JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 95.111.252.50

95.111.252.50 was found in our database!

This IP was reported 405 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi425299.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 95.111.252.50

Whois 95.111.252.50

IP Abuse Reports for 95.111.252.50:

This IP address has been reported a total of 405 times from 243 distinct sources. 95.111.252.50 was first reported on July 5th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 1cyb3rpunk	2026-10-19 20:13:03 (3 days ago)	Coordinated campaign CMP-1786835248-000: 1782 IPs sharing an attack fingerprint (acme_challenge_prob ... show more Coordinated campaign CMP-1786835248-000: 1782 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 raymarron.com	2026-10-19 13:02:00 (3 days ago)	/wp-json/ /readme.html /feed/	Web App Attack
🇺🇸 raymarron.com	2026-10-18 00:51:15 (5 days ago)	/wp-json/ /readme.html /feed/	Web App Attack
🇺🇸 nyt	2026-10-16 17:05:37 (6 days ago)	Bad Web Bot, Web App Attack, ai-sus: Accessing PHPUnit files, potential vulnerability scanning.	Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-10-15 03:18:53 (1 week ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 95.111.252.50 172.71.144.76 - - [11/Oct/2026:01:28: ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 95.111.252.50 172.71.144.76 - - [11/Oct/2026:01:28:19 -0300] "GET /api/.env HTTP/1.1" 404 18193 show less	Bad Web Bot
🇺🇸 1cyb3rpunk	2026-10-15 03:07:20 (1 week ago)	Coordinated campaign CMP-1786835248-000: 1425 IPs sharing an attack fingerprint (acme_challenge_prob ... show more Coordinated campaign CMP-1786835248-000: 1425 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-14 17:57:07 (1 week ago)	Automated report: 1 malicious HTTP request(s) blocked by WAF/IPS on public web services. Requested: ... show more Automated report: 1 malicious HTTP request(s) blocked by WAF/IPS on public web services. Requested: /wp-json/ show less	Bad Web Bot Web App Attack
Anonymous	2026-10-14 14:18:16 (1 week ago)	95.111.252.50 arduino.ua [14/Oct/2026:17:18:16 +0300] "GET /wp-json/ HTTP/2.0" 404 548 "-" "Mozilla/ ... show more 95.111.252.50 arduino.ua [14/Oct/2026:17:18:16 +0300] "GET /wp-json/ HTTP/2.0" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 0.000 304 ... show less	Hacking SQL Injection Web App Attack
🇫🇷 lindi	2026-10-14 14:06:55 (1 week ago)	Probing for resource vulnerabilities ...	Web Spam Brute-Force Bad Web Bot Exploited Host Web App Attack
🇫🇷 pm33	2026-10-14 14:01:02 (1 week ago)	Excessive crawling HTTP 404	Web App Attack
🇳🇴 Abuse Buster	2026-10-14 12:11:28 (1 week ago)	95.111.252.50 - - [14/Oct/2026:14:11:26 +0200] "GET /feed/ HTTP/2.0" 404 22 "-" "Mozilla/5.0 (X11; L ... show more 95.111.252.50 - - [14/Oct/2026:14:11:26 +0200] "GET /feed/ HTTP/2.0" 404 22 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 95.111.252.50 - - [14/Oct/2026:14:11:27 +0200] "GET /readme.html HTTP/2.0" 404 22 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 95.111.252.50 - - [14/Oct/2026:14:11:27 +0200] "GET /wp-json/ HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-10-14 11:14:41 (1 week ago)	[Wed Oct 14 13:14:40.634656 2026] [authz_core:error] [pid 30759] [client 95.111.252.50:63041] AH0163 ... show more [Wed Oct 14 13:14:40.634656 2026] [authz_core:error] [pid 30759] [client 95.111.252.50:63041] AH01630: client denied by server configuration: /etc/httpd/htdocs [Wed Oct 14 13:14:40.697560 2026] [authz_core:error] [pid 31278] [client 95.111.252.50:63150] AH01630: client denied by server configuration: /etc/httpd/htdocs [Wed Oct 14 13:14:40.724299 2026] [authz_core:error] [pid 31277] [client 95.111.252.50:63219] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
Anonymous	2026-10-14 09:18:27 (1 week ago)	FortiWeb WAF: 174 attacks detected. Threat Score: 44000. Types: Client Management(87), Block IP List ... show more FortiWeb WAF: 174 attacks detected. Threat Score: 44000. Types: Client Management(87), Block IP List(87). Origin: France. show less	Web App Attack
🇺🇸 jkhorvath.com	2026-10-14 08:07:08 (1 week ago)	Request for URL /feed/	Phishing Brute-Force Web App Attack
🇩🇪 BlueWire Hosting	2026-10-14 07:22:35 (1 week ago)	Aggressive scanning resulting into 404	Bad Web Bot

Showing 1 to 15 of 405 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 45.148.10.157

🇨🇳 222.138.118.20

🇩🇪 209.38.208.214

🇦🇷 190.226.240.226

🇧🇷 177.172.67.177

🇧🇩 118.179.208.59

🇲🇾 115.133.99.184

🇵🇭 111.125.105.253

🇩🇪 109.160.32.141

🇮🇩 103.158.121.4

🇺🇸 66.132.186.252

🇺🇸 43.173.121.159

🇺🇸 43.173.68.136

🇨🇳 36.111.34.233

🇺🇸 34.24.43.89

🇦🇪 2.50.172.102

🇧🇷 205.210.31.196

🇬🇧 195.206.182.202

🇲🇽 187.190.35.163

🇦🇷 186.13.24.118