This IP address has been reported a total of
10
times from
6 distinct
sources.
195.63.27.213 was first reported on
March 4th 2026 , and the most recent report was
1 day ago Ireland
with 3
reports;
Indonesia
with 2
reports;
Italy
with 1
report.
The only category in these recent reports was:
Web App Attack
6
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇪
AutosOnShow
2026-10-10 19:54:05
(1 day ago)
blocked for webapp attack | path requested: /.env | seen at 2026-10-10 19:53:29.377 |
Web App Attack
🇮🇪
AutosOnShow
2026-09-25 11:47:05
(2 weeks ago)
blocked for webapp attack | path requested: /.env | seen at 2026-09-25 11:46:20.250 |
Web App Attack
🇮🇪
AutosOnShow
2026-09-25 09:17:04
(2 weeks ago)
blocked for webapp attack | path requested: /.env | seen at 2026-09-25 09:16:45.311 |
Web App Attack
🇮🇩
Burayot
2026-09-15 00:42:25
(3 weeks ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 195.63.27.213 (-): 1 in the last 36 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 195.63.27.213 (-): 1 in the last 3600 secs
show less
Web App Attack
🇮🇩
Burayot
2026-09-04 23:48:03
(1 month ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 195.63.27.213 (-): 1 in the last 36 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 195.63.27.213 (-): 1 in the last 3600 secs
show less
Web App Attack
🇮🇹
CoreTech srl
2026-08-25 00:18:57
(1 month ago)
cloudlinux2 fail2ban: 2026-08-25 02:16:50,929 fail2ban.filter [1464]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-08-25 02:16:50,929 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 217.181.87.139 - 2026-08-25 02:16:50cloudlinux2 fail2ban: 2026-08-25 02:16:51,479 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.22.166 - 2026-08-25 02:16:51cloudlinux2 fail2ban: 2026-08-25 02:16:59,926 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.17.9 - 2026-08-25 02:16:59cloudlinux2 fail2ban: 2026-08-25 02:16:52,190 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.27.213 - 2026-08-25 02:16:51cloudlinux2 fail2ban: 2026-08-25 02:16:53,528 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 217.181.81.53 - 2026-08-25 02:16:53cloudlinux2 fail2ban: 2026-08-25 02:17:00,713 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.28.110 - 2026-08-25 02:17:00cloudlinux2 fail2ban: 2026-08-25 02:17:10,505 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 195.63.29.63 - 2026-08-25 02:17:10cloudli
show less
Web App Attack
🇨🇭
backslash
2026-06-24 04:57:00
(3 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇨🇭
backslash
2026-05-08 14:18:00
(5 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇨🇦
polycoda
2026-03-11 15:27:05
(7 months ago)
📄 Probes for wp-login.php and other inexistent URLs
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-03-04 05:55:27
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 195.63.27.213 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 195.63.27.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 00:55:20.169286 2026] [security2:error] [pid 10657:tid 10657] [client 195.63.27.213:34328] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.mfleetservice.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mfleetservice.com"] [uri "/wp-login.php"] [unique_id "aafJSGZ3HlSnYYiN-nLQxwAAABE"], referer: http://mfleetservice.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
10
of 10 reports
