AbuseIPDB » 1.95.73.195
1.95.73.195
This IP was reported 10 times. Confidence of
Abuse
is 33% : ?
ISP
Beijing Teletron Telecom Engineering Co., Ltd.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS55990
Domain Name
drpeng.com.cn
Country
🇨🇳
China
City
Guiyang, Guizhou
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 1.95.73.195 :
This IP address has been reported a total of
10
times from
6 distinct
sources.
1.95.73.195 was first reported on
October 6th 2026 , and the most recent report was
3 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇧🇪
Saec
2026-10-19 04:00:30
(3 days ago)
Jarvis auto-ban: blocklist:cins
Port Scan
Web App Attack
🇺🇸
wbsouza
2026-10-19 03:49:56
(3 days ago)
CrowdSec: infra/firewall-drop-flood — automated firewall drops on self-hosted IDS sensor
Port Scan
🇺🇸
Player Unknown
2026-10-18 15:50:10
(4 days ago)
1.95.73.195 - - [18/Oct/2026:08:49:40 -0700] "GET /api/file/temp/..%2F..%2F..%2F..%2Fetc%2Fpasswd HT ...
show more
1.95.73.195 - - [18/Oct/2026:08:49:40 -0700] "GET /api/file/temp/..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 400 157 "-" "-"
1.95.73.195 - - [18/Oct/2026:08:50:07 -0700] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 400 157 "-" "-"
1.95.73.195 - - [18/Oct/2026:08:50:07 -0700] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 400 157 "-" "-"
1.95.73.195 - - [18/Oct/2026:08:50:08 -0700] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 400 157 "-" "-"
1.95.73.195 - - [18/Oct/2026:08:50:09 -0700] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 400 157 "-" "-"
...
show less
Brute-Force
SSH
🇺🇸
wbsouza
2026-10-16 03:41:03
(6 days ago)
CrowdSec: infra/firewall-drop-flood — automated firewall drops on self-hosted IDS sensor
Port Scan
🇺🇸
wbsouza
2026-10-15 03:29:41
(1 week ago)
CrowdSec: infra/firewall-drop-flood — automated firewall drops on self-hosted IDS sensor
Port Scan
🇧🇪
voormedia
2026-10-07 14:29:34
(2 weeks ago)
Accessed trap at '/admin.php'
Web App Attack
🇳🇱
wlt-blocker
2026-10-07 11:25:47
(2 weeks ago)
Unauthorized access to webpage admin
Web App Attack
🇺🇸
zwebvigil
2026-10-07 03:40:58
(2 weeks ago)
1.95.73.195 [06/Oct/2026:20:40:56 -0700] "GET / HTTP/1.1" 401 381 "-" port=57266 "-" "-" "-" "<ipad ...
show more
1.95.73.195 [06/Oct/2026:20:40:56 -0700] "GET / HTTP/1.1" 401 381 "-" port=57266 "-" "-" "-" "<ipaddr>" 976
1.95.73.195 [06/Oct/2026:20:40:57 -0700] "POST /beat HTTP/1.1" 401 381 "-" port=57266 "-" "-" "-" "<ipaddr>" 294
1.95.73.195 [06/Oct/2026:20:40:57 -0700] "POST /beat HTTP/1.1" 401 381 "-" port=57266 "-" "-" "-" "<ipaddr>" 294
1.95.73.195 [06/Oct/2026:20:40:57 -0700] "POST /shop-api?languageCode=en HTTP/1.1" 401 381 "-" port=57266 "-" "-" "-" "<ipaddr>" 336
1.95.73.195 [06/Oct/2026:20:40:57 -0700] "POST /shop-api?languageCode=en HTTP/1.1" 401 381 "-" port=57266 "-" "-" "-
show less
Web App Attack
🇧🇪
voormedia
2026-10-06 12:42:36
(2 weeks ago)
Accessed trap at '/admin.php'
Web App Attack
🇺🇸
zwebvigil
2026-10-06 07:46:58
(2 weeks ago)
1.95.73.195 [06/Oct/2026:00:46:56 -0700] "GET / HTTP/1.1" 401 381 "-" port=52256 "-" "-" "-" "<ipad ...
show more
1.95.73.195 [06/Oct/2026:00:46:56 -0700] "GET / HTTP/1.1" 401 381 "-" port=52256 "-" "-" "-" "<ipaddr>" 471
1.95.73.195 [06/Oct/2026:00:46:56 -0700] "POST /beat HTTP/1.1" 401 381 "-" port=52256 "-" "-" "-" "<ipaddr>" 298
1.95.73.195 [06/Oct/2026:00:46:57 -0700] "POST /shop-api?languageCode=en HTTP/1.1" 401 381 "-" port=52256 "-" "-" "-" "<ipaddr>" 347
1.95.73.195 [06/Oct/2026:00:46:57 -0700] "GET /api/system/system/string_render HTTP/1.1" 401 381 "-" port=52256 "-" "-" "-" "<ipaddr>" 366
1.95.73.195 [06/Oct/2026:00:46:57 -0700] "GET /jmreport/list HTTP/1.1" 401 381 "-" port=52256 "-" "-" "-" "<ipaddr>" 238
1.95.73.195 [06/Oct/2026:00:46:57 -0700] "GET /admin.php?ajax_panel=1 HTTP/1.1" 401 381 "-" port=52256 "-" "-" "-
show less
Web App Attack
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: