JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.66.27.46

195.66.27.46 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	QWINS-Hosting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS213702
Domain Name	qwins.co
Country	🇳🇱 Netherlands
City	Kerkrade, Limburg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.66.27.46

Whois 195.66.27.46

IP Abuse Reports for 195.66.27.46:

This IP address has been reported a total of 38 times from 30 distinct sources. 195.66.27.46 was first reported on June 13th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-06-16 10:50:39 (3 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇦🇹 urnilxfgbez	2026-06-14 22:45:00 (1 day ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇫🇷 tecnicorioja	2026-06-14 02:45:26 (2 days ago)	Failed password for root Jun 14 01:23:46 port 54274	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-06-14 00:07:39 (2 days ago)	(mod_security) mod_security (id:218420) triggered by 195.66.27.46 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:218420) triggered by 195.66.27.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 20:07:33.688765 2026] [security2:error] [pid 8499:tid 8499] [client 195.66.27.46:54250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.184:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.184"] [uri "/hello.world"] [unique_id "ai3wxW94o_t6rG_lyBWYMAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 ICT KnTl	2026-06-13 23:55:55 (2 days ago)	Jun 14 01:54:53 proxy sshd[948922]: Invalid user admin from 195.66.27.46 port 46066 Jun 14 01:55:24 ... show more Jun 14 01:54:53 proxy sshd[948922]: Invalid user admin from 195.66.27.46 port 46066 Jun 14 01:55:24 proxy sshd[948924]: Invalid user orangepi from 195.66.27.46 port 47644 Jun 14 01:55:54 proxy sshd[948926]: User root from 195.66.27.46 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-06-13 23:52:38 (2 days ago)	(mod_security) mod_security (id:218420) triggered by 195.66.27.46 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:218420) triggered by 195.66.27.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 19:52:33.340958 2026] [security2:error] [pid 31815:tid 31823] [client 195.66.27.46:43732] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.23:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.23"] [uri "/hello.world"] [unique_id "ai3tQZ_5-QARx_a3IC71vAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 ufn.edu.br	2026-06-13 23:51:42 (2 days ago)	Jun 13 20:51:04 wslbvm01 sshd[165016]: Invalid user admin from 195.66.27.46 port 48942 Jun 13 20:51: ... show more Jun 13 20:51:04 wslbvm01 sshd[165016]: Invalid user admin from 195.66.27.46 port 48942 Jun 13 20:51:06 wslbvm01 sshd[165016]: Failed password for invalid user admin from 195.66.27.46 port 48942 ssh2 Jun 13 20:51:42 wslbvm01 sshd[165167]: Invalid user orangepi from 195.66.27.46 port 33504 ... show less	Brute-Force SSH
🇬🇧 Deveroonie	2026-06-13 23:50:24 (2 days ago)	2026-06-13T23:50:23.804425+00:00 instance-20241019-1127 sshd[2903977]: Invalid user admin from 195.6 ... show more 2026-06-13T23:50:23.804425+00:00 instance-20241019-1127 sshd[2903977]: Invalid user admin from 195.66.27.46 port 51590 ... show less	Hacking Brute-Force SSH
🇺🇸 onemightyarc	2026-06-13 23:45:49 (2 days ago)	2026-06-13T16:45:15.204982-07:00 server.vexstria.pro sshd[1865941]: pam_unix(sshd:auth): authenticat ... show more 2026-06-13T16:45:15.204982-07:00 server.vexstria.pro sshd[1865941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.66.27.46 2026-06-13T16:45:17.692731-07:00 server.vexstria.pro sshd[1865941]: Failed password for invalid user admin from 195.66.27.46 port 53248 ssh2 2026-06-13T16:45:48.966482-07:00 server.vexstria.pro sshd[1876760]: Invalid user orangepi from 195.66.27.46 port 57544 ... show less	Brute-Force SSH Port Scan FTP Brute-Force
🇨🇿 gszasz	2026-06-13 23:41:36 (2 days ago)	2026-06-14T01:41:32.935292+02:00 euve sshd-session[67917]: pam_unix(sshd:auth): authentication failu ... show more 2026-06-14T01:41:32.935292+02:00 euve sshd-session[67917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.66.27.46 2026-06-14T01:41:35.033000+02:00 euve sshd-session[67917]: Failed password for invalid user admin from 195.66.27.46 port 41268 ssh2 2026-06-14T01:41:35.650899+02:00 euve sshd-session[67917]: Connection closed by invalid user admin 195.66.27.46 port 41268 [preauth] ... show less	Brute-Force SSH
🇦🇺 Anytech	2026-06-13 23:35:46 (2 days ago)	Blocked by Conn-Monitor: Brute force activity	Brute-Force SSH
🇺🇸 yzfdude1	2026-06-13 23:02:55 (2 days ago)	Jun 13 17:02:52 b146-19 sshd[197568]: Invalid user orangepi from 195.66.27.46 port 54044 Jun 13 17:0 ... show more Jun 13 17:02:52 b146-19 sshd[197568]: Invalid user orangepi from 195.66.27.46 port 54044 Jun 13 17:02:52 b146-19 sshd[197568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.66.27.46 Jun 13 17:02:54 b146-19 sshd[197568]: Failed password for invalid user orangepi from 195.66.27.46 port 54044 ssh2 ... show less	Brute-Force SSH
🇫🇷 MisterXBest	2026-06-13 22:22:12 (2 days ago)	[BloumeGen Security] IP Access: 195.66.27.46. SSH brute-force login attempt. Target: Unknown. Paths: ... show more [BloumeGen Security] IP Access: 195.66.27.46. SSH brute-force login attempt. Target: Unknown. Paths: Multiple probes. Hits: 5 show less	Brute-Force SSH
🇦🇺 foobax	2026-06-13 21:56:12 (2 days ago)	was attempting to break in as 'admin' from port 40232	SSH Brute-Force
🇺🇸 yzfdude1	2026-06-13 21:32:51 (2 days ago)	Jun 13 15:32:48 b146-45 sshd[196106]: Invalid user orangepi from 195.66.27.46 port 54852 Jun 13 15:3 ... show more Jun 13 15:32:48 b146-45 sshd[196106]: Invalid user orangepi from 195.66.27.46 port 54852 Jun 13 15:32:48 b146-45 sshd[196106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.66.27.46 Jun 13 15:32:50 b146-45 sshd[196106]: Failed password for invalid user orangepi from 195.66.27.46 port 54852 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 184.105.247.251

🇪🇬 156.206.18.20

🇮🇪 54.78.158.12

🇰🇷 43.108.34.246

🇺🇸 34.149.66.154

🇰🇿 176.222.167.26

🇩🇪 138.197.191.214

🇨🇳 121.225.55.155

🇨🇳 111.26.115.122

🇺🇸 104.129.17.147

🇦🇪 85.234.73.144

🇩🇪 69.5.169.248

🇺🇸 65.99.238.243

🇳🇱 45.148.10.147

🇸🇬 43.156.60.15

🇨🇳 218.78.58.87

🇺🇸 216.180.246.116

🇺🇸 162.216.150.225

🇵🇰 156.238.86.2

🇫🇷 135.125.29.132