JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 95.173.216.11

95.173.216.11 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 100%: ?

100%

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS60068
Hostname(s)	unn-95-173-216-11.datapacket.com
Domain Name	datacamp.co.uk
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 95.173.216.11

Whois 95.173.216.11

IP Abuse Reports for 95.173.216.11:

This IP address has been reported a total of 41 times from 32 distinct sources. 95.173.216.11 was first reported on June 4th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇱 router.al	2026-06-30 06:23:58 (11 hours ago)	06/30/2026-06:23:58.171289 95.173.216.11 Protocol: 6 ET WEB_SERVER WEB-PHP phpinfo access	Port Scan
Anonymous	2026-06-30 06:10:03 (11 hours ago)	Bot / scanning and/or hacking attempts: GET / HTTP/1.1, GET /.env HTTP/1.1, GET /_profiler/phpinfo H ... show more Bot / scanning and/or hacking attempts: GET / HTTP/1.1, GET /.env HTTP/1.1, GET /_profiler/phpinfo HTTP/1.1, GET /test.php HTTP/1.1, GET /mysql.sql HTTP/1.1, GET /db_backup.sql HTTP/1.1, GET /data/dump.sql HTTP/1.1, GET /db.sql HTTP/1.1, GET /database.sql HTTP/1.1, GET /dump.sql HTTP/1.1, GET /phpinfo.php HTTP/1.1 show less	Hacking Web App Attack
🇬🇧 Apache	2026-06-30 03:27:46 (14 hours ago)	(mod_security) mod_security (id:210730) triggered by 95.173.216.11 (US/United States/unn-95-173-216- ... show more (mod_security) mod_security (id:210730) triggered by 95.173.216.11 (US/United States/unn-95-173-216-11.datapacket.com): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 03:08:00 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 95.173.216.11 (unn-95-173-216-11.datapacket.com ... show more (mod_security) mod_security (id:210492) triggered by 95.173.216.11 (unn-95-173-216-11.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 23:07:54.430033 2026] [security2:error] [pid 20167:tid 20167] [client 95.173.216.11:63108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "noreservationslocations.com"] [uri "/.env"] [unique_id "akMzCtuc2LloNfC45m9EAgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ruusvuu	2026-06-30 01:28:53 (16 hours ago)	Automated abuse report: 15 attack/probe requests from Datacamp Limited / US. Targeted paths: /phpinf ... show more Automated abuse report: 15 attack/probe requests from Datacamp Limited / US. Targeted paths: /phpinfo.php, /test.php, /_profiler/phpinfo, /.env, /dump.sql. Sample log lines: [mir-com] [6/29/2026, 6:28:49 PM] GET .mirregistry.com/data/dump.sql 404 95.173.216.11 - 1.008 ms [mir-org] [6/29/2026, 6:28:49 PM] GET .mirregistry.org/data/dump.sql 404 95.173.216.11 - 1.000 ms [mir-com] [6/29/2026, 6:28:53 PM] GET .mirregistry.com/db_backup.sql 404 95.173.216.11 - 0.964 ms Detected by an automated web-server log monitor. show less	Web App Attack
🇧🇷 Halux	2026-06-30 01:26:42 (16 hours ago)	95.173.216.11 Probing protected path or service	Web App Attack
🇩🇪 robinwolff	2026-06-30 01:25:30 (16 hours ago)		Web App Attack Hacking
🇺🇸 Matthew Ping	2026-06-30 00:30:01 (17 hours ago)	ModSecurity rule 949110 triggered on d865. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
Anonymous	2026-06-29 22:07:38 (19 hours ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/appsec-vpatch; Action=ban; Events=2; Co ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/appsec-vpatch; Action=ban; Events=2; Country=US; ASN=60068 Datacamp Limited show less	Hacking
🇩🇪 dbmwebdesign	2026-06-29 21:25:41 (20 hours ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
Anonymous	2026-06-29 21:06:24 (20 hours ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-sensitive-files; Action=ban; Event ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-sensitive-files; Action=ban; Events=6; Hosts=my.vmho.st; Paths=/backup.sql,/config/db.sql,/database.sql,/db.sql,/dump.sql; Country=US; ASN=60068 Datacamp Limited show less	Hacking Web App Attack
🇦🇺 Terrier	2026-06-29 21:00:02 (20 hours ago)	Blocked for HTTP vulnerability scanning (excessive 40x)	Web App Attack
🇮🇩 soc-yk	2026-06-29 20:42:11 (21 hours ago)	Type: suspicious_network_activity Risk: 91 Events: 54 Evidence: - Persistent suspicious network act ... show more Type: suspicious_network_activity Risk: 91 Events: 54 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified show less	Port Scan Hacking
🇫🇷 Guardian	2026-06-29 20:38:45 (21 hours ago)	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x10), Unauthorized attempt to ret ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x10), Unauthorized attempt to retrieve configuration file 95.173.216.11 [29/Jun/2026:20:38:28] "GET /frontend/js/proton.plugins.bundle.js HTTP/1.1" 95.173.216.11 [29/Jun/2026:20:38:29] "GET /frontend/metronic/js/scripts.bundle.js HTTP/1.1" 95.173.216.11 [29/Jun/2026:20:38:31] "GET /frontend/js/config.js HTTP/1.1" 95.173.216.11 [29/Jun/2026:20:38:32] "GET /frontend/metronic/plugins/global/plugins.bundle.js HTTP/1.1" 95.173.216.11 [29/Jun/2026:20:38:35] "GET /frontend/js/proton.core.bundle.js HTTP/1.1" 95.173.216.11 [29/Jun/2026:20:38:37] "GET /frontend/metronic/plugins/custom/prismjs/prismjs.bundle.js HTTP/1.1" 95.173.216.11 [29/Jun/2026:20:38:27] "GET / HTTP/1.1" 95.173.216.11 [29/Jun/2026:20:38:39] "GET /phpinfo.php HTTP/1.1" 95.173.216.11 [29/Jun/2026:20:38:41] "GET /test.php HTTP/1.1" 95.173.216.11 [29/Jun/2026:20:38:43] "GET /_profiler/phpinfo HTTP/1.1" 95.173.216.11 [29/Jun/2026:20:38:44] "GET /.env HTTP/1.1" show less	Port Scan Web App Attack
🇳🇱 vaddilyin	2026-06-29 20:34:52 (21 hours ago)	{"ClientAddr":"95.173.216.11:55907","ClientHost":"95.173.216.11","ClientPort":"55907","ClientUsernam ... show more {"ClientAddr":"95.173.216.11:55907","ClientHost":"95.173.216.11","ClientPort":"55907","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":46465,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":46465,"RequestAddr":"noco.vdkln.com","RequestContentSize":0,"RequestCount":315760,"RequestHost":"noco.vdkln.com","RequestMethod":"GET","RequestPath":"/phpinfo.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"StartLocal":"2026-06-29T20:34:46.881752908Z","StartUTC":"2026-06-29T20:34:46.881752908Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-06-29T20:34:46Z"} {"ClientAddr":"95.173.216.11:57075","ClientHost":"95.173.216.11","ClientPort":"57075","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":44197,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":441 ... show less	Web App Attack

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 207.154.197.113

🇹🇭 202.29.225.206

🇦🇱 79.106.123.51

🇺🇸 64.62.156.209

🇦🇺 43.229.61.53

🇨🇳 171.217.92.33

🇻🇳 113.176.87.118

🇺🇸 100.50.17.159

🇸🇪 83.233.149.204

🇱🇹 81.30.98.49

🇨🇳 58.247.139.134

🇻🇳 45.119.81.245

🇬🇧 35.203.211.196

🇨🇳 1.83.223.227

🇨🇳 218.92.251.198

🇧🇷 179.134.87.159

🇧🇷 179.130.171.63

🇺🇸 172.110.223.179

🇱🇹 81.30.98.142

🇳🇱 80.82.77.75