JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 95.142.121.27

95.142.121.27 was found in our database!

This IP was reported 89 times. Confidence of Abuse is 0%: ?

ISP	Avast Slovakia s.r.o.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Hostname(s)	r-27.121.142.95.ptr.avast.com
Domain Name	avast.com
Country	🇪🇹 Ethiopia
City	Addis Ababa, Addis Ababa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 95.142.121.27

Whois 95.142.121.27

IP Abuse Reports for 95.142.121.27:

This IP address has been reported a total of 89 times from 54 distinct sources. 95.142.121.27 was first reported on January 10th 2021, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 tjs	2025-02-11 19:10:00 (1 year ago)	web attack, SQL injection attempt	Hacking SQL Injection Web App Attack
🇹🇷 rtbh.com.tr	2024-12-04 20:52:55 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2024-11-30 10:34:01 (1 year ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 snappic	2024-09-23 06:33:37 (1 year ago)	Malicious URI path [GET /login/wp-includes/wlwmanifest.xml] [Mozilla/5.0 (Windows NT 10.0; Win64; x6 ... show more Malicious URI path [GET /login/wp-includes/wlwmanifest.xml] [Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36] Reported from WAF sampled requests show less	Bad Web Bot Web App Attack
🇧🇪 cmbplf	2024-09-21 03:24:51 (1 year ago)	1.047 requests to /xmlrpc.php 641 requests to /wp-includes/wlwmanifest.xml	Brute-Force Bad Web Bot
🇹🇷 rtbh.com.tr	2024-09-09 20:54:48 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2024-09-07 20:54:52 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2024-08-26 20:55:15 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 Sklurk	2024-08-23 15:55:23 (2 years ago)	Web App Attack	Web App Attack
🇹🇷 rtbh.com.tr	2024-08-18 20:55:31 (2 years ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 TPI-Abuse	2024-08-17 03:47:53 (2 years ago)	(mod_security) mod_security (id:240335) triggered by 95.142.121.27 (r-27-121-142-95.consumer-pool.pr ... show more (mod_security) mod_security (id:240335) triggered by 95.142.121.27 (r-27-121-142-95.consumer-pool.prcdn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 16 23:47:49.108559 2024] [security2:error] [pid 7794:tid 7794] [client 95.142.121.27:1128] [client 95.142.121.27] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 95.142.121.27 (+1 hits since last alert)\|grandmaloutunes.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "grandmaloutunes.com"] [uri "/xmlrpc.php"] [unique_id "ZsAdZQYmmn82iqaXJC9h9gAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 nextweb	2024-08-09 16:54:57 (2 years ago)	(mod_security) mod_security (id:217291) triggered by 95.142.121.27 (US/United States/New York/New Yo ... show more (mod_security) mod_security (id:217291) triggered by 95.142.121.27 (US/United States/New York/New York/r-27-121-142-95.consumer-pool.prcdn.net/[AS198605 AVAST Software s.r.o.]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
🇺🇸 TPI-Abuse	2024-07-29 18:09:07 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 95.142.121.27 (r-27-121-142-95.consumer-pool.pr ... show more (mod_security) mod_security (id:210492) triggered by 95.142.121.27 (r-27-121-142-95.consumer-pool.prcdn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 29 14:09:01.173588 2024] [security2:error] [pid 22759:tid 22759] [client 95.142.121.27:1647] [client 95.142.121.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "admin.turedinmobiliaria.com"] [uri "/.env"] [unique_id "Zqfavbl5Ji_bKnzFxXbTVwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2024-07-24 01:19:24 (2 years ago)	901 requests to */xmlrpc.php	Brute-Force Bad Web Bot
Anonymous	2024-06-08 09:32:27 (2 years ago)	SSH login attempts with user root	Brute-Force

Showing 1 to 15 of 89 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 205.188.63.170

🇫🇷 185.177.72.69

🇫🇷 85.217.140.45

🇩🇪 65.111.31.208

🇸🇬 47.84.106.109

🇳🇱 45.156.87.127

🇩🇪 45.95.0.139

🇱🇹 213.176.26.109

🇳🇱 185.226.197.42

🇳🇱 185.2.80.253

🇺🇸 147.185.132.174

🇨🇳 112.94.253.162

🇵🇱 94.75.78.33

🇫🇷 91.173.60.22

🇺🇸 68.66.226.89

🇲🇾 47.250.152.22

🇺🇸 45.194.67.27

🇨🇳 36.139.124.198

🇺🇸 35.169.206.177

🇺🇸 34.138.12.167