JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.19.211.95

37.19.211.95 was found in our database!

This IP was reported 386 times. Confidence of Abuse is 0%: ?

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-37-19-211-95.datapacket.com
Domain Name	datacamp.co.uk
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 37.19.211.95

Whois 37.19.211.95

IP Abuse Reports for 37.19.211.95:

This IP address has been reported a total of 386 times from 100 distinct sources. 37.19.211.95 was first reported on October 25th 2021, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 1gz	2026-07-15 03:55:33 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: CHALLENGE Protocol: HTTP/2 (GET met ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: /script.js UA: Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/150.0.7871.51 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 bitblockit	2026-05-28 14:10:39 (3 months ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. D ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. Decoy listen port: 5900/tcp (VNC service emulation). Observed event time: 2026-05-28 14:10:39 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 bitblockit	2026-05-28 14:09:37 (3 months ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy listen port: 5900/tcp (VNC service emulation). Observed event time: 2026-05-28 14:09:37 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-13 21:23:00 (3 months ago)	(mod_security) mod_security (id:240000) triggered by 37.19.211.95 (unn-37-19-211-95.datapacket.com): ... show more (mod_security) mod_security (id:240000) triggered by 37.19.211.95 (unn-37-19-211-95.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 17:22:53.548240 2026] [security2:error] [pid 28848:tid 28848] [client 37.19.211.95:56202] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|hartflicker.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "hartflicker.com"] [uri "/images/stories/themes.php"] [unique_id "agTrracZmSurdGqTD7FBewAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-12 02:07:05 (3 months ago)	(mod_security) mod_security (id:240000) triggered by 37.19.211.95 (unn-37-19-211-95.datapacket.com): ... show more (mod_security) mod_security (id:240000) triggered by 37.19.211.95 (unn-37-19-211-95.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 22:06:59.939123 2026] [security2:error] [pid 24440:tid 24440] [client 37.19.211.95:37230] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "87"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|adm-sal.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "adm-sal.com"] [uri "/images/stories/themes.php"] [unique_id "agKLQ-idnz9VQCgaHOrpAQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-05-12 02:03:33 (3 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 37.19.211.95 (CA/Canada/unn-37-19-211 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 37.19.211.95 (CA/Canada/unn-37-19-211-95.datapacket.com): 2 in the last 3600 secs (0-196) show less	Hacking
🇮🇹 VHosting	2026-04-26 10:35:04 (4 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇨🇳 pengpeng	2026-03-19 09:21:50 (5 months ago)	monitor: on VM-0-7-ubuntu \| port: 28522 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 28522 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-02-20 21:17:04 (6 months ago)	37.19.211.95 - - [20/Feb/2026:22:17:04 +0100] "GET https://www/product/zoomad-moonstruck-480g/ HTTP/ ... show more 37.19.211.95 - - [20/Feb/2026:22:17:04 +0100] "GET https://www/product/zoomad-moonstruck-480g/ HTTP/1.1" 404 44181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" show less	Hacking
Anonymous	2026-02-13 02:55:19 (6 months ago)	botnet	DDoS Attack
🇺🇸 COMPLEX	2025-12-21 01:15:28 (8 months ago)	Unsolicited TCP traffic \| Action: DROP \| Port 5902	Brute-Force
🇺🇸 octageeks.com	2025-12-09 05:06:25 (8 months ago)	Wordpress malicious attack:[octascan]	Web App Attack
🇩🇪 paissangroup	2025-12-08 02:38:49 (8 months ago)	Multiple WAF Violations	Web App Attack
Anonymous	2025-12-07 23:40:13 (8 months ago)	wordpress-trap	Web App Attack
🇳🇿 Antinson	2025-12-07 11:55:45 (8 months ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot

Showing 1 to 15 of 386 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.30

🇺🇸 184.105.139.69

🇲🇽 46.250.170.82

🇲🇽 200.68.182.117

🇩🇪 194.88.98.90

🇦🇷 181.117.136.152

🇺🇸 172.180.64.97

🇺🇸 172.120.57.19

🇳🇱 142.93.129.28

🇺🇸 135.233.112.109

🇧🇬 79.124.59.106

🇨🇳 49.64.136.28

🇸🇬 47.82.158.18

🇸🇳 41.214.10.178

🇺🇸 34.55.212.98

🇺🇸 34.10.139.186

🇺🇸 20.83.179.146

🇬🇧 217.146.80.100

🇺🇸 185.61.223.33

🇺🇸 184.105.247.242