195.201.121.11
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Hetzner Online GmbH
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS24940
- Hostname(s)
- static.11.121.201.195.clients.your-server.de
- Domain Name
- hetzner.com
- Country
- 🇩🇪 Germany
- City
- Nuremberg, Bavaria
Abuse Reports
Total reports
23 from
22 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇦 URAN Publishing Service |
[12/Nov/2026:04:19:00 +0200] -- 195.201.121.11 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-json/ HTTP/1.1
|
Bad Web Bot Web App Attack | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-04.
|
Web App Attack SSH Hacking | |
| 🇸🇪 SkyDancer |
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
|
Hacking Brute-Force SSH | |
| Anonymous |
195.201.121.11 arduino.ua [04/Nov/2026:23:35:44 +0200] "GET /wp-json/ HTTP/2.0" 404 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:147.0) Gecko/20100101 Firefox/147.0" 0.000 251
...
|
Hacking SQL Injection Web App Attack | |
| 🇫🇮 cleverest.eu |
MimirWAF has 2 incidents from 1 distinct domain => {"bad_request_uri / script_kiddie_detection","blacklisted_access / possible_repeat_offender"}
|
Web App Attack | |
| 🇺🇸 HamSammich |
Automated sensor: 2 HTTPS connection/probe attempts over the last 24h (latest 2026-11-01T13:43Z).
|
Port Scan Web App Attack | |
| 🇳🇱 Ike57 |
|
Bad Web Bot Web App Attack | |
| Anonymous |
Unauthorized access (443/tcp/https)
|
Port Scan Web App Attack | |
| 🇪🇸 loadsoporte |
RdpGuard detected brute-force attempt on HTTP
|
Brute-Force | |
| 🇦🇹 René Hickersberger |
malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.64 Safari/537.36 Edg/101.0.1210.47"
|
Web App Attack | |
| 🇺🇸 jcbriar |
Searching for vulnerable scripts
|
Hacking Web App Attack | |
| 🇸🇬 anotherwatcher |
bad bot
|
Bad Web Bot | |
| 🇱🇹 Evag Touf |
(mod_security) mod_security triggered on hostname [redacted] 195.201.121.11 (DE/Germany/static.11.121.201.195.clients.your-server.de)
|
SQL Injection | |
| 🇩🇪 findlab |
Backdrop CMS module - malicious activity detected
|
Bad Web Bot Web App Attack | |
| 🇺🇸 etu brutus |
195.201.121.11 has been banned for [WebApp Attack]
...
|
Hacking Bad Web Bot Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown