JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.140.213.212

195.140.213.212 was found in our database!

This IP was reported 192 times. Confidence of Abuse is 31%: ?

31%

ISP	Hydra Communications Ltd
Usage Type	Fixed Line ISP
ASN	AS25369
Hostname(s)	212.213.140.195.baremetal.zare.com
Domain Name	hydracom.co.uk
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.140.213.212

Whois 195.140.213.212

IP Abuse Reports for 195.140.213.212:

This IP address has been reported a total of 192 times from 77 distinct sources. 195.140.213.212 was first reported on November 5th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2025-11-30 20:19:34 (6 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2025-11-29 21:48:35 (6 months ago)	(mod_security) mod_security (id:240000) triggered by 195.140.213.212 (212.213.140.195.baremetal.zare ... show more (mod_security) mod_security (id:240000) triggered by 195.140.213.212 (212.213.140.195.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 29 16:48:31.069924 2025] [security2:error] [pid 1571:tid 1571] [client 195.140.213.212:47250] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|k-h-w.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "k-h-w.com"] [uri "/images/stories/themes.php"] [unique_id "aStqLzTcvDWzkvxqq_C84AAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇬 pusathosting.com	2025-11-26 15:03:03 (6 months ago)	2ds22 bruteforce	Brute-Force Web App Attack
Anonymous	2025-11-26 06:49:55 (6 months ago)	wordpress-trap	Web App Attack
🇫🇷 dynamix	2025-11-25 19:54:47 (6 months ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Savvii	2025-11-18 00:24:01 (6 months ago)	20 attempts against mh-misbehave-ban on redirect	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2025-11-17 23:03:48 (6 months ago)	Auto-ban: >3000 req/min op 2025-11-17	Hacking Web App Attack SSH
Anonymous	2025-11-16 02:51:11 (6 months ago)	wordpress-trap	Web App Attack
🇫🇷 dynamix	2025-11-16 00:06:55 (6 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2025-11-14 04:17:43 (6 months ago)	(mod_security) mod_security (id:240000) triggered by 195.140.213.212 (212.213.140.195.baremetal.zare ... show more (mod_security) mod_security (id:240000) triggered by 195.140.213.212 (212.213.140.195.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 23:17:37.751097 2025] [security2:error] [pid 429:tid 429] [client 195.140.213.212:59916] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|yocontrolo.cl\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "yocontrolo.cl"] [uri "/images/stories/themes.php"] [unique_id "aRatYY26KdPs4D5lUQznmgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-13 21:02:19 (6 months ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇺🇸 TPI-Abuse	2025-11-03 23:24:56 (7 months ago)	(mod_security) mod_security (id:240000) triggered by 195.140.213.212 (212.213.140.195.baremetal.zare ... show more (mod_security) mod_security (id:240000) triggered by 195.140.213.212 (212.213.140.195.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 03 18:24:52.890662 2025] [security2:error] [pid 10684:tid 10813] [client 195.140.213.212:37744] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|aeaus.com.aafm.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "aeaus.com.aafm.us"] [uri "/images/stories/themes.php"] [unique_id "aQk5xIrK0-dcVTqZwl5ogQAAAdg"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 voormedia	2025-11-03 02:17:18 (7 months ago)	Accessed trap at '/admin.php'	Web App Attack
🇫🇷 dynamix	2025-11-02 22:06:39 (7 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2025-11-01 16:00:57 (7 months ago)	(mod_security) mod_security (id:240000) triggered by 195.140.213.212 (212.213.140.195.baremetal.zare ... show more (mod_security) mod_security (id:240000) triggered by 195.140.213.212 (212.213.140.195.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 01 12:00:52.490893 2025] [security2:error] [pid 24852:tid 24852] [client 195.140.213.212:45968] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "87"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|sittser.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "sittser.com"] [uri "/images/stories/themes.php"] [unique_id "aQYutPlPMMrT7EQUGxNjbAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 31 to 45 of 192 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.46.13.6

🇷🇴 92.118.39.236

🇲🇾 47.250.194.224

🇮🇩 43.129.44.66

🇺🇸 2607:f8b0:4001:c61::124

🇺🇸 216.25.89.136

🇬🇧 204.217.245.130

🇺🇸 165.154.163.107

🇮🇩 157.10.160.103

🇨🇳 113.57.186.157

🇮🇩 110.35.80.116

🇪🇸 92.172.137.40

🇺🇸 74.82.47.5

🇺🇸 65.49.1.122

🇺🇸 64.62.156.89

🇻🇳 58.186.20.143

🇨🇳 47.107.49.35

🇳🇱 45.148.10.240

🇮🇩 43.245.249.251

🇦🇺 34.40.240.142