JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 95.135.208.143

95.135.208.143 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 44%: ?

44%

ISP	Matteo Martelloni trading as DELUXHOST
Usage Type	Data Center/Web Hosting/Transit
ASN	AS214677
Hostname(s)	static.95.135.208.143.deluxhost.net
Domain Name	deluxhost.net
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 95.135.208.143

Whois 95.135.208.143

IP Abuse Reports for 95.135.208.143:

This IP address has been reported a total of 47 times from 17 distinct sources. 95.135.208.143 was first reported on May 12th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 inlink.ltd	2026-06-04 21:17:16 (2 weeks ago)	dot file probe	Web App Attack
Anonymous	2026-06-04 21:16:01 (2 weeks ago)	95.135.208.143 - - [04/Jun/2026:21:16:01 +0000] "GET /.env HTTP/1.1" 404 2972 "-" "Mozilla/5.0 (Code ... show more 95.135.208.143 - - [04/Jun/2026:21:16:01 +0000] "GET /.env HTTP/1.1" 404 2972 "-" "Mozilla/5.0 (Codex-dist-static-fanout)" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-06-01 14:28:13 (2 weeks ago)	Generic.Path.Traversal.Detection	Exploited Host
🇩🇪 SCHAPPY	2026-05-27 01:45:03 (3 weeks ago)	Brute-force attack to identify web exploits	Brute-Force Web App Attack
🇨🇭 SOC [GOLINE SA]	2026-05-19 19:09:35 (1 month ago)	FortiGate detected IPS attack from IPv4 address 95.135.208.143	Hacking
🇨🇭 SOC [GOLINE SA]	2026-05-18 18:08:15 (1 month ago)	FortiGate detected IPS attack from IPv4 address 95.135.208.143	Hacking
🇨🇭 SOC [GOLINE SA]	2026-05-17 17:08:01 (1 month ago)	FortiGate detected IPS attack from IPv4 address 95.135.208.143	Hacking
🇨🇭 SOC [GOLINE SA]	2026-05-16 17:07:12 (1 month ago)	FortiGate detected IPS attack from IPv4 address 95.135.208.143	Hacking
🇩🇪 Nightreaver	2026-05-15 22:08:51 (1 month ago)	95.135.208.143 - - [15/May/2026:23:54:21 0200] "GET /view?path=................Windowswin.ini HTTP/ ... show more 95.135.208.143 - - [15/May/2026:23:54:21 0200] "GET /view?path=................Windowswin.ini HTTP/1.1" 404 439 "-" "Mozilla/5.0 (compatible; CCBot/2.0; https://commoncrawl.org/faq/)" 95.135.208.143 - - [16/May/2026:00:08:51 0200] "GET /api/file?path=zzzz-not-found HTTP/1.1" 404 438 "-" "Mozilla/5.0 (compatible; CCBot/2.0; https://commoncrawl.org/faq/)" 95.135.208.143 - - [16/May/2026:00:08:51 0200] "GET /api/file?path=../../../../../../../../etc/passwd HTTP/1.1" 404 438 "-" "Mozilla/5.0 (compatible; CCBot/2.0; https://commoncrawl.org/faq/)" 95.135.208.143 - - [16/May/2026:00:08:51 0200] "GET /api/file?path=................Windowswin.ini HTTP/1.1" 404 438 "-" "Mozilla/5.0 (compatible; CCBot/2.0; https://commoncrawl.org/faq/)" 95.135.208.143 - - [16/May/2026:00:08:51 0200] "GET /view?path=zzzz-not-found HTTP/1.1" 404 438 "-" "Mozilla/5.0 (compatible; CCBot/2.0; https://commoncrawl.org/faq/)"[...] show less	Bad Web Bot Web App Attack
🇨🇭 Origon	2026-05-15 19:31:59 (1 month ago)	http-bad-user-agent - IP: 95.135.208.143 - time="2026-05-15T21:31:59+02:00" level=info msg="(555f66 ... show more http-bad-user-agent - IP: 95.135.208.143 - time="2026-05-15T21:31:59+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 95.135.208.143 (NL/214677) : 4h ban on Ip 95.135.208.143" module=db show less	Bad Web Bot
🇮🇹 alph44	2026-05-15 17:18:10 (1 month ago)	(mod_security) mod_security (id:949110) triggered by 95.135.208.143 (NL/The Netherlands/static.95.13 ... show more (mod_security) mod_security (id:949110) triggered by 95.135.208.143 (NL/The Netherlands/static.95.135.208.143.deluxhost.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: show less	Web App Attack
🇨🇭 SOC [GOLINE SA]	2026-05-15 17:06:17 (1 month ago)	FortiGate detected IPS attack from IPv4 address 95.135.208.143	Hacking
🇺🇸 TPI-Abuse	2026-05-15 16:29:19 (1 month ago)	(mod_security) mod_security (id:211190) triggered by 95.135.208.143 (static.95.135.208.143.deluxhost ... show more (mod_security) mod_security (id:211190) triggered by 95.135.208.143 (static.95.135.208.143.deluxhost.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 12:29:11.751839 2026] [security2:error] [pid 19638:tid 19638] [client 95.135.208.143:47682] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|smtp.whodatnation.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?file=../../../../../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "smtp.whodatnation.com"] [uri "/"] [unique_id "agdJ11Hb0HMr4_XOUH0xwgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 aranguren.org	2026-05-15 15:41:45 (1 month ago)	95.135.208.143 - - [16/May/2026:01:41:44 +1000] "GET /api/file?path=zzzz-not-found HTTP/2.0" 404 997 ... show more 95.135.208.143 - - [16/May/2026:01:41:44 +1000] "GET /api/file?path=zzzz-not-found HTTP/2.0" 404 997 "-" "Mozilla/5.0 (compatible; CCBot/2.0; +https://commoncrawl.org/faq/)" 95.135.208.143 - - [16/May/2026:01:41:44 +1000] "GET /api/file?path=../../../../../../../../etc/passwd HTTP/2.0" 404 997 "-" "Mozilla/5.0 (compatible; CCBot/2.0; +https://commoncrawl.org/faq/)" 95.135.208.143 - - [16/May/2026:01:41:44 +1000] "GET /api/file?path=..\\..\\..\\..\\..\\..\\..\\..\\Windows\\win.ini HTTP/2.0" 404 997 "-" "Mozilla/5.0 (compatible; CCBot/2.0; +https://commoncrawl.org/faq/)" 95.135.208.143 - - [16/May/2026:01:41:44 +1000] "GET /view?path=zzzz-not-found HTTP/2.0" 404 997 "-" "Mozilla/5.0 (compatible; CCBot/2.0; +https://commoncrawl.org/faq/)" 95.135.208.143 - - [16/May/2026:01:41:44 +1000] "GET /api/file?path=zzzz-not-found HTTP/1.1" 404 997 "-" "Mozilla/5.0 (compatible; CCBot/2.0; +https://commoncrawl.org/faq/)" 95.135.208.143 - - [16/May/2026:01:41:45 +1000] "GET /view?path=../../../../../. ... show less	Bad Web Bot
🇮🇩 Burayot	2026-05-15 15:26:06 (1 month ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 95.135.208.143 (static.95.135.208.1 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 95.135.208.143 (static.95.135.208.143.deluxhost.net): 2 in the last 3600 secs show less	Web App Attack

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 205.254.166.19

🇺🇦 188.163.177.222

🇨🇳 116.179.37.101

🇮🇩 103.24.212.42

🇺🇸 64.62.156.179

🇩🇪 43.131.23.154

🇨🇳 27.18.59.201

🇺🇸 20.163.34.46

🇺🇸 2a04:c300:400::1cf

🇲🇦 196.92.7.246

🇬🇧 185.195.232.144

🇻🇳 103.183.119.48

🇺🇸 91.230.168.8

🇧🇬 78.128.112.30

🇰🇷 218.156.93.202

🇹🇼 211.22.131.70

🇺🇸 209.126.4.130

🇷🇺 194.226.166.131

🇱🇾 154.127.69.25

🇨🇳 122.233.226.152