JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 95.211.244.28

95.211.244.28 was found in our database!

This IP was reported 128 times. Confidence of Abuse is 11%: ?

11%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	LeaseWeb Netherlands B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS60781
Domain Name	leaseweb.com
Country	🇳🇱 Netherlands
City	Lelystad, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 95.211.244.28

Whois 95.211.244.28

IP Abuse Reports for 95.211.244.28:

This IP address has been reported a total of 128 times from 53 distinct sources. 95.211.244.28 was first reported on February 28th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-05-27 22:00:38 (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-26. show less	Web App Attack SSH Hacking
🇨🇳 ThreatBook.io	2026-05-07 23:56:36 (4 weeks ago)	ThreatBook Intelligence: tor_proxy,Zombie more details on https://threatbook.io/ip/95.211.244.28 202 ... show more ThreatBook Intelligence: tor_proxy,Zombie more details on https://threatbook.io/ip/95.211.244.28 2026-05-07 17:41:27 /files/ show less	Web App Attack
🇫🇮 gnom4ik	2026-03-25 14:26:03 (2 months ago)	ban-reviewer auto report; ip=95.211.244.28; scenario=http:scan; verdict=valid_ban; confidence=0.92; ... show more ban-reviewer auto report; ip=95.211.244.28; scenario=http:scan; verdict=valid_ban; confidence=0.92; categories=14,15,18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=ip_decision_count_high show less	Port Scan Hacking Brute-Force SSH
🇮🇳 liveaspankaj	2026-03-17 22:46:50 (2 months ago)	DDoS attack: 74 requests in 5m (GET / or repair.php).	DDoS Attack
🇪🇸 gnom4ik	2026-02-21 09:13:00 (3 months ago)	ban-reviewer auto report; ip=95.211.244.28; scenario=http:scan; verdict=valid_ban; confidence=0.90; ... show more ban-reviewer auto report; ip=95.211.244.28; scenario=http:scan; verdict=valid_ban; confidence=0.90; categories=14,15,18; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=scan/exploit pattern detected (http:scan scenario); port scan category (14) assigned; repeated abuse patterns in lookback window (2 decisions) show less	Port Scan Hacking Brute-Force
🇮🇳 liveaspankaj	2026-02-12 12:33:13 (3 months ago)	DDoS attack on learngeeta.com: 71 requests of GET / HTTP/1.1 over plain HTTP with no referrer. Autom ... show more DDoS attack on learngeeta.com: 71 requests of GET / HTTP/1.1 over plain HTTP with no referrer. Automated bot attack with randomized User-Agents (outdated Chrome 127-129). show less	DDoS Attack
🇿🇦 maximonline.co.za	2025-12-29 08:47:16 (5 months ago)	Brute Force IMAP AUTH Attack	Brute-Force
🇺🇸 oncord	2025-12-28 15:53:40 (5 months ago)	Form spam	Web Spam
🇪🇸 el-brujo	2025-12-23 05:10:00 (5 months ago)	DDoS Attack Layer 7	DDoS Attack
Anonymous	2025-11-13 07:28:36 (6 months ago)	[Thu Nov 13 08:28:02.008346 2025] [access_compat:error] [pid 6388] [client 95.211.244.28:44432] AH01 ... show more [Thu Nov 13 08:28:02.008346 2025] [access_compat:error] [pid 6388] [client 95.211.244.28:44432] AH01797: client denied by server configuration: /var/www/html/ [Thu Nov 13 08:28:20.460822 2025] [access_compat:error] [pid 6436] [client 95.211.244.28:47914] AH01797: client denied by server configuration: /var/www/html/favicon.ico [Thu Nov 13 08:28:35.329204 2025] [access_compat:error] [pid 19141] [client 95.211.244.28:52704] AH01797: client denied by server configuration: /var/www/html/favicon.ico ... show less	Web App Attack
Anonymous	2025-10-23 14:35:17 (7 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇮🇹 LTM	2025-10-11 06:20:01 (7 months ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
🇧🇪 cmbplf	2025-08-18 12:30:04 (9 months ago)	1301 limiting connections by zone (11m59sfromnow)	DDoS Attack
🇺🇸 TPI-Abuse	2025-08-05 10:50:54 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 95.211.244.28 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 95.211.244.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 05 06:50:48.331227 2025] [security2:error] [pid 3037:tid 3037] [client 95.211.244.28:59624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "doctorspainmanagement.com"] [uri "/wp-config.php-lixo"] [unique_id "aJHiCKWJmt5XkUtcLaoO8AAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Hydra-Shield.fr	2025-08-01 23:23:26 (10 months ago)	Automated DDoS behavior detected targeting production services. Multiple anomalous connections and p ... show more Automated DDoS behavior detected targeting production services. Multiple anomalous connections and packet floods recorded. show less	Brute-Force SSH

Showing 1 to 15 of 128 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 186.96.145.241

🇺🇸 65.111.0.17

🇳🇱 43.250.54.196

🇳🇱 5.61.209.224

🇨🇦 216.26.241.13

🇺🇸 216.26.225.37

🇩🇪 213.209.159.56

🇬🇧 195.96.139.70

🇦🇷 190.183.218.186

🇫🇷 185.208.207.227

🇩🇪 165.227.146.203

🇩🇪 151.123.177.8

🇨🇳 121.41.167.163

🇮🇳 120.62.8.17

🇫🇷 86.217.21.47

🇺🇸 68.183.117.75

🇮🇳 66.116.224.143

🇩🇪 43.157.98.118

🇺🇸 209.50.160.160

🇨🇳 125.120.8.159