JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 95.154.200.58

95.154.200.58 was found in our database!

This IP was reported 204 times. Confidence of Abuse is 74%: ?

74%

ISP	Iomart Managed Services Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS20860
Hostname(s)	as022.pub.threatview.app
Domain Name	rapidswitch.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	Reading, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 95.154.200.58

Whois 95.154.200.58

IP Abuse Reports for 95.154.200.58:

This IP address has been reported a total of 204 times from 74 distinct sources. 95.154.200.58 was first reported on October 2nd 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Catalin Negru	2026-07-14 03:55:29 (1 day ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇩🇪 Roper123	2026-07-13 22:04:47 (1 day ago)	Unauthorized DNS request	Brute-Force
Anonymous	2026-07-13 16:39:20 (1 day ago)	[Mon Jul 13 16:39:19.354945 2026] [authz_core:error] [pid 86963:tid 86963] [client 95.154.200.58:402 ... show more [Mon Jul 13 16:39:19.354945 2026] [authz_core:error] [pid 86963:tid 86963] [client 95.154.200.58:40234] AH01630: client denied by server configuration: /var/www/shop.gassycat.be/htdocs/js/varien [Mon Jul 13 16:39:19.873641 2026] [authz_core:error] [pid 86963:tid 86963] [client 95.154.200.58:40234] AH01630: client denied by server configuration: /var/www/shop.gassycat.be/htdocs/js/varien [Mon Jul 13 16:39:19.882654 2026] [authz_core:error] [pid 86963:tid 86963] [client 95.154.200.58:40234] AH01630: client denied by server configuration: /var/www/shop.gassycat.be/htdocs/js/lib [Mon Jul 13 16:39:20.071827 2026] [authz_core:error] [pid 86808:tid 86808] [client 95.154.200.58:40288] AH01630: client denied by server configuration: /var/www/shop.gassycat.be/htdocs/js/mage [Mon Jul 13 16:39:20.168764 2026] [authz_core:error] [pid 86868:tid 86868] [client 95.154.200.58:40312] AH01630: client denied by server configuration: /var/www/shop.gassycat.be/htdocs/js/prototype ... show less	Brute-Force
Anonymous	2026-07-13 10:49:52 (1 day ago)	DNS AXFR Attempt	DNS Compromise
🇨🇭 Origon	2026-07-13 07:38:33 (1 day ago)	http-admin-interface-probing - IP: 95.154.200.58 - time="2026-07-13T09:38:33+02:00" level=info msg= ... show more http-admin-interface-probing - IP: 95.154.200.58 - time="2026-07-13T09:38:33+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-admin-interface-probing by ip 95.154.200.58 (GB/20860) : 4h ban on Ip 95.154.200.58" module=db show less	Web App Attack
🇦🇺 afleventoffice.com.au	2026-07-13 03:44:31 (2 days ago)	GET /QYzdCODQlskh HTTP/1.1	Web App Attack
🇺🇸 nodepile	2026-07-13 01:40:49 (2 days ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/ ua='Turaco Labs ThreatView ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/ ua='Turaco Labs ThreatView Security Auditor (threatview.app)') show less	Web App Attack Exploited Host
🇫🇷 SpaceHost-Server	2026-07-09 22:31:28 (5 days ago)		Brute-Force Web App Attack
🇩🇪 macrob	2026-07-09 20:44:51 (5 days ago)	2026/07/09 20:44:49 [error] 2488217#2488217: 363641704 access forbidden by rule, client: 95.154.200 ... show more 2026/07/09 20:44:49 [error] 2488217#2488217: 363641704 access forbidden by rule, client: 95.154.200.58, server: binixo.pl, request: "GET /js/mage/adminhtml/product.js HTTP/2.0", host: "binixo.pl" 2026/07/09 20:44:49 [error] 2488217#2488217: 363641705 access forbidden by rule, client: 95.154.200.58, server: binixo.pl, request: "GET /js/mage/adminhtml/sales.js HTTP/2.0", host: "binixo.pl" 2026/07/09 20:44:49 [error] 2488217#2488217: 363641707 access forbidden by rule, client: 95.154.200.58, server: binixo.pl, request: "GET /js/mage/adminhtml/tools.js HTTP/2.0", host: "binixo.pl" ... show less	Web App Attack
Anonymous	2026-07-05 05:21:32 (1 week ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2026-07-03 00:05:01 (1 week ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: GB, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: GB, Attack patterns: WordPress scanning show less	Bad Web Bot Web App Attack
🇺🇸 nodepile	2026-07-02 01:37:24 (1 week ago)	Requests denied due to active blacklist hits (tenant=82 method=HEAD path=/ ua='Turaco Labs ThreatVie ... show more Requests denied due to active blacklist hits (tenant=82 method=HEAD path=/ ua='Turaco Labs ThreatView Security Auditor (threatview.app)') show less	Web App Attack Exploited Host
Anonymous	2026-07-01 23:06:04 (1 week ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: GB, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: GB, Attack patterns: WordPress scanning show less	Bad Web Bot Web App Attack
🇺🇸 nasset	2026-07-01 22:38:19 (1 week ago)	95.154.200.58 - - [01/Jul/2026:15:38:19 -0700] "GET /INSTALL.txt HTTP/1.1" 403 584 "-" "Turaco Labs ... show more 95.154.200.58 - - [01/Jul/2026:15:38:19 -0700] "GET /INSTALL.txt HTTP/1.1" 403 584 "-" "Turaco Labs ThreatView Security Auditor (threatview.app)" 95.154.200.58 - - [01/Jul/2026:15:38:19 -0700] "GET /a/j/volusion.js HTTP/1.1" 403 584 "-" "Turaco Labs ThreatView Security Auditor (threatview.app)" 95.154.200.58 - - [01/Jul/2026:15:38:19 -0700] "GET /CHANGELOG.txt HTTP/1.1" 403 584 "-" "Turaco Labs ThreatView Security Auditor (threatview.app)" 95.154.200.58 - - [01/Jul/2026:15:38:19 -0700] "GET /core/CHANGELOG.txt HTTP/1.1" 403 584 "-" "Turaco Labs ThreatView Security Auditor (threatview.app)" 95.154.200.58 - - [01/Jul/2026:15:38:19 -0700] "GET /misc/druplicon.png HTTP/1.1" 403 584 "-" "Turaco Labs ThreatView Security Auditor (threatview.app)" ... show less	Bad Web Bot Web App Attack
🇺🇸 nodepile	2026-06-22 01:31:34 (3 weeks ago)	Requests denied due to active blacklist hits (tenant=82 method=HEAD path=/ ua='Turaco Labs ThreatVie ... show more Requests denied due to active blacklist hits (tenant=82 method=HEAD path=/ ua='Turaco Labs ThreatView Security Auditor (threatview.app)') show less	Web App Attack Exploited Host

Showing 1 to 15 of 204 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 35.203.210.124

🇬🇧 213.166.84.53

🇲🇽 189.204.230.91

🇧🇷 189.6.243.116

🇹🇼 118.163.132.211

🇮🇳 117.192.227.71

🇮🇳 66.116.224.161

🇺🇸 20.29.49.93

🇧🇪 198.235.24.245

🇧🇪 198.235.24.134

🇺🇸 172.234.199.75

🇺🇸 66.249.74.67

🇺🇸 64.62.197.200

🇺🇸 38.141.62.148

🇬🇧 194.50.235.149

🇺🇸 185.223.152.184

🇺🇸 185.149.26.71

🇯🇵 172.253.6.145

🇻🇳 157.66.80.124

🇩🇪 150.241.77.28