JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.242.214.6

195.242.214.6 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 37%: ?

37%

ISP	M247 LTD Quebec Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Hostname(s)	web8.openhosts.com
Domain Name	m247.com
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.242.214.6

Whois 195.242.214.6

IP Abuse Reports for 195.242.214.6:

This IP address has been reported a total of 20 times from 14 distinct sources. 195.242.214.6 was first reported on May 5th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 WellSpring	2026-10-15 13:16:41 (1 day ago)	xmlrpc exploit on wellspr.ing/xmlrpc.php — WellSpr.ing/NetSentinel civic-AI security layer	Brute-Force Web App Attack
🇲🇽 octageeks.com	2026-10-04 04:25:10 (1 week ago)	Wordpress malicious attack:[octawp]	Web App Attack
🇺🇸 TPI-Abuse	2026-10-04 04:05:35 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 195.242.214.6 (web8.openhosts.com): 1 in the la ... show more (mod_security) mod_security (id:210350) triggered by 195.242.214.6 (web8.openhosts.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 00:05:29.448722 2026] [security2:error] [pid 11943:tid 11943] [client 195.242.214.6:11599] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|partybussantafe.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "partybussantafe.com"] [uri "/"] [unique_id "asHQiWIUKyglvKR0o_f4egAAAAM"], referer: https://backlinkbuilding.shop/dir/expert-link-building-services-158653 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-29 19:00:11 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 195.242.214.6 (web8.openhosts.com): 1 in the la ... show more (mod_security) mod_security (id:210350) triggered by 195.242.214.6 (web8.openhosts.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 15:00:02.216042 2026] [security2:error] [pid 16286:tid 16286] [client 195.242.214.6:38058] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|ciptaconindotara.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ciptaconindotara.com"] [uri "/"] [unique_id "arwKshCXX96nkkuMos7aCwAAAAQ"], referer: https://bulkbacklinkschecker.website/dir/expert-link-building-services-40053 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-24 22:06:00 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 195.242.214.6 (web8.openhosts.com): 1 in the la ... show more (mod_security) mod_security (id:210350) triggered by 195.242.214.6 (web8.openhosts.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 18:05:51.757399 2026] [security2:error] [pid 23258:tid 23258] [client 195.242.214.6:36818] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|peterlundman.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "peterlundman.com"] [uri "/"] [unique_id "arWev6kN9UaDzKObb86IvQAAABY"], referer: https://dapaseochecker.online/dir/ranking-boost-backlinks-161037 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-22 02:53:25 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇮🇹 A000Z	2026-09-22 01:24:39 (3 weeks ago)	Fail2Ban: 195.242.214.6 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 195.242.214.6 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 maxpower	2026-09-17 08:36:30 (4 weeks ago)	(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 195.242.214.6 (CA/Canada/web8.openhosts.com): ... show more (wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 195.242.214.6 (CA/Canada/web8.openhosts.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 195.242.214.6 - - [17/Sep/2026:10:36:23 +0200] "GET /wp-json/wp/v2/users?_fields=slug&per_page=100&page=1 HTTP/2.0" 200 40 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" "-" host=archabi.it show less	Port Scan
🇫🇷 Tilellit.PRO	2026-09-14 02:23:44 (1 month ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-09-02 16:07:55 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 SX Communications	2026-08-31 22:21:29 (1 month ago)	HTTP application-layer DoS / botnet traffic from 195.242.214.6: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 195.242.214.6: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 masterguru	2026-08-24 19:40:57 (1 month ago)	XSS Attack Detected via libinjection. detected XSS using libinjection. (941100-169)	Hacking
🇺🇸 Axel	2026-08-09 07:20:11 (2 months ago)	Blocked by UFW on MVI [23/tcp] \| SPT: 47019 \| TTL: 52 \| LEN: 60 \| TOS: 0x00 • Reported by: github.co ... show more Blocked by UFW on MVI [23/tcp] \| SPT: 47019 \| TTL: 52 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
🇨🇭 backslash	2026-07-30 11:42:05 (2 months ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇬🇧 Oakley	2026-07-28 04:31:34 (2 months ago)	(confirmed_bot_sig) Confirmed bot	Hacking

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 220.130.7.191

🇺🇸 147.185.132.115

🇬🇧 209.97.131.74

🇮🇹 128.116.205.208

🇰🇷 115.71.239.49

🇮🇳 103.227.94.204

🇬🇧 46.101.84.163

🇬🇧 209.97.139.118

🇩🇪 167.94.146.59

🇸🇬 137.132.211.22

🇳🇱 87.192.41.180

🇱🇹 77.90.185.20

🇳🇱 77.83.39.21

🇬🇧 64.227.34.121

🇸🇬 47.245.88.8

🇩🇪 34.179.199.54

🇺🇸 23.247.136.239

🇰🇷 211.106.133.202

🇩🇿 197.140.9.196

🇻🇳 171.237.176.209