸
United States of America
City
New York City, New York
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 195.140.178.20 :
This IP address has been reported a total of
8
times from
7 distinct
sources.
195.140.178.20 was first reported on
October 23rd 2024 , and the most recent report was
7 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇳🇱
Alt255
2026-10-23 04:17:47
(7 hours ago)
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 195.140.178.20 - - [23/Oct/2026:06:17:35 +0200] "GET /.git/HEAD HTTP/1.1" 301 6270 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-18 17:09:51
(1 month ago)
Enumerating paths that do not exist (scanning) | method: GET | path: /database.zip | ua: Mozilla/5.0 ...
show more
Enumerating paths that do not exist (scanning) | method: GET | path: /database.zip | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0 Safari/537.36 | 2026-09-18 17:09 UTC
show less
Port Scan
Web App Attack
🇦🇺
paulshipley.com.au
2026-09-17 04:32:34
(1 month ago)
[Thu Sep 17 14:32:33.618269 2026] [security2:error] [pid 459175] [client 195.140.178.20:52761] [clie ...
show more
[Thu Sep 17 14:32:33.618269 2026] [security2:error] [pid 459175] [client 195.140.178.20:52761] [client 195.140.178.20] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/.env"] [unique_id "aqttYZnMN67dCKuydM1lJwAAAAo"]
...
show less
Web App Attack
2026-08-04 09:37:13
(2 months ago)
FortiWeb WAF: 18 attacks detected. Threat Score: 11402405. Types: Client Management(9), Signature De ...
show more
FortiWeb WAF: 18 attacks detected. Threat Score: 11402405. Types: Client Management(9), Signature Detection(9). Origin: United States.
show less
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-04-02 17:42:54
(1 year ago)
WP Login Scan Activities
Web App Attack
2025-02-28 23:40:16
(1 year ago)
wordpress-trap
Web App Attack
2025-02-27 14:13:02
(1 year ago)
wordpress-trap
Web App Attack
2024-10-23 10:20:56
(2 years ago)
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx
Web App Attack
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: