JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 95.242.65.138

95.242.65.138 was found in our database!

This IP was reported 112 times. Confidence of Abuse is 100%: ?

100%

ISP	Telecom Italia S.p.A.
Usage Type	Fixed Line ISP
ASN	AS3269
Hostname(s)	host-95-242-65-138.business.telecomitalia.it
Domain Name	telecomitalia.com
Country	🇮🇹 Italy
City	Lido di Jesolo, Veneto

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 95.242.65.138

Whois 95.242.65.138

IP Abuse Reports for 95.242.65.138:

This IP address has been reported a total of 112 times from 86 distinct sources. 95.242.65.138 was first reported on August 24th 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 1cyb3rpunk	2026-08-26 21:38:05 (13 hours ago)	Coordinated campaign CMP-1786835848-001: 213 IPs sharing an attack fingerprint (acme_challenge_probe ... show more Coordinated campaign CMP-1786835848-001: 213 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, attacker_objective_inferred, backup_file_probe, cms_version_probe, command_injection_attempt). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-26 13:46:25 (21 hours ago)	Failed Wordpress Logins	Web App Attack
🇮🇳 evicky2002	2026-08-26 07:31:11 (1 day ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇲🇽 octageeks.com	2026-08-26 04:06:10 (1 day ago)	Wordpress malicious attack:[octaflood]	Web App Attack
Anonymous	2026-08-26 00:10:37 (1 day ago)	WordPress Brute Force	Hacking Brute-Force Web App Attack
🇸🇮 administrator	2026-08-25 22:07:51 (1 day ago)	2026-08-25 09:25:29,754 fail2ban.actions [1161]: NOTICE [webadmin-badips] Ban 95.242.65.138 ... show more 2026-08-25 09:25:29,754 fail2ban.actions [1161]: NOTICE [webadmin-badips] Ban 95.242.65.138 2026-08-25 09:25:29,754 fail2ban.actions [1161]: NOTICE [webadmin-badips] Ban 95.242.65.138 2026-08-26 00:04:22,973 fail2ban.actions [1161]: NOTICE [webadmin-nfw] Ban 95.242.65.138 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇫🇷 tecnicorioja	2026-08-25 22:02:11 (1 day ago)	wp-login attack [25/Aug/2026:09:45:15	Brute-Force Web App Attack
Anonymous	2026-08-25 22:01:20 (1 day ago)	2026-08-25T22:01:19.876034+00:00 instance-20260804-1025 wordpress(d-sign.pro)[562291]: Immediately b ... show more 2026-08-25T22:01:19.876034+00:00 instance-20260804-1025 wordpress(d-sign.pro)[562291]: Immediately block connections from 95.242.65.138 ... show less	Web App Attack
🇺🇸 1cyb3rpunk	2026-08-25 21:37:33 (1 day ago)	Coordinated campaign CMP-1786835848-001: 175 IPs sharing an attack fingerprint (acme_challenge_probe ... show more Coordinated campaign CMP-1786835848-001: 175 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, backup_file_probe, cms_version_probe, command_injection_attempt, config_leak_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇮🇹 sssrit	2026-08-25 21:30:20 (1 day ago)	95.242.65.138 - - [25/Aug/2026:22:58:32 +0200] "GET /wp-login.php HTTP/2.0" 200 4610 "-" "Mozilla/5. ... show more 95.242.65.138 - - [25/Aug/2026:22:58:32 +0200] "GET /wp-login.php HTTP/2.0" 200 4610 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 95.242.65.138 - - [25/Aug/2026:22:58:32 +0200] "POST /wp-login.php HTTP/2.0" 200 4610 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 95.242.65.138 - - [25/Aug/2026:23:30:19 +0200] "GET /wp-login.php HTTP/2.0" 200 4610 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" ... show less	Web App Attack
🇹🇷 oalver	2026-08-25 21:11:18 (1 day ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signa ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /wp-login.php (HTTP 200). First seen: 2026-08-25. Risk score: 100/100. show less	Web App Attack
🇩🇪 BlueWire Hosting	2026-08-25 20:51:29 (1 day ago)	Wordpress brute force attempt	Brute-Force Web App Attack
🇩🇪 psauxit	2026-08-25 20:31:08 (1 day ago)	Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ... show more Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping show less	Web App Attack Hacking
Anonymous	2026-08-25 20:27:41 (1 day ago)	(PERMBLOCK) 95.242.65.138 (IT/Italy/host-95-242-65-138.business.telecomitalia.it) has had more than ... show more (PERMBLOCK) 95.242.65.138 (IT/Italy/host-95-242-65-138.business.telecomitalia.it) has had more than 4 temp blocks show less	Hacking
🇺🇸 1cyb3rpunk	2026-08-25 20:26:55 (1 day ago)	Coordinated campaign CMP-1786835848-001: 171 IPs sharing an attack fingerprint (acme_challenge_probe ... show more Coordinated campaign CMP-1786835848-001: 171 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, backup_file_probe, cms_version_probe, command_injection_attempt, config_leak_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 112 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.241

🇩🇪 43.228.157.9

🇺🇸 2607:f8b0:4001:c00::12a

🇺🇸 199.188.201.102

🇭🇰 165.154.23.177

🇹🇷 159.146.18.211

🇭🇰 152.32.239.15

🇺🇸 136.114.140.138

🇮🇳 135.235.196.148

🇨🇳 117.188.216.120

🇧🇩 103.110.216.61

🇯🇵 101.33.55.172

🇫🇷 82.208.21.43

🇹🇷 78.167.4.220

🇬🇧 62.60.130.182

🇨🇳 47.122.125.202

🇳🇱 45.148.10.141

🇮🇩 36.72.13.120

🇺🇸 35.227.84.230

🇺🇸 8.234.234.56