JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.242.214.67

195.242.214.67 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 42%: ?

42%

ISP	M247 LTD Quebec Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Hostname(s)	no-rdns-yet.ohtele.com
Domain Name	m247.com
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.242.214.67

Whois 195.242.214.67

IP Abuse Reports for 195.242.214.67:

This IP address has been reported a total of 32 times from 27 distinct sources. 195.242.214.67 was first reported on May 4th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇱 spd.co.il	2026-10-15 21:02:19 (1 day ago)	Web application attack detected	Hacking Web App Attack
🇺🇸 dealpickeal	2026-10-05 13:50:07 (1 week ago)	Unauthorized authentication attempt against our Microsoft Entra ID tenant. Source IP: 195.242.214 ... show more Unauthorized authentication attempt against our Microsoft Entra ID tenant. Source IP: 195.242.214.67 Application: Azure Active Directory PowerShell Event time (UTC): 10/4/2026 0:29 Error code: 50053 Result: The account is locked, you've tried to sign in too many times with an incorrect user ID or password. Destination service: login.microsoftonline.com Destination port: TCP 443 Activity is consistent with automated password spraying, credential stuffing, or brute-force authentication attempts. show less	Brute-Force Hacking
Anonymous	2026-10-03 20:19:54 (1 week ago)	Credential Stuffing attacks against Microsoft 365	Brute-Force
🇮🇹 Progetto1	2026-10-02 09:10:02 (2 weeks ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 21:10:30 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 195.242.214.67 (no-rdns-yet.ohtele.com): 1 in t ... show more (mod_security) mod_security (id:210350) triggered by 195.242.214.67 (no-rdns-yet.ohtele.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 17:10:25.668228 2026] [security2:error] [pid 28897:tid 28897] [client 195.242.214.67:26022] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|davidnevue.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "davidnevue.com"] [uri "/"] [unique_id "arrXwXZOlD3NfYXzZ5FnhQAAAAo"], referer: https://findingjoyinthejourney-angie.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-09-21 07:12:20 (3 weeks ago)	[21/Sep/2026:10:12:20 +0300] -- 195.242.214.67 Ban reason: User-Agent python-requests	Bad Web Bot Web App Attack
🇺🇸 Cherryh4ck	2026-09-20 23:52:02 (3 weeks ago)	Blocked by UFW [25565/tcp] \| SPT: 63988 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/se ... show more Blocked by UFW [25565/tcp] \| SPT: 63988 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-09-15 19:07:02 (1 month ago)	WEB attack	Brute-Force
🇺🇸 鬼影233	2026-09-14 12:33:16 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-12 10:54:06 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇲🇽 octageeks.com	2026-09-10 04:11:14 (1 month ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 Cherryh4ck	2026-09-08 18:07:38 (1 month ago)	Blocked by UFW [25565/tcp] \| SPT: 36648 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/se ... show more Blocked by UFW [25565/tcp] \| SPT: 36648 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇪🇸 el-brujo	2026-08-27 17:46:07 (1 month ago)	HTTP DDoS Attack Layer 7	DDoS Attack
🇺🇸 Cherryh4ck	2026-08-15 19:42:38 (2 months ago)	Blocked by UFW [25565/tcp] \| SPT: 59172 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/se ... show more Blocked by UFW [25565/tcp] \| SPT: 59172 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 kosada.com	2026-08-15 05:46:44 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 220.130.7.191

🇺🇸 147.185.132.115

🇬🇧 209.97.131.74

🇮🇹 128.116.205.208

🇰🇷 115.71.239.49

🇮🇳 103.227.94.204

🇬🇧 46.101.84.163

🇬🇧 209.97.139.118

🇩🇪 167.94.146.59

🇸🇬 137.132.211.22

🇳🇱 87.192.41.180

🇱🇹 77.90.185.20

🇳🇱 77.83.39.21

🇬🇧 64.227.34.121

🇸🇬 47.245.88.8

🇩🇪 34.179.199.54

🇺🇸 23.247.136.239

🇰🇷 211.106.133.202

🇩🇿 197.140.9.196

🇻🇳 171.237.176.209