JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 95.142.121.35

95.142.121.35 was found in our database!

This IP was reported 456 times. Confidence of Abuse is 0%: ?

ISP	Avast Slovakia s.r.o.
Usage Type	Unknown
ASN	Unknown
Hostname(s)	r-35.121.142.95.ptr.avast.com
Domain Name	avast.com
Country	🇺🇸 United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 95.142.121.35

Whois 95.142.121.35

IP Abuse Reports for 95.142.121.35:

This IP address has been reported a total of 456 times from 225 distinct sources. 95.142.121.35 was first reported on June 1st 2021, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 oncord	2025-02-17 23:16:27 (1 year ago)	Form spam	Web Spam
🇺🇸 ipblock.com	2025-02-17 23:15:18 (1 year ago)	IPBlock protected site ID [4055-d]. Rogue crawler, does not respect robots.txt	Bad Web Bot
🇩🇪 dot.mg	2025-02-16 17:51:52 (1 year ago)	casino spam	Web Spam Blog Spam
🇺🇸 nowyouknow	2025-02-16 11:52:42 (1 year ago)	(From [email protected]) Dear bowerschiro.net ( Chiropractor in Fredericksburg, VA :: Bowers ... show more (From [email protected]) Dear bowerschiro.net ( Chiropractor in Fredericksburg, VA :: Bowers Family Chiropractic :: Dr. Jeff Bowers ) I hope this message finds you well. I am reaching out regarding an immediate and compelling acquisition opportunity. Flora Growth Corp. is currently seeking a buyer for its premium consumer brands: JustCBD, Vessel, Melo, and Haze. Given the company’s financial distress, we are actively exploring a strategic transaction and are open to negotiations on an expedited basis. These brands represent a unique market position with established distribution channels, brand recognition, and significant growth potential within the wellness, CBD, and cannabis-adjacent sectors. Given the urgency of our situation, we are prepared to discuss flexible deal structures that could create immediate value for an interested acquirer. If you or your organization have any interest in acquiring one or more of these brands, we urge you to engage with us at your earliest convenience. Time show less	Phishing Web Spam
🇫🇷 oonux.net	2025-02-03 10:57:56 (1 year ago)	RouterOS: The host 95.142.121.35 trying to use anonymous proxy	Hacking Bad Web Bot Exploited Host
🇫🇷 tecnicorioja	2025-01-10 23:01:19 (1 year ago)	(Mod_security) [10/Jan/2025:18:21:57.892924	Brute-Force Bad Web Bot Web App Attack
🇬🇧 www.elivecd.org	2025-01-10 17:51:45 (1 year ago)	2025/01/10 17:51:44 [error] 1502382#1502382: 269792 FastCGI sent in stderr: "PHP message: BOT WARNI ... show more 2025/01/10 17:51:44 [error] 1502382#1502382: 269792 FastCGI sent in stderr: "PHP message: BOT WARNING: visitor used the honeypot: 95.142.121.35, you should ban it for long time (honeypot form function-abuseipdb)" while reading response header from upstream, client: 95.142.121.35, server: www.elivecd.org, request: "POST / HTTP/1.1", upstream: "fastcgi://unix:/run/php/php8.2-fpm-elivewp.sock:", host: "78.141.243.157" ... show less	Web Spam Email Spam
🇺🇸 TPI-Abuse	2025-01-10 15:16:30 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 95.142.121.35 (r-35-121-142-95.consumer-pool.pr ... show more (mod_security) mod_security (id:210492) triggered by 95.142.121.35 (r-35-121-142-95.consumer-pool.prcdn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 10 10:16:22.632116 2025] [security2:error] [pid 26729:tid 26729] [client 95.142.121.35:1943] [client 95.142.121.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.165"] [uri "/.env"] [unique_id "Z4E5xlWM7r3u27SAJP4OEAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-01-10 15:01:26 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 95.142.121.35 (r-35-121-142-95.consumer-pool.pr ... show more (mod_security) mod_security (id:210492) triggered by 95.142.121.35 (r-35-121-142-95.consumer-pool.prcdn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 10 10:01:22.325962 2025] [security2:error] [pid 15847:tid 15872] [client 95.142.121.35:1811] [client 95.142.121.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.132"] [uri "/.env"] [unique_id "Z4E2QkOBO5KZue6x_FdLXAAAANY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-10 13:50:40 (1 year ago)	Legion Credential Harvester / SMTP Hijacker: /.env	Hacking Web App Attack
🇩🇪 Tamsy	2025-01-09 20:09:45 (1 year ago)	Web application vulnerability scanning	Web App Attack
🇩🇪 ut-addicted.com	2025-01-09 19:44:05 (1 year ago)	\[Thu Jan 09 20:44:04.377819 2025\] \[:error\] \[pid 23060:tid 139961611306752\] \[client 95.142.121 ... show more \[Thu Jan 09 20:44:04.377819 2025\] \[:error\] \[pid 23060:tid 139961611306752\] \[client 95.142.121.35:1921\] \[client 95.142.121.35\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 8\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/.env"\] \[unique_id "Z4AnBEkL9ku6MfawKkMgFAAAAMQ"\] show less	Brute-Force Web App Attack
🇫🇮 23p02732	2025-01-09 19:10:04 (1 year ago)	Mailserver and mailaccount attacks	Brute-Force Bad Web Bot Exploited Host Web App Attack
🇺🇸 kosada.com	2025-01-09 18:50:46 (1 year ago)	Web vulnerability probing	Web App Attack
🇩🇪 ut-addicted.com	2025-01-09 18:43:20 (1 year ago)	\[Thu Jan 09 19:43:19.115365 2025\] \[:error\] \[pid 23060:tid 139961642776320\] \[client 95.142.121 ... show more \[Thu Jan 09 19:43:19.115365 2025\] \[:error\] \[pid 23060:tid 139961642776320\] \[client 95.142.121.35:1811\] \[client 95.142.121.35\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 8\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/.env"\] \[unique_id "Z4AYx0kL9ku6MfawKkMekgAAAME"\] show less	Brute-Force Web App Attack

Showing 1 to 15 of 456 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇴🇲 161.8.118.17

🇺🇸 135.237.125.201

🇷🇺 77.223.122.29

🇹🇼 34.81.78.67

🇺🇸 209.141.51.30

🇵🇱 176.53.159.197

🇺🇸 162.216.150.6

🇰🇷 121.135.45.195

🇺🇸 103.153.183.69

🇱🇹 77.90.185.20

🇱🇺 64.89.160.73

🇳🇱 45.156.128.113

🇺🇸 3.142.170.60

🇧🇷 205.210.31.159

🇪🇸 196.196.150.4

🇲🇽 187.170.80.62

🇩🇪 134.209.238.140

🇬🇧 118.193.65.175

🇳🇱 195.178.110.228

🇵🇱 185.79.139.16