JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 95.87.75.252

95.87.75.252 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 29%: ?

29%

ISP	CJSC SAIMA TELECOM
Usage Type	Fixed Line ISP
ASN	AS29061
Hostname(s)	95-87-75-252.saimanet.kg
Domain Name	saimatelecom.kg
Country	🇰🇬 Kyrgyzstan
City	Bishkek, Bishkek

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 95.87.75.252

Whois 95.87.75.252

IP Abuse Reports for 95.87.75.252:

This IP address has been reported a total of 28 times from 19 distinct sources. 95.87.75.252 was first reported on January 18th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 pltcldvlpr	2026-06-08 01:58:09 (1 week ago)	Bogus Useragent: 95.87.75.252 - - [08/Jun/2026:03:58:08 +0200] "GET /protocol?id=hb_15_75&offset=140 ... show more Bogus Useragent: 95.87.75.252 - - [08/Jun/2026:03:58:08 +0200] "GET /protocol?id=hb_15_75&offset=1400&seq=1373 HTTP/1.1" 403 5 "-" "Opera/9.31.(Windows NT 5.2; kl-GL) Presto/2.9.171 Version/11.00" asn=29061 org="Saimanet Telecomunications CJSC" country=KG ... show less	Bad Web Bot
🇩🇪 ghostwarriors	2026-06-06 02:20:38 (1 week ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇳🇱 soverin	2026-06-05 15:01:26 (1 week ago)	spam	Email Spam
🇳🇴 cyruz	2026-05-18 07:45:12 (4 weeks ago)	Tries for open relay	Hacking Brute-Force
🇬🇧 PeravixGroup	2026-05-11 08:02:27 (1 month ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇺🇸 TPI-Abuse	2026-04-21 09:50:15 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 95.87.75.252 (95-87-75-252.saimanet.kg): 1 in t ... show more (mod_security) mod_security (id:210730) triggered by 95.87.75.252 (95-87-75-252.saimanet.kg): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 05:50:07.941667 2026] [security2:error] [pid 223197:tid 223197] [client 95.87.75.252:2209] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|justinrudd.com\|F\|2"] [data ".bonpetsupply.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "justinrudd.com"] [uri "/www.bonpetsupply.com"] [unique_id "aedIT1AHuOurMOvafoIs-wAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-04-11 00:06:52 (2 months ago)	block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803	Bad Web Bot
🇺🇸 stechusa	2026-03-22 18:25:26 (2 months ago)	[Askari] 322 IPs targeting /brand.html \| URL template shared by 8 IPs: /brand.html?bulb_base_type=& ... show more [Askari] 322 IPs targeting /brand.html \| URL template shared by 8 IPs: /brand.html?bulb_base_type=&bulb_shape=&bulb_type=&mode=list&p=* \| Facet request during elevated threat (facet_ratio=0.95, unique_ips=593) \| Signals: facet_param_template, concurrent_facet_load, path_concentration, outdated_user_agent, recv_q_stall show less	Web App Attack Hacking Web Spam
🇺🇸 stechusa	2026-03-22 18:25:26 (2 months ago)	322 IPs targeting /brand.html \| URL template shared by 8 IPs: /brand.html?bulb_base_type=&bulb_shap ... show more 322 IPs targeting /brand.html \| URL template shared by 8 IPs: /brand.html?bulb_base_type=&bulb_shape=&bulb_type=&mode=list&p=* \| Facet request during elevated threat (facet_ratio=0.95, unique_ips=593) show less	Web App Attack Hacking Web Spam
🇺🇸 kosada.com	2026-02-03 16:23:35 (4 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇫🇷 vtchost.com	2026-01-19 07:54:36 (4 months ago)	HTTP honeypot triggered - ignoring robots.txt \\| potential virus infected client or botnet ...	Bad Web Bot Exploited Host
🇮🇹 VHosting	2025-12-23 12:20:20 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇯🇵 Short-legs-Spider	2025-12-20 10:50:13 (5 months ago)	Disregard of robots.txt -- [20/Dec/2025:19:50:13 +0900] "GET /==9.htm HTTP/1.1" 403 77 "https://== ... show more Disregard of robots.txt -- [20/Dec/2025:19:50:13 +0900] "GET /==9.htm HTTP/1.1" 403 77 "https://==.jp/" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" show less	Bad Web Bot
Anonymous	2025-12-13 17:16:12 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.13 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.13 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (6 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 156.245.144.121

🇦🇪 217.138.193.183

🇨🇴 181.128.145.100

🇰🇷 112.216.129.27

🇨🇳 106.75.77.231

🇮🇳 103.178.253.58

🇸🇬 98.159.40.8

🇺🇸 35.243.155.59

🇨🇴 200.118.80.203

🇻🇪 190.203.43.178

🇧🇷 190.102.54.51

🇺🇸 151.240.47.96

🇩🇪 139.19.117.197

🇹🇭 125.26.229.161

🇯🇲 72.252.198.155

🇸🇦 50.60.82.220

🇩🇪 47.245.135.78

🇺🇸 34.125.145.84

🇸🇬 34.124.146.53

🇨🇳 27.115.113.138