JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.64.231.216

195.64.231.216 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 100%: ?

100%

ISP	Information Centre Elektronni Visti LLC
Usage Type	Fixed Line ISP
ASN	AS211947
Hostname(s)	ip-231-216.visti.net
Domain Name	visti.net
Country	🇺🇦 Ukraine
City	Kremenchuk, Poltava

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.64.231.216

Whois 195.64.231.216

IP Abuse Reports for 195.64.231.216:

This IP address has been reported a total of 45 times from 32 distinct sources. 195.64.231.216 was first reported on August 24th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 KIsmay	2026-09-01 00:39:20 (4 hours ago)	Aug 31 17:38:52 ismay WPAudit[2482506]: 195.64.231.216 christinesutherland.com "Mozilla/5.0 (Windows ... show more Aug 31 17:38:52 ismay WPAudit[2482506]: 195.64.231.216 christinesutherland.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0" Christine Sutherland:cms6823 FAIL Aug 31 17:39:01 ismay WPAudit[2482507]: 195.64.231.216 christinesutherland.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0" denis:cms6823 FAIL Aug 31 17:39:08 ismay WPAudit[2482506]: 195.64.231.216 christinesutherland.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0" SBD:cms6823 FAIL Aug 31 17:39:15 ismay WPAudit[2483421]: 195.64.231.216 christinesutherland.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0" Wyatt Miller-Unser:cms6823 FAIL Aug 31 17:39:20 ismay WPAudit[2482507]: 195.64.231.216 christinesutherland.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0" me.comristinesutherland:cms6823 FAIL ... show less	Brute-Force Web App Attack
🇺🇸 ambor	2026-09-01 00:28:42 (4 hours ago)	Honeypot access: WordPress admin access attempt. Path: /wp-login.php	Brute-Force Web App Attack
🇳🇱 i-turnradio.nl	2026-08-31 23:51:18 (4 hours ago)	2026-09-01 @ 01:51:17 (CET) ~ Blocked for trying to access: /wp-login.php	Web App Attack
🇫🇷 pm33	2026-08-31 23:41:01 (4 hours ago)	Wordpress login attempts	Brute-Force
🇮🇹 CoreTech srl	2026-08-31 22:14:48 (6 hours ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact	Hacking
🇫🇷 spot	2026-08-31 21:39:41 (7 hours ago)	195.64.231.216 - - [31/Aug/2026:22:39:40 +0100] "GET /wp-login.php HTTP/1.1" 301 610 "" "Mozilla/5.0 ... show more 195.64.231.216 - - [31/Aug/2026:22:39:40 +0100] "GET /wp-login.php HTTP/1.1" 301 610 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0" ... show less	Web App Attack Hacking
Anonymous	2026-08-31 17:25:21 (11 hours ago)	"GET /wp-login.php HTTP/1.1"	Hacking Web App Attack
🇩🇪 neckaralb-admin.de	2026-08-31 16:11:41 (12 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 Jochen Pretli	2026-08-31 15:43:02 (12 hours ago)	connection to honeypot	Email Spam Port Scan
🇺🇸 TPI-Abuse	2026-08-31 12:30:56 (16 hours ago)	(mod_security) mod_security (id:225170) triggered by 195.64.231.216 (ip-231-216.visti.net): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 195.64.231.216 (ip-231-216.visti.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 08:30:53.226707 2026] [security2:error] [pid 3720756:tid 3720800] [client 195.64.231.216:45534] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kettlehill.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kettlehill.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apVz_SXDYD09BveEjkjjqQAAABY"], referer: http://kettlehill.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 12:08:35 (16 hours ago)	(mod_security) mod_security (id:225170) triggered by 195.64.231.216 (ip-231-216.visti.net): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 195.64.231.216 (ip-231-216.visti.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 08:08:29.923980 2026] [security2:error] [pid 15795:tid 15795] [client 195.64.231.216:52920] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.johncyphers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.johncyphers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apVuvRlBOhAxdAdWZvpsjAAAAAE"], referer: http://areyoureally.net/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 11:48:18 (16 hours ago)	(mod_security) mod_security (id:225170) triggered by 195.64.231.216 (ip-231-216.visti.net): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 195.64.231.216 (ip-231-216.visti.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 07:48:11.497344 2026] [security2:error] [pid 14122:tid 14122] [client 195.64.231.216:49630] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|the-it-man.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "the-it-man.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apVp-4o8LCNv-MtgzVnrPwAAAC8"], referer: http://the-it-man.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-31 09:24:47 (19 hours ago)	DEAGICO WEBEXPLOIT 195.64.231.216 (ip-231-216.visti.net)	Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 09:01:33 (19 hours ago)	(mod_security) mod_security (id:225170) triggered by 195.64.231.216 (ip-231-216.visti.net): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 195.64.231.216 (ip-231-216.visti.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 05:01:26.466381 2026] [security2:error] [pid 10551:tid 10551] [client 195.64.231.216:41298] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|frenchla.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "frenchla.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apVC5gpFmqrvp6IAXCZl4QAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 EGP Abuse Dept	2026-08-31 07:44:08 (20 hours ago)	Scanning for web/db/file exploits on www.qualm.nl	SQL Injection Bad Web Bot Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.166.206.164

🇨🇳 220.250.63.67

🇬🇧 193.163.125.52

🇺🇸 185.191.171.2

🇺🇸 173.187.152.204

🇨🇳 122.242.251.143

🇳🇱 107.189.26.103

🇸🇬 103.187.147.71

🇺🇸 98.82.132.251

🇨🇦 85.217.149.74

🇺🇸 64.202.132.172

🇮🇳 59.179.31.237

🇹🇭 58.10.73.253

🇸🇪 45.84.107.76

🇹🇼 35.234.38.138

🇧🇪 34.76.154.164

🇳🇱 204.76.203.7

🇷🇴 193.32.162.84

🇳🇱 185.2.80.253

🇨🇳 175.20.96.204