AbuseIPDB » 95.142.113.21

95.142.113.21 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 17%: ?

17%

ISP	Avast Slovakia s.r.o.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS61317
Hostname(s)	r-21-113-142-95.consumer-pool.prcdn.net
Domain Name	avast.com
Country	South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 95.142.113.21

Whois 95.142.113.21

IP Abuse Reports for 95.142.113.21:

This IP address has been reported a total of 7 times from 5 distinct sources. 95.142.113.21 was first reported on August 18th 2022, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
TPI-Abuse	2025-06-20 22:24:02 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 95.142.113.21 (r-21-113-142-95.consumer-pool.pr ... show more(mod_security) mod_security (id:210492) triggered by 95.142.113.21 (r-21-113-142-95.consumer-pool.prcdn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 20 18:23:58.184602 2025] [security2:error] [pid 26518:tid 26518] [client 95.142.113.21:1144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.whodatnation.com"] [uri "/wp-content/themes/.git/config"] [unique_id "aFXffnj_nFAtVNqJqF9IWAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
ipblock.com	2025-06-20 22:05:00 (2 weeks ago)	IPBlock protected site ID [4678-sl]. Exploit request, vulnerability probe.	Hacking Bad Web Bot Web App Attack
TPI-Abuse	2025-06-20 21:17:10 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 95.142.113.21 (r-21-113-142-95.consumer-pool.pr ... show more(mod_security) mod_security (id:210492) triggered by 95.142.113.21 (r-21-113-142-95.consumer-pool.prcdn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 20 17:17:02.980080 2025] [security2:error] [pid 2618830:tid 2618830] [client 95.142.113.21:1043] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.greatplainswingcaf.org"] [uri "/.git/config"] [unique_id "aFXPzpHajP3AoZ94dBP3XgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
jhuisi	2025-06-20 19:12:56 (3 weeks ago)	Mod Security Hit	Web App Attack
hostseries	2023-07-12 15:38:34 (1 year ago)	Trigger: LF_DISTATTACK	Brute-Force
hostseries	2023-07-05 14:33:58 (2 years ago)	Trigger: LF_DISTATTACK	Brute-Force
tvipper.com	2022-08-18 14:52:49 (2 years ago)	Auto reported by IDS	Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩