JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

95.173.223.163

Recent Activity

Abuse Confidence Score

52% Elevated

19 reports

17 reporters · latest 3 days ago

ISP: Datacamp Limited
Usage Type: Data Center/Web Hosting/Transit
ASN: AS212238
Hostname(s): unn-95-173-223-163.datapacket.com
Domain Name: datacamp.co.uk
Country: 🇵🇪 Peru
City: Lima, Lima Province

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

19 from 17 distinct reporters

First reported

May 11th 2025

Most recent report

3 days ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 6 🇳🇱 Netherlands 2 🇧🇷 Brazil 1

Most common categories Web App Attack 10 Bad Web Bot 4 Brute-Force 3 Port Scan 1 Hacking 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 MyGlobalFlowers	2026-11-06 02:36:48 UTC · (3 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-11-06 01:50:04 UTC · (3 days ago)	(mod_security) mod_security (id:210492) triggered by 95.173.223.163 (unn-95-173-223-163.datapacket.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 20:49:59.346975 2026] [security2:error] [pid 20647:tid 2064 ... show more (mod_security) mod_security (id:210492) triggered by 95.173.223.163 (unn-95-173-223-163.datapacket.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 20:49:59.346975 2026] [security2:error] [pid 20647:tid 20647] [client 95.173.223.163:44000] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.98"] [uri "/.env"] [unique_id "au0yR4JapYhVeREtG4_WIwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 arturotrenard	2026-11-05 21:36:55 UTC · (4 days ago)	WordPress attack blocked (wp-defender): directo-al-origen: 56 peticiones a la IP del origen sin pasar por Cloudflare (80.28.53.249) ej. /.git/HEAD	Web App Attack
🇺🇸 markawes	2026-11-05 17:27:45 UTC · (4 days ago)	[SynFast] Auto banned by Fail2Ban. Reason: Web vulnerability scan detected. Evidence: 95.173.223.163 - - [05/Nov/2026:17:27:43 +0000] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like G ... show more [SynFast] Auto banned by Fail2Ban. Reason: Web vulnerability scan detected. Evidence: 95.173.223.163 - - [05/Nov/2026:17:27:43 +0000] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 95.173.223.163 - - [05/Nov/2026:17:27:44 +0000] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack Port Scan
🇳🇱 Mangelot Hosting	2026-11-05 17:13:36 UTC · (4 days ago)	(web_sensitive_file) srv102 Sensitive file probe (.env/.git/backup) 95.173.223.163 (PE/Peru/unn-95-173-223-163.datapacket.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:	Web App Attack
🇺🇸 TPI-Abuse	2026-11-05 16:39:20 UTC · (4 days ago)	(mod_security) mod_security (id:210492) triggered by 95.173.223.163 (unn-95-173-223-163.datapacket.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 11:39:15.366271 2026] [security2:error] [pid 1841419:tid 18 ... show more (mod_security) mod_security (id:210492) triggered by 95.173.223.163 (unn-95-173-223-163.datapacket.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 11:39:15.366271 2026] [security2:error] [pid 1841419:tid 1841483] [client 95.173.223.163:41086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.125"] [uri "/.env"] [unique_id "auyxM8J727-TnaNE6K60MwAAAJA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 mzaiser12	2026-11-05 16:24:11 UTC · (4 days ago)	Web application probing: 15 requests to typical attack paths (/.git/HEAD, /.env.dev, /.env.local, /.env.backup) within 5 min. Reported automatically by a SIEM; contact via abuse mailbox of the reporting network.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-05 14:14:29 UTC · (4 days ago)	(mod_security) mod_security (id:210492) triggered by 95.173.223.163 (unn-95-173-223-163.datapacket.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 09:14:25.272724 2026] [security2:error] [pid 11578:tid 1157 ... show more (mod_security) mod_security (id:210492) triggered by 95.173.223.163 (unn-95-173-223-163.datapacket.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 09:14:25.272724 2026] [security2:error] [pid 11578:tid 11578] [client 95.173.223.163:41846] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.168"] [uri "/.env"] [unique_id "auyPQVhBP2bG0W4EYpQBfgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 ICS Labs	2026-11-05 13:21:03 UTC · (4 days ago)	ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-11-05 UTC.	Hacking
🇺🇸 jormaster3k	2026-11-05 13:10:58 UTC · (4 days ago)	Attack against Apache (too many 404s)	Web App Attack
🇺🇸 wteiken	2026-11-05 10:54:50 UTC · (4 days ago)	www.teiken.net:443 95.173.223.163:34498 - - [05/Nov/2026:05:54:48 -0500] "GET /.env HTTP/1.1" 404 498 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" www.teiken.net:443 95.17 ... show more www.teiken.net:443 95.173.223.163:34498 - - [05/Nov/2026:05:54:48 -0500] "GET /.env HTTP/1.1" 404 498 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" www.teiken.net:443 95.173.223.163:34498 - - [05/Nov/2026:05:54:49 -0500] "GET /.git/config HTTP/1.1" 404 498 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" www.teiken.net:443 95.173.223.163:48982 - - [05/Nov/2026:05:54:49 -0500] "GET /.env.backup HTTP/1.1" 404 855 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" www.teiken.net:443 95.173.223.163:48958 - - [05/Nov/2026:05:54:49 -0500] "GET /backend/.env HTTP/1.1" 404 3459 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" www.teiken.net:443 95.173.223.163:49004 - - [05/Nov/2026:05:54:49 -0500] ... show less	Web App Attack
🇹🇭 MWA SOC	2025-11-16 16:45:52 UTC · (11 months ago)		Hacking
🇺🇸 kosada.com	2025-11-16 10:55:19 UTC · (11 months ago)	Web password guessing	Brute-Force
Anonymous	2025-11-16 04:24:54 UTC · (11 months ago)	wordpress authentication brute force	Brute-Force Web App Attack
🇦🇺 MAGIC	2025-11-16 00:13:57 UTC · (11 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇾 202.165.25.8

🇩🇪 172.71.144.149

🇺🇸 162.240.29.210

🇺🇸 162.216.149.38

🇺🇸 162.43.225.139

🇩🇴 152.0.37.48

🇩🇪 51.38.119.192

🇵🇱 2400:cb00:1055:1000:4533:6f4d:26ca:22a

🇧🇷 205.210.31.140

🇧🇴 200.87.49.186

🇺🇸 195.184.76.126

🇩🇪 172.71.144.104

🇮🇳 122.165.102.103

🇸🇪 104.22.219.8

🇺🇸 100.28.223.98

🇦🇲 91.103.249.254

🇧🇬 89.215.172.211

🇮🇹 79.32.159.87

🇮🇱 51.16.35.139

🇲🇽 201.138.143.207