JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.140.224.194

195.140.224.194 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 31%: ?

31%

ISP	Therecom Ltd
Usage Type	Fixed Line ISP
ASN	AS56465
Domain Name	therecom.net
Country	🇺🇦 Ukraine
City	Kharkiv, Kharkiv

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.140.224.194

Whois 195.140.224.194

IP Abuse Reports for 195.140.224.194:

This IP address has been reported a total of 38 times from 24 distinct sources. 195.140.224.194 was first reported on November 23rd 2020, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-14 05:53:28 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 195.140.224.194 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 195.140.224.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 01:53:21.187643 2026] [security2:error] [pid 19950:tid 19950] [client 195.140.224.194:18215] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|waterjetsolutions.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "waterjetsolutions.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as8Y0dhRtRmH6_LSeTsTBwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 neckaralb-admin.de	2026-10-14 02:36:01 (1 week ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇷🇺 AbuseIPDB informer	2026-10-13 10:04:41 (1 week ago)	nfdump top talker: 195.140.224.194 \| first seen 2026-10-13 13:04:41.344 \| duration 00:00:00.062 \| fl ... show more nfdump top talker: 195.140.224.194 \| first seen 2026-10-13 13:04:41.344 \| duration 00:00:00.062 \| flows=1 \| packets=22506 \| bytes=16.5 M \| pps=360 \| bps=2.1 M \| bpp=731 \| proto=udp show less	DDoS Attack Port Scan Exploited Host
🇷🇺 AbuseIPDB informer	2026-10-13 10:04:41 (1 week ago)	nfdump top talker: 195.140.224.194 \| first seen 2026-10-13 13:04:41.344 \| duration 00:00:00.219 \| fl ... show more nfdump top talker: 195.140.224.194 \| first seen 2026-10-13 13:04:41.344 \| duration 00:00:00.219 \| flows=4 \| packets=97185 \| bytes=73.0 M \| pps=442 \| bps=2.7 M \| bpp=751 \| proto=udp show less	DDoS Attack Port Scan Exploited Host
🇷🇺 AbuseIPDB informer	2026-10-13 08:06:55 (1 week ago)	nfdump top talker: 195.140.224.194 \| first seen 2026-10-13 08:06:55.104 \| duration 00:00:00.079 \| fl ... show more nfdump top talker: 195.140.224.194 \| first seen 2026-10-13 08:06:55.104 \| duration 00:00:00.079 \| flows=1 \| packets=20460 \| bytes=14.7 M \| pps=256 \| bps=1.5 M \| bpp=720 \| proto=any show less	DDoS Attack Port Scan Exploited Host
🇷🇺 AbuseIPDB informer	2026-10-12 17:33:38 (1 week ago)	nfdump top talker: 195.140.224.194 \| first seen 2026-10-12 20:33:38.176 \| duration 00:00:00.060 \| fl ... show more nfdump top talker: 195.140.224.194 \| first seen 2026-10-12 20:33:38.176 \| duration 00:00:00.060 \| flows=1 \| packets=23529 \| bytes=17.1 M \| pps=389 \| bps=2.3 M \| bpp=728 \| proto=udp show less	DDoS Attack Exploited Host
🇺🇦 URAN Publishing Service	2026-10-08 10:37:01 (2 weeks ago)	[08/Oct/2026:13:36:59 +0300] -- 195.140.224.194 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET ... show more [08/Oct/2026:13:36:59 +0300] -- 195.140.224.194 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /s/sitemap-index.xml.gz HTTP/1.1 show less	Bad Web Bot Web App Attack
🇨🇭 backslash	2026-08-28 05:36:11 (1 month ago)	block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803	Bad Web Bot
🇺🇸 kosada.com	2026-08-25 13:23:14 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-08-25 10:28:38 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-08-17 20:32:38 (2 months ago)	Distributed scraper residential proxy pool — www.liquoroutletwinecellars.com /store/filtered/ (WineC ... show more Distributed scraper residential proxy pool — www.liquoroutletwinecellars.com /store/filtered/ (WineCommerce WAF) show less	DDoS Attack Bad Web Bot Exploited Host
🇫🇮 inlink.ltd	2026-07-20 15:49:31 (3 months ago)	Known malicious PHP file or CMS probe	Web App Attack
🇺🇸 kosada.com	2026-07-18 18:04:04 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇨🇭 ALPHANET	2026-05-10 06:55:46 (5 months ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇫🇮 YF	2026-04-28 11:01:46 (5 months ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 218.149.156.160

🇺🇸 167.172.146.65

🇨🇳 112.103.142.215

🇮🇩 103.187.165.26

🇳🇱 45.148.10.240

🇫🇷 45.90.163.37

🇳🇱 23.109.155.204

🇺🇸 20.168.11.86

🇵🇭 123.253.137.189

🇷🇺 81.177.254.233

🇵🇱 80.238.125.29

🇳🇱 51.124.171.14

🇫🇷 2001:41d0:303:623::1

🇰🇷 183.99.228.131

🇺🇸 170.130.187.26

🇻🇳 101.99.37.80

🇺🇸 98.97.15.149

🇺🇸 87.58.199.133

🇦🇷 66.128.34.164

🇮🇳 59.96.221.64