JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

212.95.45.121

Neutral Activity

Abuse Confidence Score

0% Low Risk

97 reports

55 reporters · latest 6 months ago

ISP: Leaseweb Deutschland GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS28753
Hostname(s): mis.domain2space.in
Domain Name: leaseweb.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

212.95.45.121 has been reported 97 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

97 from 55 distinct reporters

First reported

April 12th 2026

Most recent report

6 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-04-30 13:04:10 UTC · (6 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
Anonymous	2026-04-13 20:12:34 UTC · (7 months ago)	Credential Brute‑Force / Login Enumeration	Brute-Force
🇩🇪 main.ows	2026-04-13 18:45:15 UTC · (7 months ago)	212.95.45.121 - - [12/Apr/2026:12:46:11 +0000] "POST /wp-login.php HTTP/1.1" 200 4040 "https://studioconsulenzainternazionale.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safa ... show more 212.95.45.121 - - [12/Apr/2026:12:46:11 +0000] "POST /wp-login.php HTTP/1.1" 200 4040 "https://studioconsulenzainternazionale.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36 OPR/52.0.2871.99" 212.95.45.121 - - [12/Apr/2026:19:09:43 +0000] "POST /wp-login.php HTTP/1.1" 200 4040 "https://studioconsulenzainternazionale.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_1) AppleWebKit/604.3.1 (KHTML, like Gecko) Version/11.0.1 Safari/604.3.1" 212.95.45.121 - - [12/Apr/2026:09:54:21 +0000] "POST /wp-login.php HTTP/1.1" 200 4051 "https://ac-icg.com/wp-login.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; MASA; .NET4.0C; .NET4.0E; AskTbFWV5/5.15.29.67612)" ... show less	Web App Attack
🇺🇸 octageeks.com	2026-04-13 04:06:50 UTC · (7 months ago)	Wordpress malicious attack:[octawp]	Web App Attack
🇪🇸 SweetHoneyPress	2026-04-13 03:47:04 UTC · (7 months ago)	WordPress honeypot: POST to /xmlrpc.php \| event_id=518510 \| UA: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; SLCC2; Media Center PC 6.0; Tablet P	Web App Attack Brute-Force
🇬🇧 consul.to	2026-04-13 03:45:52 UTC · (7 months ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-04-13 03:24:19 UTC · (7 months ago)	(mod_security) mod_security (id:225170) triggered by 212.95.45.121 (mis.domain2space.in): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 23:24:14.571704 2026] [security2:error] [pid 111618:tid 111618] [client 21 ... show more (mod_security) mod_security (id:225170) triggered by 212.95.45.121 (mis.domain2space.in): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 23:24:14.571704 2026] [security2:error] [pid 111618:tid 111618] [client 212.95.45.121:57034] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bigislandhawaiicoffee.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bigislandhawaiicoffee.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adxh3kVBa7KMZx-aBW3_kAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 KnightIndustries	2026-04-13 02:46:10 UTC · (7 months ago)	2026-04-13T03:39:25.810478+02:00 milkyway wordpress(learncryptography.pw)[3694483]: XML-RPC authentication failure for mystic from 212.95.45.121 2026-04-13T04:21:27.516941+02:00 milkyway wordpress(learncryptography.pw)[3719608]: XML-RPC authenticatio ... show more 2026-04-13T03:39:25.810478+02:00 milkyway wordpress(learncryptography.pw)[3694483]: XML-RPC authentication failure for mystic from 212.95.45.121 2026-04-13T04:21:27.516941+02:00 milkyway wordpress(learncryptography.pw)[3719608]: XML-RPC authentication failure for macminty from 212.95.45.121 2026-04-13T04:46:10.254438+02:00 milkyway wordpress(oldscarborough.com)[3723540]: Authentication failure for joshua from 212.95.45.121 ... show less	Brute-Force Web App Attack
🇩🇪 netclix.gr	2026-04-13 02:45:48 UTC · (7 months ago)	(PERMBLOCK) 212.95.45.121 (DE/Germany/mis.domain2space.in) has had more than 4 temp blocks	Hacking
🇩🇪 main.ows	2026-04-13 02:00:32 UTC · (7 months ago)	212.95.45.121 - - [13/Apr/2026:01:53:06 +0000] "POST /wp-login.php HTTP/1.1" 200 4037 "https://studioconsulenzadirezionale.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/ ... show more 212.95.45.121 - - [13/Apr/2026:01:53:06 +0000] "POST /wp-login.php HTTP/1.1" 200 4037 "https://studioconsulenzadirezionale.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36" 212.95.45.121 - - [13/Apr/2026:01:54:50 +0000] "POST /wp-login.php HTTP/1.1" 200 4041 "https://studioconsulenzadirezionale.com/wp-login.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 212.95.45.121 - - [13/Apr/2026:02:00:31 +0000] "POST /wp-login.php HTTP/1.1" 200 7346 "https://openwaresolutions.net/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; yie10; rv:11.0) like Gecko" ... show less	Web App Attack
🇪🇸 SweetHoneyPress	2026-04-13 01:34:39 UTC · (7 months ago)	WordPress honeypot: POST to /xmlrpc.php \| event_id=518350 \| UA: Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; MATPJS; rv:11.0) like Gecko	Web App Attack Brute-Force
Anonymous	2026-04-13 01:14:14 UTC · (7 months ago)	[Mon Apr 13 03:14:13.109372 2026] [authz_core:error] [pid 49729:tid 49825] [client 212.95.45.121:41754] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php [Mon Apr 13 03:14:13.144747 2026] [authz_core:error] [pid 49729:tid 49 ... show more [Mon Apr 13 03:14:13.109372 2026] [authz_core:error] [pid 49729:tid 49825] [client 212.95.45.121:41754] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php [Mon Apr 13 03:14:13.144747 2026] [authz_core:error] [pid 49729:tid 49845] [client 212.95.45.121:41754] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php, referer: https://akcurate.de/wp-login.php ... show less	Brute-Force Web App Attack
🇧🇪 cmbplf	2026-04-13 01:01:38 UTC · (7 months ago)	2.782 requests from abuseipdb.com blacklisted IP (1yr4mos3w)	Brute-Force Bad Web Bot
🇬🇧 andypiper	2026-04-13 01:00:08 UTC · (7 months ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇫🇮 KnightIndustries	2026-04-13 00:31:18 UTC · (7 months ago)	2026-04-13T02:11:31.472875+02:00 milkyway wordpress(oldscarborough.com)[3700201]: Authentication failure for joshua from 212.95.45.121 2026-04-13T02:22:27.908244+02:00 milkyway wordpress(butlinsbadges.fawcett.ovh)[3697343]: XML-RPC authentication fai ... show more 2026-04-13T02:11:31.472875+02:00 milkyway wordpress(oldscarborough.com)[3700201]: Authentication failure for joshua from 212.95.45.121 2026-04-13T02:22:27.908244+02:00 milkyway wordpress(butlinsbadges.fawcett.ovh)[3697343]: XML-RPC authentication failure for joshua from 212.95.45.121 2026-04-13T02:31:17.718373+02:00 milkyway wordpress(oldscarborough.com)[3694485]: Authentication failure for joshua from 212.95.45.121 ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 97 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 211.149.157.215

🇧🇩 123.253.65.243

🇺🇸 64.49.39.169

🇻🇳 14.191.94.147

🇸🇪 193.180.223.247

🇬🇧 193.163.125.73

🇺🇸 192.200.158.219

🇵🇱 89.25.194.37

🇫🇷 85.217.140.53

🇫🇷 85.217.140.2

🇷🇺 84.53.244.67

🇱🇹 62.60.134.134

🇸🇪 13.51.196.80

🇳🇱 193.47.62.69

🇫🇷 185.207.250.24

🇩🇪 151.243.11.230

🇳🇱 109.160.32.118

🇺🇸 104.196.212.29

🇮🇳 103.147.248.44

🇫🇷 91.196.152.191