AbuseIPDB » 195.245.121.3
195.245.121.3 was found in our database!
This IP was reported 10 times. Confidence of
Abuse
is 41% : ?
ISP
LLC IMC
Usage Type
Fixed Line ISP
ASN
AS34251
Hostname(s)
host1.imc-ua.net
Domain Name
imc.ua
Country
๐บ๐ฆ
Ukraine
City
Kyiv, Kyiv City
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 195.245.121.3 :
This IP address has been reported a total of
10
times from
8 distinct
sources.
195.245.121.3 was first reported on
November 6th 2023 , and the most recent report was
1 day ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-06-23 05:14:49
(1 day ago)
(PERMBLOCK) 195.245.121.3 (UA/Ukraine/-/-/host1.imc-ua.net/[redacted]) has had more than 4 temp bloc ...
show more
(PERMBLOCK) 195.245.121.3 (UA/Ukraine/-/-/host1.imc-ua.net/[redacted]) has had more than 4 temp blocks
show less
Hacking
Anonymous
2026-06-23 04:47:16
(1 day ago)
(wordpress) Failed wordpress login from 195.245.121.3 (UA/Ukraine/-/-/host1.imc-ua.net/[redacted])
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-06-19 11:52:27
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 195.245.121.3 (host1.imc-ua.net): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 195.245.121.3 (host1.imc-ua.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 07:52:23.904672 2026] [security2:error] [pid 25366:tid 25366] [client 195.245.121.3:52945] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||virtualmediamasters.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "virtualmediamasters.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajUtd7jR1Wvh1SywtB3igwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-19 10:56:51
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 195.245.121.3 (host1.imc-ua.net): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 195.245.121.3 (host1.imc-ua.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 06:56:46.996550 2026] [security2:error] [pid 10410:tid 10410] [client 195.245.121.3:63196] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||thehealthyplaceclayton.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thehealthyplaceclayton.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajUgbnU7Tv6QzWSzlDAjPQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-19 06:54:10
(5 days ago)
Attac
Brute-Force
๐ฎ๐ฉ
Burayot
2026-06-18 09:20:17
(5 days ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 195.245.121.3 (UA/Ukraine/host1.imc ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 195.245.121.3 (UA/Ukraine/host1.imc-ua.net): 1 in the last 3600 secs
show less
Web App Attack
๐ณ๐ฑ
wlt-blocker
2026-06-18 07:49:37
(6 days ago)
Unauthorized access to webpage admin
Web App Attack
๐ฉ๐ช
stinpriza
2026-06-18 05:57:47
(6 days ago)
Web App Attack
Web App Attack
๐จ๐ญ
backslash
2025-12-06 17:35:10
(6 months ago)
block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803
Bad Web Bot
๐ท๐ธ
Smel
2023-11-06 08:05:42
(2 years ago)
Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -
Email Spam
Hacking
Brute-Force
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: