JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 95.27.10.149

95.27.10.149 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 66%: ?

66%

ISP	PJSC Vimpelcom
Usage Type	Fixed Line ISP
ASN	AS3216
Hostname(s)	95-27-10-149.broadband.corbina.ru
Domain Name	co.ru
Country	🇷🇺 Russian Federation
City	Kaliningrad, Kaliningrad Oblast

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 95.27.10.149

Whois 95.27.10.149

IP Abuse Reports for 95.27.10.149:

This IP address has been reported a total of 18 times from 11 distinct sources. 95.27.10.149 was first reported on June 8th 2026, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-15 19:40:25 (17 hours ago)	(mod_security) mod_security (id:240335) triggered by 95.27.10.149 (95-27-10-149.broadband.corbina.ru ... show more (mod_security) mod_security (id:240335) triggered by 95.27.10.149 (95-27-10-149.broadband.corbina.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 15:40:15.759029 2026] [security2:error] [pid 22855:tid 22855] [client 95.27.10.149:8682] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 95.27.10.149 (+1 hits since last alert)\|roguetechscene.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "roguetechscene.com"] [uri "/xmlrpc.php"] [unique_id "ajBVH9mMMrica1sDVLQSwwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-15 18:37:11 (18 hours ago)	Blocked by CSF 13 firewall - Rule: XMLRPC RU/Russia/95-27-10-149.broadband.corbina.ru	Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 14:33:04 (22 hours ago)	(mod_security) mod_security (id:240335) triggered by 95.27.10.149 (95-27-10-149.broadband.corbina.ru ... show more (mod_security) mod_security (id:240335) triggered by 95.27.10.149 (95-27-10-149.broadband.corbina.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 10:33:00.007379 2026] [security2:error] [pid 15496:tid 15496] [client 95.27.10.149:3910] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 95.27.10.149 (+1 hits since last alert)\|guitarwisdom.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "guitarwisdom.com"] [uri "/xmlrpc.php"] [unique_id "ajANHKN-kOw5GtIqct-RSQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-06-15 14:09:30 (22 hours ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
Anonymous	2026-06-14 21:12:32 (1 day ago)	[redacted] 95.27.10.149 - - [14/Jun/2026:23:11:49 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Je ... show more [redacted] 95.27.10.149 - - [14/Jun/2026:23:11:49 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.2; http://site10331589.com" [redacted] 95.27.10.149 - - [14/Jun/2026:23:11:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.3; http://site68003065.com" [redacted] 95.27.10.149 - - [14/Jun/2026:23:12:09 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 95.27.10.149 - - [14/Jun/2026:23:12:20 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 95.27.10.149 - - [14/Jun/2026:23:12:31 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.3; http://site95616688.com" ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 17:32:47 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 95.27.10.149 (95-27-10-149.broadband.corbina.ru ... show more (mod_security) mod_security (id:240335) triggered by 95.27.10.149 (95-27-10-149.broadband.corbina.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 13:32:42.602184 2026] [security2:error] [pid 1584:tid 1584] [client 95.27.10.149:1757] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 95.27.10.149 (+1 hits since last alert)\|wwfstudio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "wwfstudio.com"] [uri "/xmlrpc.php"] [unique_id "ai7lulWRmJtCljk3HpaUVAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 15:27:11 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 95.27.10.149 (95-27-10-149.broadband.corbina.ru ... show more (mod_security) mod_security (id:240335) triggered by 95.27.10.149 (95-27-10-149.broadband.corbina.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 11:27:06.281525 2026] [security2:error] [pid 31815:tid 31864] [client 95.27.10.149:11669] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 95.27.10.149 (+1 hits since last alert)\|greencitymethods.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "greencitymethods.com"] [uri "/xmlrpc.php"] [unique_id "ai7ISm1q6PZdeOyxodUWoQAAAFA"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-06-14 15:09:04 (1 day ago)	trying wp-login.php/xmlrpc.php 35 times in 1 minutes	Brute-Force Web App Attack
Anonymous	2026-06-14 14:54:06 (1 day ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇸🇪 vaia.cloud	2026-06-13 22:31:03 (2 days ago)	trying wp-login.php/xmlrpc.php 31 times in 1 minutes	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 15:20:26 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 95.27.10.149 (95-27-10-149.broadband.corbina.ru ... show more (mod_security) mod_security (id:240335) triggered by 95.27.10.149 (95-27-10-149.broadband.corbina.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 11:20:22.402666 2026] [security2:error] [pid 472:tid 486] [client 95.27.10.149:1281] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 95.27.10.149 (+1 hits since last alert)\|gabegabel.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "gabegabel.com"] [uri "/xmlrpc.php"] [unique_id "ai11NgGFhDH6luL4hrlPIAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-12 14:04:59 (3 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇫🇷 masterguru	2026-06-11 05:47:45 (5 days ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
Anonymous	2026-06-10 19:04:13 (5 days ago)	Attac	Brute-Force
🇺🇸 TPI-Abuse	2026-06-08 21:49:43 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 95.27.10.149 (95-27-10-149.broadband.corbina.ru ... show more (mod_security) mod_security (id:240335) triggered by 95.27.10.149 (95-27-10-149.broadband.corbina.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 17:49:36.429588 2026] [security2:error] [pid 25385:tid 25385] [client 95.27.10.149:6518] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 95.27.10.149 (+1 hits since last alert)\|farsipraiseclub.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "farsipraiseclub.com"] [uri "/xmlrpc.php"] [unique_id "aic48GHkiiNjASBTiisURgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.185.23.242

🇨🇳 183.167.234.154

🇮🇳 103.165.28.214

🇳🇱 89.21.67.188

🇬🇧 195.140.214.22

🇩🇪 167.94.146.74

🇺🇸 135.237.81.94

🇨🇳 118.212.123.76

🇨🇳 106.14.56.54

🇨🇦 104.28.161.119

🇺🇦 91.225.162.212

🇧🇬 91.191.209.98

🇷🇺 85.143.51.180

🇱🇹 81.30.98.142

🇺🇸 50.192.101.81

🇻🇪 45.190.85.8

🇸🇦 167.100.165.122

🇺🇸 135.237.127.82

🇲🇲 117.55.251.167

🇧🇩 103.150.234.120