JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 95.173.216.16

95.173.216.16 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 94%: ?

94%

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS60068
Hostname(s)	unn-95-173-216-16.datapacket.com
Domain Name	datacamp.co.uk
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 95.173.216.16

Whois 95.173.216.16

IP Abuse Reports for 95.173.216.16:

This IP address has been reported a total of 29 times from 18 distinct sources. 95.173.216.16 was first reported on June 4th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-11 04:04:30 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 95.173.216.16 (unn-95-173-216-16.datapacket.com ... show more (mod_security) mod_security (id:210492) triggered by 95.173.216.16 (unn-95-173-216-16.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 00:04:25.883517 2026] [security2:error] [pid 3136:tid 3136] [client 95.173.216.16:50654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fedeoliva.com"] [uri "/.env"] [unique_id "aiozyQb_Lv6-DzuKZ1yh5wAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Eric	2026-06-10 17:44:50 (3 days ago)	[Wed Jun 10 17:44:45.038107 2026] [security2:error] [pid 1920133:tid 1920133] [client 95.173.216.16: ... show more [Wed Jun 10 17:44:45.038107 2026] [security2:error] [pid 1920133:tid 1920133] [client 95.173.216.16:49376] [client 95.173.216.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/.env"] [unique_id "aimijViK5uD0O1LiiE7j9gAAAD0"] [Wed Jun 10 17:44:47.179770 2026] [security2:error] [pid 1925268:tid 1925268] [client 95.173.216.16:50269] [client 95.173.216.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severit ... show less	Hacking Web App Attack
🇩🇪 igerman	2026-06-10 17:02:01 (3 days ago)	caddy probes: web: GET /_app/immutable/chunks/3Fh15J2U.js(DROP), GET /_app/immutable/chunks/5xGq8h4C ... show more caddy probes: web: GET /_app/immutable/chunks/3Fh15J2U.js(DROP), GET /_app/immutable/chunks/5xGq8h4C2.js(DROP), GET /_app/immutable/chunks/9MBvwedS.js(DROP), GET /_app/immutable/chunks/BEDIq91W.js(DROP), GET /_app/immutable/chunks/BVWtngkj.js(DROP), GET /_app/immutable/chunks/B_S03Ejb2.js(DROP), GET /_app/immutable/chunks/BcMgiw05.js(DROP), GET /_app/immutable/chunks/Bj4g1Qzb.js(DROP), GET /_app/immutable/chunks/BkKDGDuh2.js(DROP), GET /_app/immutable/chunks/BnekHeXu.js(DROP), GET /_app/immutable/chunks/Bnv1ZBwm2.js(DROP), GET /_app/immutable/chunks/CAlh601C2.js(DROP), GET /_app/immutable/chunks/CBj5AN1M.js(DROP), GET /_app/immutable/chunks/CYbm6wl32.js(DROP), GET /_app/immutable/chunks/CiT0d24v.js(DROP), GET /_app/immutable/chunks/CnZpInqy.js(DROP), GET /_app/immutable/chunks/Cw8KoKP02.js(DROP), GET /_app/immutable/chunks/D-NGc5Tv.js(DROP), GET /_app/immutable/chunks/DMmnOXMj.js(DROP) show less	Web App Attack
🇫🇷 masterguru	2026-06-10 16:04:25 (3 days ago)	Restricted File Access Attempt. Matched phrase "phpinfo.php" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
🇧🇪 cmbplf	2026-06-10 15:49:22 (3 days ago)	100 requests with url.path *phpinfo.php	Brute-Force Bad Web Bot
🇩🇪 ger-stg-sifi1	2026-06-10 15:44:34 (3 days ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 14:54:52 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 95.173.216.16 (unn-95-173-216-16.datapacket.com ... show more (mod_security) mod_security (id:210492) triggered by 95.173.216.16 (unn-95-173-216-16.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 10:54:48.127446 2026] [security2:error] [pid 3751:tid 3751] [client 95.173.216.16:60062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "endoperfect.com"] [uri "/.env"] [unique_id "ail6uIOpKxHs1thtff4EKAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 MusicLibrary	2026-06-10 14:36:33 (3 days ago)	Attempted access to sensitive configuration files (.env, .git, etc.)	Bad Web Bot Web App Attack
Anonymous	2026-06-10 14:30:02 (3 days ago)	suspicious request in access.log	Web App Attack
Anonymous	2026-06-10 00:05:05 (4 days ago)	WAF repeated trigger detected by Fail2Ban	Web App Attack
🇬🇧 Apache	2026-06-09 23:00:20 (4 days ago)	(mod_security) mod_security (id:210730) triggered by 95.173.216.16 (US/United States/unn-95-173-216- ... show more (mod_security) mod_security (id:210730) triggered by 95.173.216.16 (US/United States/unn-95-173-216-16.datapacket.com): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇩🇪 Petros Stefanakis	2026-06-08 05:42:04 (5 days ago)	(mod_security) mod_security triggered on hostname [redacted] 95.173.216.16 (US/United States/unn-95- ... show more (mod_security) mod_security triggered on hostname [redacted] 95.173.216.16 (US/United States/unn-95-173-216-16.datapacket.com) show less	SQL Injection
🇨🇭 4server	2026-06-08 02:56:48 (5 days ago)	[MonJun0804:56:43.0285352026][security2:error][pid2080015:tid2080376][client95.173.216.16:0]ModSecur ... show more [MonJun0804:56:43.0285352026][security2:error][pid2080015:tid2080376][client95.173.216.16:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bhttpx\\\\\\\\b\\|\\\\\\\\bnaabu\\\\\\\\b\\|\\\\\\\\bffuf\\\\\\\\b\\|\\\\\\\\bgobuster\\\\\\\\b\\|\\\\\\\\bferoxbuster\\\\\\\\b\\|\\\\\\\\bwfuzz\\\\\\\\b\\|\\\\\\\\bjaeles\\\\\\\\b\\|\\\\\\\\bzgrab2\?\\\\\\\\b\\|\\\\\\\\bcommix\\\\\\\\b\\|\\\\\\\\bxsstrike\\\\\\\\b\\|\\\\\\\\bkiterunner\\\\\\\\b\\|\(\?:\^\\|[/]\)katana\(\?:/\\|\\\\\\\\b\)\\|\\\\\\\\bkr/\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"70\"][id\"338800\"][rev\"2\"][msg\"Atomicorp.comWAFRules:Blockedrecon/fuzzUA\"][severity\"CRITICAL\"][hostname\"creazione-siti-ticino.hosting-domini.ch\"][uri\"/js/html5shiv.min.js\"][unique_id\"aiYva-Nqn76cwtSXcJTBUgAAARY\"] show less	Hacking Web App Attack
🇺🇸 Matthew Ping	2026-06-08 00:45:03 (5 days ago)	ModSecurity rule 949110 triggered on dedicated. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-06-07 23:36:39 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 95.173.216.16 (unn-95-173-216-16.datapacket.com ... show more (mod_security) mod_security (id:210492) triggered by 95.173.216.16 (unn-95-173-216-16.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 19:36:31.222074 2026] [security2:error] [pid 17388:tid 17388] [client 95.173.216.16:53140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crcponcha.com"] [uri "/.env"] [unique_id "aiYAf_g0VQOo2QaogDO1pQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 219.140.5.203

🇹🇼 211.21.127.69

🇮🇳 202.164.145.243

🇧🇪 198.235.24.239

🇨🇳 182.51.86.109

🇩🇪 167.94.146.35

🇮🇳 122.168.123.73

🇮🇳 61.95.199.54

🇺🇸 45.79.134.107

🇸🇬 2406:da18:125:f101:8202:7d2a:6aff:42b5

🇺🇸 162.216.150.163

🇨🇳 117.14.51.58

🇵🇰 110.38.247.198

🇺🇸 107.173.173.98

🇰🇷 49.247.36.49

🇳🇱 45.156.128.124

🇺🇸 20.169.105.105

🇺🇸 2620:18c:0:192::e0:186

🇧🇪 198.235.24.163

🇷🇴 193.46.255.86