JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 96.44.160.195

96.44.160.195 was found in our database!

This IP was reported 102 times. Confidence of Abuse is 100%: ?

100%

ISP	HostPapa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Domain Name	hostpapa.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 96.44.160.195

Whois 96.44.160.195

IP Abuse Reports for 96.44.160.195:

This IP address has been reported a total of 102 times from 56 distinct sources. 96.44.160.195 was first reported on May 8th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-10 11:02:45 (1 hour ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Back ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Backup file probing, Cloud secrets probing, Malicious User-Agent show less	Bad Web Bot Web App Attack
Anonymous	2026-06-10 06:09:20 (6 hours ago)	SIEM ALERT AUTO REPORT	Email Spam
🇬🇧 sc user	2026-06-10 05:42:17 (6 hours ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan
Anonymous	2026-06-10 04:37:28 (7 hours ago)	Bot / seems abusive / Apache connections: 42	DDoS Attack Web Spam Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-06-10 04:21:53 (8 hours ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 96.44.160.195 (US/United States/-): ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 96.44.160.195 (US/United States/-): 2 in the last 3600 secs show less	Web App Attack
🇬🇧 consul.to	2026-06-10 02:28:27 (9 hours ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-06-10 00:53:18 (11 hours ago)	(caddyscan) Scanner path probe from 96.44.160.195 (US/United States/-): 5 in the last 3600 secs; Por ... show more (caddyscan) Scanner path probe from 96.44.160.195 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 96.44.160.195 - - [10/Jun/2026:00:53:13 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 96.44.160.195 - - [10/Jun/2026:00:53:13 +0000] "GET /.git/HEAD HTTP/1.1" [REDACTED] 200 2627 96.44.160.195 - - [10/Jun/2026:00:53:14 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 96.44.160.195 - - [10/Jun/2026:00:53:14 +0000] "GET /.env.development HTTP/1.1" [REDACTED] 200 2627 96.44.160.195 - - [10/Jun/2026:00:53:14 +0000] "GET /.env.local HTTP/1.1" show less	Port Scan
Anonymous	2026-06-09 21:42:57 (14 hours ago)	(caddyscan) Scanner path probe from 96.44.160.195 (US/United States/-): 5 in the last 3600 secs; Por ... show more (caddyscan) Scanner path probe from 96.44.160.195 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 96.44.160.195 - - [09/Jun/2026:21:42:52 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 96.44.160.195 - - [09/Jun/2026:21:42:52 +0000] "GET /.git/HEAD HTTP/1.1" [REDACTED] 200 2627 96.44.160.195 - - [09/Jun/2026:21:42:54 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 96.44.160.195 - - [09/Jun/2026:21:42:54 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 96.44.160.195 - - [09/Jun/2026:21:42:54 +0000] "GET /.env.bak HTTP/1.1" show less	Port Scan
🇩🇪 4server	2026-06-09 16:12:45 (20 hours ago)	[TueJun0918:12:40.8398512026][security2:error][pid3167845:tid3167887][client96.44.160.195:0]ModSecur ... show more [TueJun0918:12:40.8398512026][security2:error][pid3167845:tid3167887][client96.44.160.195:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"brunocampagna.com\"][uri\"/.git/HEAD\"][unique_id\"aig7eDpj0uNdTn98NZgdpgAAAEE\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 Baking333	2026-06-09 15:51:38 (20 hours ago)	[redacted] 96.44.160.195 - - [09/Jun/2026:16:51:34 +0100] "GET /.git/config HTTP/1.1" 302 5303 0/470 ... show more [redacted] 96.44.160.195 - - [09/Jun/2026:16:51:34 +0100] "GET /.git/config HTTP/1.1" 302 5303 0/47052 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://[redacted]/gptbot)" [redacted] 96.44.160.195 - - [09/Jun/2026:16:51:36 +0100] "GET / HTTP/1.1" 200 12104 0/124755 "https://[redacted]/.git/config" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://[redacted]/gptbot)" show less	Bad Web Bot Web App Attack
🇯🇵 bokumin.org	2026-06-09 15:17:55 (21 hours ago)	[id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [uri "/.git/HEAD"] [id "949110 ... show more [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [uri "/.git/HEAD"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] show less	Web App Attack
🇳🇱 vaddilyin	2026-06-09 14:56:07 (21 hours ago)	{"ClientAddr":"96.44.160.195:37684","ClientHost":"96.44.160.195","ClientPort":"37684","ClientUsernam ... show more {"ClientAddr":"96.44.160.195:37684","ClientHost":"96.44.160.195","ClientPort":"37684","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":46755,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":46755,"RequestAddr":"browserless.vdkln.com","RequestContentSize":0,"RequestCount":22192,"RequestHost":"browserless.vdkln.com","RequestMethod":"GET","RequestPath":"/.git/HEAD","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"StartLocal":"2026-06-09T14:56:06.075831426Z","StartUTC":"2026-06-09T14:56:06.075831426Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-06-09T14:56:06Z"} {"ClientAddr":"96.44.160.195:37688","ClientHost":"96.44.160.195","ClientPort":"37688","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":39385,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Ov ... show less	Web App Attack
🇲🇾 Rizzy	2026-06-09 14:14:46 (22 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇫🇷 masterguru	2026-06-09 14:12:35 (22 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)	Hacking Web App Attack
🇩🇪 LRob.fr	2026-06-09 11:45:03 (1 day ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot

Showing 1 to 15 of 102 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.56

🇭🇰 199.45.154.146

🇧🇭 87.237.192.74

🇵🇭 61.245.11.126

🇩🇪 47.245.143.200

🇦🇪 5.31.163.78

🇰🇷 222.108.39.109

🇮🇳 175.101.12.42

🇺🇸 165.154.135.73

🇨🇳 113.206.131.107

🇺🇸 91.230.168.156

🇺🇸 91.230.168.50

🇨🇦 85.217.149.1

🇺🇸 40.124.170.45

🇦🇺 20.248.236.169

🇺🇸 20.12.240.178

🇨🇳 223.243.179.70

🇨🇳 203.2.164.205

🇰🇪 196.207.177.56

🇺🇸 107.175.118.125