AbuseIPDB » 95.142.120.134

Check an IP Address, Domain Name, or Subnet

e.g. 35.172.230.154, microsoft.com, or 5.188.10.0/24

95.142.120.134 was found in our database!

This IP was reported 241 times. Confidence of Abuse is 100%: ?

100%

ISP	Avast Slovakia s.r.o.
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	r-134-120-142-95.consumer-pool.prcdn.net
Domain Name	avast.com
Country	Singapore
City	Singapore, Singapore

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 95.142.120.134

Whois 95.142.120.134

IP Abuse Reports for 95.142.120.134:

This IP address has been reported a total of 241 times from 115 distinct sources. 95.142.120.134 was first reported on November 29th 2020, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
zwh	01 Feb 2023	Attack for XMLRPC	Web App Attack
niceshops.com	31 Jan 2023	Web Attack ([31/Jan/2023:11:42:33.643] GET //wp-includes/ID3/license.txt)	Web App Attack
SpaceHost-Server	31 Jan 2023	95.142.120.134 - - [31/Jan/2023:08:04:53 +0100] "POST /wp-login.php HTTP/1.0" 200 9461 "https://www. ... show more95.142.120.134 - - [31/Jan/2023:08:04:53 +0100] "POST /wp-login.php HTTP/1.0" 200 9461 "https://www.psd-bank.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 95.142.120.134 - - [31/Jan/2023:08:04:54 +0100] "POST /wp-login.php HTTP/1.0" 200 9461 "https://www.psd-bank.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 95.142.120.134 - - [31/Jan/2023:08:04:54 +0100] "POST /wp-login.php HTTP/1.0" 200 9461 "https://www.psd-bank.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" show less	Hacking Web App Attack
SpaceHost-Server	31 Jan 2023	95.142.120.134 - - [31/Jan/2023:07:49:46 +0100] "POST /xmlrpc.php HTTP/1.0" 200 762 "-" "Mozilla/5.0 ... show more95.142.120.134 - - [31/Jan/2023:07:49:46 +0100] "POST /xmlrpc.php HTTP/1.0" 200 762 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 95.142.120.134 - - [31/Jan/2023:07:49:47 +0100] "POST /xmlrpc.php HTTP/1.0" 200 762 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 95.142.120.134 - - [31/Jan/2023:07:49:47 +0100] "POST /xmlrpc.php HTTP/1.0" 200 762 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" show less	Hacking Web App Attack
AC - Team	31 Jan 2023	95.142.120.134 - - [31/Jan/2023:00:25:16 -0300] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 30 ... show more95.142.120.134 - - [31/Jan/2023:00:25:16 -0300] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 301 676 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ... show less	Hacking Web App Attack
EIC	31 Jan 2023	(wordpress) Failed wordpress login from 95.142.120.134 (US/United States/r-134-120-142-95.consumer-p ... show more(wordpress) Failed wordpress login from 95.142.120.134 (US/United States/r-134-120-142-95.consumer-pool.prcdn.net): (CF_ENABLE) show less	Brute-Force
niceshops.com	31 Jan 2023	Web Attack ([31/Jan/2023:02:21:20.699] GET //wp-includes/ID3/license.txt)	Web App Attack
URAN Publishing Service	31 Jan 2023	95.142.120.134 - - [31/Jan/2023:02:35:18 +0200] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 196 ... show more95.142.120.134 - - [31/Jan/2023:02:35:18 +0200] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ... show less	Web App Attack
AC - Team	30 Jan 2023	95.142.120.134 - - [30/Jan/2023:20:39:34 -0300] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 ... show more95.142.120.134 - - [30/Jan/2023:20:39:34 -0300] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1034 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ... show less	Hacking Web App Attack
MageHost.pro	30 Jan 2023	10 attempts against mh-misc-ban on ether	Web App Attack
KIsmay	30 Jan 2023	WordPress Brute Force, 5 attempts	Brute-Force Web App Attack
MageHost.pro	30 Jan 2023	10 attempts against mh-misc-ban on rose	Web App Attack
rh24	30 Jan 2023	(wordpress) Failed wordpress login from 95.142.120.134 (US/United States/r-134-120-142-95.consumer-p ... show more(wordpress) Failed wordpress login from 95.142.120.134 (US/United States/r-134-120-142-95.consumer-pool.prcdn.net): (CF_ENABLE) show less	Brute-Force
niceshops.com	30 Jan 2023	Web Attack ([30/Jan/2023:20:45:15.873] GET //wp-includes/ID3/license.txt)	Web App Attack
Anonymous	30 Jan 2023	Fail2Ban Log Report 95.142.120.134 - [30/Jan/2023:20:41:19 +0100] "GET //wp-includes/id3/license.txt ... show moreFail2Ban Log Report 95.142.120.134 - [30/Jan/2023:20:41:19 +0100] "GET //wp-includes/id3/license.txt/blog/wp-includes/wlwmanifest.xml HTTP/2.0" 403 1796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "2.57" "95.142.120.134" ... show less	Hacking SQL Injection Web App Attack