JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 95.70.128.142

95.70.128.142 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 56%: ?

56%

ISP	Turknet-Broadband
Usage Type	Fixed Line ISP
ASN	AS12735
Hostname(s)	142.128.70.95.dsl.dynamic.turk.net
Domain Name	turknet.net.tr
Country	🇹🇷 Turkey
City	Istanbul, Istanbul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 95.70.128.142

Whois 95.70.128.142

IP Abuse Reports for 95.70.128.142:

This IP address has been reported a total of 13 times from 11 distinct sources. 95.70.128.142 was first reported on April 15th 2021, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-09 01:52:47 (6 hours ago)	(mod_security) mod_security (id:225170) triggered by 95.70.128.142 (142.128.70.95.dsl.dynamic.turk.n ... show more (mod_security) mod_security (id:225170) triggered by 95.70.128.142 (142.128.70.95.dsl.dynamic.turk.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 21:52:41.004415 2026] [security2:error] [pid 3941:tid 3941] [client 95.70.128.142:22512] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|thebrotherhoodlounge.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thebrotherhoodlounge.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aidx6UXQj35Nh06cPZ1KBQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 inlink.ltd	2026-06-09 00:41:45 (8 hours ago)	Known malicious PHP file or CMS probe	Web App Attack
🇦🇺 AWW-Admin	2026-06-08 22:42:46 (10 hours ago)	(wordpress) Failed wordpress login from 95.70.128.142 (TR/Türkiye/142.128.70.95.dsl.dynamic.turk.net ... show more (wordpress) Failed wordpress login from 95.70.128.142 (TR/Türkiye/142.128.70.95.dsl.dynamic.turk.net) show less	Brute-Force
🇳🇱 oisecnet	2026-06-06 21:01:32 (2 days ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-06-06. 1 requests from this I ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-06-06. 1 requests from this IP. show less	Brute-Force Web App Attack SSH
🇺🇸 TPI-Abuse	2026-06-05 21:47:25 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 95.70.128.142 (142.128.70.95.dsl.dynamic.turk.n ... show more (mod_security) mod_security (id:225170) triggered by 95.70.128.142 (142.128.70.95.dsl.dynamic.turk.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 17:47:22.081343 2026] [security2:error] [pid 17681:tid 17681] [client 95.70.128.142:22463] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|encuentraunbuenabogado.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "encuentraunbuenabogado.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiND6nOeaZe7MhPZgho0WQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 stinpriza	2026-06-05 21:14:33 (3 days ago)	Web App Attack	Web App Attack
🇩🇪 4server	2026-06-05 18:08:43 (3 days ago)	[FriJun0520:08:39.1175992026][security2:error][pid1105359:tid1105438][client95.70.128.142:0]ModSecur ... show more [FriJun0520:08:39.1175992026][security2:error][pid1105359:tid1105438][client95.70.128.142:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"chryptofarm.ch\"][uri\"/xmlrpc.php\"][unique_id\"aiMQp5GaWsInajqcIyZwFgAAAI4\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-06-04 18:22:11 (4 days ago)	Attac	Brute-Force
🇺🇸 TPI-Abuse	2026-06-03 16:36:57 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 95.70.128.142 (142.128.70.95.dsl.dynamic.turk.n ... show more (mod_security) mod_security (id:225170) triggered by 95.70.128.142 (142.128.70.95.dsl.dynamic.turk.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 12:36:54.920680 2026] [security2:error] [pid 23077:tid 23077] [client 95.70.128.142:22299] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|n4fh.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "n4fh.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiBYJgc84Dphgp8I3KtTAQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-03 14:37:06 (5 days ago)	95.70.128.142 - - [03/Jun/2026:22:37:05 +0800] "POST /xmlrpc.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 ( ... show more 95.70.128.142 - - [03/Jun/2026:22:37:05 +0800] "POST /xmlrpc.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/13.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 WellSpring	2026-06-02 22:23:58 (6 days ago)	xmlrpc exploit on 219.today/xmlrpc.php — WellSpr.ing/NetSentinel civic-AI security layer	Brute-Force Web App Attack
🇫🇷 ELYAZ	2026-06-01 16:37:45 (1 week ago)	(wordpress) Failed wordpress login from 95.70.128.142 (TR/Türkiye/142.128.70.95.dsl.dynamic.turk.net ... show more (wordpress) Failed wordpress login from 95.70.128.142 (TR/Türkiye/142.128.70.95.dsl.dynamic.turk.net): (CF_ENABLE) show less	Brute-Force
🇳🇱 computerdoc	2021-04-15 14:05:34 (5 years ago)	xmlrpc attack	DDoS Attack Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 57.141.20.49

🇺🇸 2607:f8b0:4023:1004::126

🇭🇰 199.45.155.85

🇬🇧 178.62.20.121

🇻🇳 103.98.152.152

🇱🇹 81.30.98.44

🇪🇸 79.154.141.114

🇺🇸 65.49.1.204

🇺🇸 64.94.153.12

🇨🇦 51.222.168.126

🇺🇸 35.231.253.210

🇵🇱 34.116.245.86

🇸🇬 34.21.155.54

🇦🇺 3.25.109.17

🇧🇪 198.235.24.227

🇨🇳 153.37.252.33

🇨🇳 117.50.44.85

🇱🇦 103.114.147.217

🇫🇷 85.217.140.40

🇺🇸 66.132.195.99