JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 95.91.242.173

95.91.242.173 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 16%: ?

16%

ISP	Vodafone GmbH
Usage Type	Fixed Line ISP
ASN	AS3209
Hostname(s)	ip5f5bf2ad.dynamic.kabel-deutschland.de
Domain Name	vodafone.de
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 95.91.242.173

Whois 95.91.242.173

IP Abuse Reports for 95.91.242.173:

This IP address has been reported a total of 5 times from 5 distinct sources. 95.91.242.173 was first reported on March 25th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 holos.pt	2026-07-14 13:20:04 (1 week ago)	Blocked for Exceeded the maximum number of login failures which is: 10. The last username they tried ... show more Blocked for Exceeded the maximum number of login failures which is: 10. The last username they tried to sign in with was: 'matigan' in query string: N show less	Web App Attack
Anonymous	2026-06-28 23:56:43 (3 weeks ago)	Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (E ... show more Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Aggressive search filter manipulation / web scraper probe on port 443 \| URI: Heavy query parameter abuse: /brands/kramer/extenders.html?dir=asc&limit=40&mode=grid&order=order_view \| UA: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇩🇪 botreporter	2026-06-27 03:43:56 (3 weeks ago)	botnet ignoring robots.txt	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-05 08:47:46 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 95.91.242.173 (ip5f5bf2ad.dynamic.kabel-deutsch ... show more (mod_security) mod_security (id:240335) triggered by 95.91.242.173 (ip5f5bf2ad.dynamic.kabel-deutschland.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 04:47:40.757247 2026] [security2:error] [pid 2955:tid 2955] [client 95.91.242.173:64274] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 95.91.242.173 (+1 hits since last alert)\|dandksupply.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dandksupply.com"] [uri "/xmlrpc.php"] [unique_id "afmurGtIuQJ0BMS6KaxQMAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 maxxsense	2026-03-25 15:49:55 (3 months ago)	95.91.242.173 (DE/Germany/ip5f5bf2ad.dynamic.kabel-deutschland.de), 12 distributed imapd attacks on ... show more 95.91.242.173 (DE/Germany/ip5f5bf2ad.dynamic.kabel-deutschland.de), 12 distributed imapd attacks on account [redacted] show less	Brute-Force

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.56.160.82

🇩🇪 167.94.145.17

🇩🇪 78.46.205.141

🇬🇧 51.195.183.247

🇹🇷 2a09:bac5:58b9:2682::3d6:56

🇺🇸 207.90.244.3

🇹🇷 195.175.92.206

🇵🇪 179.6.42.48

🇵🇰 161.248.202.88

🇳🇱 159.65.206.235

🇺🇸 154.29.14.31

🇭🇰 152.32.190.84

🇫🇷 103.110.161.40

🇸🇬 103.13.207.88

🇫🇷 91.231.89.54

🇳🇴 87.120.104.75

🇮🇹 82.57.144.109

🇱🇹 77.90.185.203

🇿🇼 66.9.173.158

🇺🇸 49.51.195.195