JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 95.133.167.169

95.133.167.169 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 77%: ?

77%

ISP	FlokiNET ehf
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200651
Domain Name	flokinet.is
Country	🇷🇴 Romania
City	Bucharest, Bucharest

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 95.133.167.169

Whois 95.133.167.169

IP Abuse Reports for 95.133.167.169:

This IP address has been reported a total of 23 times from 15 distinct sources. 95.133.167.169 was first reported on October 16th 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇾 Rizzy	2026-10-22 23:39:44 (14 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇧🇪 sid3windr	2026-10-22 22:32:10 (16 hours ago)	GET /.env (Tarpitted for 2m10s, wasted 7.73kB)	Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 22:28:13 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 95.133.167.169 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 95.133.167.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 18:28:10.039712 2026] [security2:error] [pid 16115:tid 16115] [client 95.133.167.169:56378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.71"] [uri "/.env"] [unique_id "atqN-t8en0zAJMpESd-mMAAAACw"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇭 Kriengkrai Chaimin	2026-10-22 22:18:10 (16 hours ago)	95.133.167.169 - - [23/Oct/2026:05:18:09 +0700] "GET /db.sqlite3 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (W ... show more 95.133.167.169 - - [23/Oct/2026:05:18:09 +0700] "GET /db.sqlite3 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" "-" ... show less	Bad Web Bot Web App Attack
🇹🇭 Kriengkrai Chaimin	2026-10-21 17:26:09 (1 day ago)	95.133.167.169 - - [22/Oct/2026:00:26:08 +0700] "GET /db.sqlite3 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (W ... show more 95.133.167.169 - - [22/Oct/2026:00:26:08 +0700] "GET /db.sqlite3 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" "-" ... show less	Bad Web Bot Web App Attack
🇷🇴 gtheo99	2026-10-21 04:38:07 (2 days ago)	(CT) IP 95.133.167.169 (RO/Romania/-) found to have 108 connections	Port Scan
🇺🇸 TPI-Abuse	2026-10-20 20:25:48 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 95.133.167.169 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 95.133.167.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 16:25:43.497491 2026] [security2:error] [pid 31711:tid 31711] [client 95.133.167.169:49300] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|192.64.150.229:443\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "192.64.150.229"] [uri "/.config/gcloud/access_tokens.db"] [unique_id "atfOR8kYqhMHFtwc4Eix6wAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 sid3windr	2026-10-20 20:16:18 (2 days ago)	GET /.env (Tarpitted for 2m10s, wasted 7.73kB)	Web App Attack
🇲🇾 Rizzy	2026-10-20 19:42:44 (2 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇫🇮 Erpelstolz	2026-10-20 19:21:17 (2 days ago)	external host: 95.133.167.169 - - [20/Oct/2026:21:21:16 +0200] "GET /login/ HTTP/1.1" 200 5907 "-" " ... show more external host: 95.133.167.169 - - [20/Oct/2026:21:21:16 +0200] "GET /login/ HTTP/1.1" 200 5907 "-" "Go-http-client/1.1" CF-Ray:- CF-IP:- show less	Web App Attack
🇩🇪 Michel Wijnberg	2026-10-20 19:17:59 (2 days ago)	95.133.167.169 - - [20/Oct/2026:19:17:57 +0000] "GET /db.sqlite3 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (W ... show more 95.133.167.169 - - [20/Oct/2026:19:17:57 +0000] "GET /db.sqlite3 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-10-20 14:17:57 (3 days ago)	[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 95. ... show more [ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 95.133.167.169 - - \[20/Oct/2026:16:17:39 +0200\] "GET /db.sqlite3 HTTP/1.1" 404 438 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/122.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇫🇷 EvoX	2026-10-20 13:04:42 (3 days ago)	🛡️ Honeypot [bsts-tpot-sensor]: Incoming HTTP request (dst port 81/tcp, src port 34856) against a pa ... show more 🛡️ Honeypot [bsts-tpot-sensor]: Incoming HTTP request (dst port 81/tcp, src port 34856) against a passive decoy web service with no legitimate content. Consistent with automated web scanning/exploitation attempts. show less	Hacking Bad Web Bot
🇺🇸 HCF	2026-10-19 17:21:00 (3 days ago)	Spring.Boot.Actuator.Unauthorized.Access	Web App Attack Hacking
🇺🇸 CBJ	2026-10-18 20:30:37 (4 days ago)	fail2ban: apache-filepath-recon ...	Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2400:cb00:1036:1000:42ce:e2df:b66d:70df

🇺🇸 216.25.89.78

🇺🇸 192.253.209.57

🇻🇳 116.118.6.157

🇮🇪 20.234.122.187

🇨🇳 14.103.107.214

🇳🇱 195.178.110.108

🇨🇳 116.179.32.75

🇩🇪 109.160.32.45

🇻🇳 103.249.201.41

🇬🇭 102.223.92.101

🇺🇿 94.158.60.72

🇳🇱 93.152.219.115

🇺🇦 79.143.45.75

🇧🇬 78.128.113.74

🇺🇸 66.132.186.253

🇺🇸 66.132.186.217

🇺🇸 40.124.84.87

🇺🇸 40.90.233.136

🇵🇰 2400:adc7:4110:fc00:5013:4f2d:a007:96c1