Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 195.242.213.155
This IP address has been reported a total of
11
times from
9 distinct
sources.
195.242.213.155 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Romania
with 1
report;
Slovenia
with 1
report.
The most common categories in these recent reports were:
Port Scan
2
times;
Email Spam
1
time;
Bad Web Bot
1
time;
Blog Spam
1
time;
Web Spam
1
time;
Other
3
times.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
Blocked by UFW (TCP on 1)
Source port: 64272
TTL: 49
Packet length: 60
TOS: 0x04
This report (for 1 ...
show moreBlocked by UFW (TCP on 1)
Source port: 64272
TTL: 49
Packet length: 60
TOS: 0x04
This report (for 195.242.213.155) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Triggered Cloudflare WAF (firewallCustom) from CH.
Action taken: CHALLENGE
Protocol: HTTP/1.1 (GET m ...
show moreTriggered Cloudflare WAF (firewallCustom) from CH.
Action taken: CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /.well-known/assetlinks.json
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36
show less
SSLVPN: id=sslvpn sn=xxxxxx time="2022-08-25 17:46:31" vp_time="2022-08-25 15:46:31
UTC" fw=xxx.xxx ...
show moreSSLVPN: id=sslvpn sn=xxxxxx time="2022-08-25 17:46:31" vp_time="2022-08-25 15:46:31
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=195.242.213.155 dst=xxx.xxx.xxx.xxx
user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select
usertype||'#'||sessionid||'#'||username||'#'||password||'#'||domainname from sessions
limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique
used to exploit web sites that construct SQL statements from user-supplied input"
sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU
iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3
Mobile/15E148 Safari/604.1"
show less
SQL Injection
Showing 1 to
11
of 11 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
