JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 95.111.247.160

95.111.247.160 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 19%: ?

19%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3295387.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 95.111.247.160

Whois 95.111.247.160

IP Abuse Reports for 95.111.247.160:

This IP address has been reported a total of 5 times from 4 distinct sources. 95.111.247.160 was first reported on May 29th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 paulshipley.com.au	2026-08-15 06:40:09 (2 weeks ago)	[Sat Aug 15 16:40:08.161124 2026] [security2:error] [pid 713721] [client 95.111.247.160:34624] [clie ... show more [Sat Aug 15 16:40:08.161124 2026] [security2:error] [pid 713721] [client 95.111.247.160:34624] [client 95.111.247.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dlcarterauthor.com"] [uri "/"] [unique_id "aoAJyIsTjB92QzrVN_cwkQAAAAc"] ... show less	Web App Attack
🇮🇩 David Koswari	2026-08-14 05:09:00 (2 weeks ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇵🇱 Budyn	2026-08-13 16:31:39 (3 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: www.what.are.you.looking.for.budyn.xyz \| URI: / \| UA: Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/3.6.9 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇨🇭 4server	2026-07-23 20:43:18 (1 month ago)	[ThuJul2322:43:14.9478952026][security2:error][pid265736:tid265774][client95.111.247.160:0]ModSecuri ... show more [ThuJul2322:43:14.9478952026][security2:error][pid265736:tid265774][client95.111.247.160:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.annunci-ticino.ch\"][uri\"/\"][unique_id\"amJ84n9W87Ewr43S4cunewAAARY\"]\,referer:https://mail.annunci-ticino.ch.81-17-25-250.cpanel.site show less	Hacking Web App Attack
🇩🇪 4server	2026-05-29 20:31:34 (3 months ago)	[FriMay2922:31:29.2417472026][security2:error][pid2715735:tid2715873][client95.111.247.160:0]ModSecu ... show more [FriMay2922:31:29.2417472026][security2:error][pid2715735:tid2715873][client95.111.247.160:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.fit-easy.com.136-243-54-122.cpanel.site\"][uri\"/\"][unique_id\"ahn3oVD4LD1kjPSp9CIa4AAAAMo\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 87.106.29.151

🇮🇩 202.154.19.50

🇧🇷 201.63.52.54

🇳🇱 185.136.15.12

🇰🇷 112.164.252.17

🇷🇺 109.194.106.69

🇲🇲 103.59.163.134

🇹🇼 101.13.5.88

🇺🇦 93.127.127.18

🇷🇺 92.255.190.69

🇺🇸 65.49.20.76

🇳🇱 45.148.10.151

🇺🇸 45.50.4.50

🇺🇸 34.220.131.131

🇦🇷 181.97.212.95

🇷🇺 178.159.52.208

🇨🇦 165.245.225.112

🇮🇩 160.19.146.117

🇷🇺 91.211.23.39

🇩🇪 88.76.115.21