JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.210.105.20

195.210.105.20 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 48%: ?

48%

ISP	Adoard-Global-Reach-LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	adoard.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.210.105.20

Whois 195.210.105.20

IP Abuse Reports for 195.210.105.20:

This IP address has been reported a total of 43 times from 29 distinct sources. 195.210.105.20 was first reported on July 6th 2025, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 etu brutus	2026-10-16 23:19:43 (5 hours ago)	195.210.105.20 has been banned for [WebApp Attack] ...	Hacking Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-10-16 22:26:24 (6 hours ago)	[17/Oct/2026:01:26:23 +0300] -- 195.210.105.20 Ban reason: User-Agent Go-http-client	Bad Web Bot Web App Attack
🇷🇴 clauss	2026-10-15 10:22:49 (1 day ago)	195.210.105.20 - - [15/Oct/2026:13:22:44 +0300] "GET /wp-content/plugins/buddypress/alfa.php HTTP/2. ... show more 195.210.105.20 - - [15/Oct/2026:13:22:44 +0300] "GET /wp-content/plugins/buddypress/alfa.php HTTP/2.0" 404 5273 "https://arome22.ro/wp-content/plugins/buddypress/alfa.php" "Go-http-client/2.0" 195.210.105.20 - - [15/Oct/2026:13:22:48 +0300] "GET /wp-content/themes/fukasawa/inc/classes/403.php HTTP/2.0" 404 5273 "https://arome22.ro/wp-content/themes/fukasawa/inc/classes/403.php" "Go-http-client/2.0" ... show less	Web App Attack
🇩🇪 raph	2026-10-15 06:26:25 (1 day ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇨🇭 backslash	2026-10-13 11:03:00 (3 days ago)		Web Spam
🇦🇺 oncord	2026-10-13 08:53:41 (3 days ago)	Form spam	Web Spam
🇦🇺 oncord	2026-10-05 20:24:39 (1 week ago)	Form spam	Web Spam
🇮🇹 VHosting	2026-10-01 16:20:04 (2 weeks ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇫🇷 Tilellit.PRO	2026-04-07 18:26:39 (6 months ago)	Fail2Ban banned 195.210.105.20 for security violations in jail wp-armour. Log: 2026/04/07 18:26:38 [ ... show more Fail2Ban banned 195.210.105.20 for security violations in jail wp-armour. Log: 2026/04/07 18:26:38 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 195.210.105.20 \| Target: contactform7 \| URI: /wp-json/contact-form-7/v1/contact-forms/15583/feedback" , client: 195.210.105.20, server: [REDACTED], request: "POST /wp-json/contact-form-7/v1/contact-forms/15583/feedback HTTP/2.0", upstream: [REDACTED], host: [REDACTED], referrer: "https://cnpuertocolon.com./contacto" ... show less	Web Spam
🇦🇺 oncord	2026-04-06 23:52:18 (6 months ago)	Form spam	Web Spam
🇭🇰 Anonymous	2026-04-04 05:24:14 (6 months ago)	2026-04-04 05:24:14 warning[3329696]: host [195.210.105.20]: unauthorized access attempted ... show more 2026-04-04 05:24:14 warning[3329696]: host [195.210.105.20]: unauthorized access attempted: / show less	Port Scan Brute-Force
🇫🇷 Octopuce	2026-03-02 23:18:46 (7 months ago)	Aggressive web search of vulnerable pages: /Marvins.php /wp-content/uploads/autoload_classmap.php /y ... show more Aggressive web search of vulnerable pages: /Marvins.php /wp-content/uploads/autoload_classmap.php /yanz.php /wp-admin/includes/as.php /wp-inclu ... show less	Web App Attack
🇳🇱 jjnxpct	2026-02-25 04:49:59 (7 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /images/class-config.php (Rule ID: 930130) - Restricted File Access Attempt show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-02-24 20:42:43 (7 months ago)	(mod_security) mod_security (id:240000) triggered by 195.210.105.20 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 195.210.105.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 15:42:38.932980 2026] [security2:error] [pid 20649:tid 20649] [client 195.210.105.20:61353] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|partyinvitationsprinted.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "partyinvitationsprinted.com"] [uri "/images/stories/themes.php"] [unique_id "aZ4NPje4f0d3UvLvW7RDIwAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-24 18:44:47 (7 months ago)	195.210.105.20 - - [24/Feb/2026:19:44:14 +0100] "GET /wp-includes/assets/script-loader-react-refresh ... show more 195.210.105.20 - - [24/Feb/2026:19:44:14 +0100] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 404 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 195.210.105.20 - - [24/Feb/2026:19:44:14 +0100] "GET /wp-includes/aw.php HTTP/1.1" 404 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 195.210.105.20 - - [24/Feb/2026:19:44:14 +0100] "GET /update/gely.php HTTP/1.1" 404 482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 195.210.105.20 - - [24/Feb/2026:19:44:15 +0100] "GET /uploads/c99shell.php HTTP/1.1" 404 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 195.210.105.20 - - [24/Feb/2026:19:44:15 +0100] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 404 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWe ... show less	DDoS Attack

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 185.15.169.146

🇺🇸 147.185.132.22

🇳🇱 2a0f:ca80:b00b:8ae4::5

🇨🇳 183.6.102.122

🇺🇸 173.239.224.28

🇺🇸 157.245.182.148

🇦🇷 153.67.9.19

🇧🇬 79.124.40.162

🇳🇱 45.148.10.152

🇺🇸 43.130.154.56

🇰🇷 20.194.31.140

🇺🇸 216.36.118.221

🇳🇱 203.159.90.184

🇬🇧 193.32.209.234

🇮🇹 185.15.169.126

🇺🇸 163.192.211.135

🇫🇷 141.101.96.84

🇺🇸 66.132.195.48

🇺🇸 45.41.86.226

🇺🇸 44.220.185.71