JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.64.239.61

195.64.239.61 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 30%: ?

30%

ISP	Information Centre Elektronni Visti LLC
Usage Type	Fixed Line ISP
ASN	AS211250
Domain Name	visti.net
Country	🇺🇦 Ukraine
City	Odesa, Odesa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.64.239.61

Whois 195.64.239.61

IP Abuse Reports for 195.64.239.61:

This IP address has been reported a total of 37 times from 24 distinct sources. 195.64.239.61 was first reported on May 21st 2024, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 big-cloud.nl	2026-10-23 00:13:23 (4 days ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-10-21 23:40:34 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 195.64.239.61 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 195.64.239.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 19:40:27.391092 2026] [security2:error] [pid 5458:tid 5458] [client 195.64.239.61:53894] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bickleton.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bickleton.org"] [uri "/wp-json/wp/v2/users"] [unique_id "atlNazshOHtjVqlDl_P8cwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-10-21 19:13:35 (5 days ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-196)	Hacking
🇺🇸 TPI-Abuse	2026-10-21 16:47:25 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 195.64.239.61 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 195.64.239.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 12:47:17.651384 2026] [security2:error] [pid 15414:tid 15414] [client 195.64.239.61:34880] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|fgrotary.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fgrotary.org"] [uri "/wp-json/wp/v2/users"] [unique_id "atjsle4vtN_l_vMd0s-iYAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-21 16:00:24 (5 days ago)	\| [Dangerous/Ukraine] Aggressive IP 195.64.239.61 (~30 hits). Type: DoS Defender- Web server 400 err ... show more \| [Dangerous/Ukraine] Aggressive IP 195.64.239.61 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇺🇸 鬼影233	2026-08-20 16:03:33 (2 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-19 01:03:01 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
Anonymous	2026-08-17 16:33:17 (2 months ago)	Distributed scraper residential proxy pool — www.bouharouns.com /store/filtered/ (WineCommerce WAF)	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 kosada.com	2026-08-08 09:33:36 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 RAP	2026-07-28 21:50:06 (2 months ago)	2026-07-28 21:50:06 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 kosada.com	2026-07-27 09:42:45 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 security.rdmc.fr	2026-07-27 01:28:12 (3 months ago)	Port Scan Attack proto:TCP src:35160 dst:23	Port Scan
Anonymous	2026-07-26 00:07:07 (3 months ago)	Unauthorized connection to Telnet port 23	Port Scan
🇺🇸 Neosmith20	2026-07-25 16:18:18 (3 months ago)	Knock-Knock honeypot brute-force: Telnet (5 total hits)	Brute-Force
🇺🇸 COMPLEX	2026-07-24 17:29:46 (3 months ago)	Banned by Multi Agent · node …391q · SSH brute-force / scan	Brute-Force SSH

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 212.73.148.51

🇧🇷 137.131.248.20

🇬🇧 87.236.176.97

🇺🇸 167.71.30.97

🇸🇬 150.109.10.219

🇺🇸 129.121.102.82

🇺🇦 92.118.79.43

🇨🇳 59.59.76.24

🇰🇪 41.90.66.30

🇬🇧 35.203.210.55

🇧🇪 34.38.113.44

🇨🇦 34.19.201.184

🇬🇧 193.163.125.141

🇧🇷 177.221.122.253

🇩🇪 164.30.17.82

🇫🇮 147.185.133.230

🇺🇸 147.185.132.91

🇳🇱 104.28.158.25

🇺🇸 91.230.168.35

🇳🇱 77.239.124.74