JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 95.85.238.63

95.85.238.63 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	Partner Hosting LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS209946
Domain Name	dietrichpartner.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 95.85.238.63

Whois 95.85.238.63

IP Abuse Reports for 95.85.238.63:

This IP address has been reported a total of 37 times from 30 distinct sources. 95.85.238.63 was first reported on July 23rd 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Yosi	2026-07-28 00:56:08 (1 hour ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇩🇪 LRob	2026-07-27 22:53:30 (3 hours ago)	CrowdSec: crowdsecurity/http-cve-probing \| req: /wp-json/batch/v1 \| UA: Mozilla/5.0 (Windows NT 10.0 ... show more CrowdSec: crowdsecurity/http-cve-probing \| req: /wp-json/batch/v1 \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇩🇪 4server	2026-07-27 17:22:01 (9 hours ago)	[MonJul2719:21:55.9626882026][security2:error][pid3262087:tid3262129][client95.85.238.63:0]ModSecuri ... show more [MonJul2719:21:55.9626882026][security2:error][pid3262087:tid3262129][client95.85.238.63:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap$\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"giftech.ch\"][uri\"/wp-admin/admin-ajax.php\"][unique_id\"ameTs9jG7qAYatrEs_VZ7AAAAEQ\"] show less	Port Scan Brute-Force Web App Attack
🇬🇧 Greg Poulson	2026-07-27 16:48:49 (9 hours ago)	Our website was hit by this DDOS at a rate of 11 in 5 minutes.	DDoS Attack Web Spam Brute-Force
🇳🇱 ConsulHosting	2026-07-27 14:19:23 (12 hours ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇬🇧 Mendip_Defender	2026-07-27 13:08:28 (13 hours ago)	95.85.238.63 - - [27/Jul/2026:14:08:29 +0100] "GET /plugins/editors/jce/jce.xml HTTP/1.1" 301 5689 " ... show more 95.85.238.63 - - [27/Jul/2026:14:08:29 +0100] "GET /plugins/editors/jce/jce.xml HTTP/1.1" 301 5689 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 95.85.238.63 - - [27/Jul/2026:14:08:29 +0100] "GET /administrator/components/com_jce/ HTTP/1.1" 301 5695 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" 95.85.238.63 - - [27/Jul/2026:14:08:29 +0100] "GET /media/system/js/core.js HTTP/1.1" 301 5685 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" ... show less	Hacking Web App Attack
🇩🇪 Nightreaver	2026-07-27 11:49:07 (14 hours ago)	95.85.238.63 - - [27/Jul/2026:13:49:03 0200] "GET /media/jui/js/bootstrap.min.js HTTP/1.1" 404 518 ... show more 95.85.238.63 - - [27/Jul/2026:13:49:03 0200] "GET /media/jui/js/bootstrap.min.js HTTP/1.1" 404 518 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" 95.85.238.63 - - [27/Jul/2026:13:49:03 0200] "GET /media/vendor/jquery/js/jquery.min.js?3.6.0 HTTP/1.1" 404 518 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" 95.85.238.63 - - [27/Jul/2026:13:49:05 0200] "GET /wp-content/plugins/wp_tfrtnpb/wp_tfrtnpb.php HTTP/1.1" 403 583 "-" "python-requests/2.34.2" 95.85.238.63 - - [27/Jul/2026:13:49:06 0200] "GET /wp-content/plugins/wp_tfrtnpb/wp_tfrtnpb.php HTTP/1.1" 403 583 "-" "python-requests/2.34.2" 95.85.238.63 - - [27/Jul/2026:13:49:06 0200] "GET /wp-content/plugins/wp_tfrtnpb/wp_tfrtnpb.php HTTP/1.1" 403 583 "-" "python-requests/2.34.2"[...] show less	Bad Web Bot Web App Attack
🇮🇹 ciccio diddo	2026-07-27 11:16:40 (15 hours ago)	High Burst multiple 40X port:Tcp/80,443	Brute-Force Web App Attack
🇳🇱 tmiland	2026-07-27 10:39:23 (15 hours ago)	(wordpress_404) WordPress Plugins Honeypot Trap 95.85.238.63 (CZ/Czechia/-): 2 in the last 3600 secs ... show more (wordpress_404) WordPress Plugins Honeypot Trap 95.85.238.63 (CZ/Czechia/-): 2 in the last 3600 secs; IP: 95.85.238.63; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 95.85.238.63 - - [27/Jul/2026:12:39:21 +0200] "GET /wp-content/plugins/wp_fwixkxq/wp_fwixkxq.php HTTP/1.1" 404 2992 "-" "python-requests/2.34.2" 95.85.238.63 - - [27/Jul/2026:12:39:22 +0200] "GET /wp-content/plugins/wp_fwixkxq/wp_fwixkxq.php HTTP/1.1" 404 2992 "-" "python-requests/2.34.2" show less	Brute-Force
🇫🇷 mail.avx.gr	2026-07-27 09:51:59 (16 hours ago)	Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: default-10-0-0-4:443 95.85.238.63 - - [27/Jul/2026 ... show more Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: default-10-0-0-4:443 95.85.238.63 - - [27/Jul/2026:12:51:59 +0300] "GET /administrator/components/com_jce/ HTTP/1.1" 404 2425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack
🇩🇪 kkeyser	2026-07-27 09:46:53 (16 hours ago)	GET /administrator/components/com_jce/ HTTP/1.1	Web App Attack
🇬🇧 consul.to	2026-07-27 09:45:52 (16 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇨🇭 lufi	2026-07-27 09:24:58 (16 hours ago)	2026-07-27 11:24:58 95.85.238.63: blacklistedPath: /media/system/js/core.js ...	Web Spam Brute-Force Hacking Web App Attack
🇨🇦 Not Fake	2026-07-27 09:18:36 (17 hours ago)	$f2bV_matches	Web App Attack
🇫🇷 Thibault Millant	2026-07-27 08:46:30 (17 hours ago)	95.85.238.63 - - [27/Jul/2026:08:46:16 +0000] "GET /administrator/components/com_jce/ HTTP/1.1" 404 ... show more 95.85.238.63 - - [27/Jul/2026:08:46:16 +0000] "GET /administrator/components/com_jce/ HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Brute-Force Exploited Host SSH

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.181.108.82

🇺🇸 184.105.139.77

🇺🇸 172.252.49.164

🇸🇪 171.25.158.68

🇩🇪 167.94.145.26

🇿🇦 165.165.115.82

🇺🇸 162.216.149.8

🇨🇦 159.203.5.228

🇨🇮 154.0.30.137

🇮🇳 103.157.149.14

🇹🇷 88.247.2.224

🇨🇦 72.11.155.223

🇳🇱 45.148.10.147

🇺🇸 3.93.198.22

🇺🇸 216.25.89.154

🇧🇪 198.235.24.230

🇬🇧 181.214.140.22

🇷🇺 152.32.227.23

🇨🇳 115.231.78.3

🇳🇱 91.92.47.66