AbuseIPDB » 195.140.176.168
195.140.176.168
This IP was reported 9 times. Confidence of
Abuse
is 24% : ?
ISP
Merezha LTD
Usage Type
Data Center/Web Hosting/Transit
ASN
AS25288
Domain Name
merezha.net
Country
🇺🇸
United States of America
City
New York City, New York
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 195.140.176.168 :
This IP address has been reported a total of
9
times from
8 distinct
sources.
195.140.176.168 was first reported on
November 18th 2024 , and the most recent report was
2 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-10-20 14:26:49
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 195.140.176.168 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 195.140.176.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 10:26:43.441946 2026] [security2:error] [pid 20933:tid 20933] [client 195.140.176.168:50457] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "my1611.com"] [uri "/.git/HEAD"] [unique_id "atd6I6Em8Bl3rdlYG2ammQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-10 09:08:56
(1 week ago)
Budyn SOC Canary Trap: AWS Key Compromised! | Memo: AWS_Token_9 | Action: AWS API Call | Token: nk9b ...
show more
Budyn SOC Canary Trap: AWS Key Compromised! | Memo: AWS_Token_9 | Action: AWS API Call | Token: nk9br2dhw9iulptrg3dmcbkxl | Client Tool: Boto3/1.43.101 md/Botocore#1.43.101 ua/2.1 os/linux#5.15.0-25-generic md/arch#x86_64 lang/python#3.10.4 md/pyimpl#CPython m/E,b,Z,e cfg/retry-mode#standard B...
show less
Hacking
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-10-08 06:26:52
(2 weeks ago)
[ThuOct0808:26:48.9030772026][security2:error][pid1944631:tid1944704][client195.140.176.168:0]ModSec ...
show more
[ThuOct0808:26:48.9030772026][security2:error][pid1944631:tid1944704][client195.140.176.168:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"ilcartiglio.ch\"][uri\"/.git/HEAD\"][unique_id\"asc3qGITSTtKWabisRvdlgAAAIo\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 03:33:14
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 195.140.176.168 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 195.140.176.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 23:33:10.163002 2026] [security2:error] [pid 12463:tid 12476] [client 195.140.176.168:58541] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "victorchiarizia.com"] [uri "/.env"] [unique_id "aqtfdrE3Wdr0k5L65QepjQAAAYU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-26 20:50:04
(1 month ago)
| SQL injection attempt.
Web App Attack
Hacking
SQL Injection
🇮🇩
BPS-StatisticsIndonesia
2025-04-06 04:37:06
(1 year ago)
WP Login Scan Activities
Web App Attack
2025-02-27 03:07:51
(1 year ago)
wordpress-trap
Web App Attack
🇳🇱
Savvii
2024-11-20 07:09:30
(1 year ago)
20 attempts against mh_ha-misbehave-ban on iron
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
BestFans.com
2024-11-18 17:06:26
(1 year ago)
Credential brute-force attacks on webpage logins
Brute-Force
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: