JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.181.163.73

195.181.163.73 was found in our database!

This IP was reported 225 times. Confidence of Abuse is 100%: ?

100%

ISP	Datacamp Limited
Usage Type	Content Delivery Network
ASN	AS60068
Domain Name	datacamp.co.uk
Country	🇺🇸 United States of America
City	Miami, Florida

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.181.163.73

Whois 195.181.163.73

IP Abuse Reports for 195.181.163.73:

This IP address has been reported a total of 225 times from 120 distinct sources. 195.181.163.73 was first reported on April 4th 2025, and the most recent report was 26 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Lee Daniel	2026-07-09 06:03:29 (26 minutes ago)	195.181.163.73 - - [09/Jul/2026:02:03:28 -0400] "GET /.env HTTP/1.1" 403 6300 "-" "Mozilla/5.0 (Maci ... show more 195.181.163.73 - - [09/Jul/2026:02:03:28 -0400] "GET /.env HTTP/1.1" 403 6300 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 ambor	2026-07-09 05:12:59 (1 hour ago)	Honeypot triggered on tcpdata.com - Attempted to access /.env.prod (config_file_probe). User-Agent: ... show more Honeypot triggered on tcpdata.com - Attempted to access /.env.prod (config_file_probe). User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Web App Attack
Anonymous	2026-07-09 05:10:34 (1 hour ago)	(caddyscan) Scanner path probe from 195.181.163.73 (US/United States/-): 5 in the last 3600 secs; Po ... show more (caddyscan) Scanner path probe from 195.181.163.73 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 195.181.163.73 - - [09/Jul/2026:05:10:27 +0000] "GET /.env.prod HTTP/1.1" [REDACTED] 200 2627 195.181.163.73 - - [09/Jul/2026:05:10:28 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 195.181.163.73 - - [09/Jul/2026:05:10:29 +0000] "GET /src/.env HTTP/1.1" [REDACTED] 200 2627 195.181.163.73 - - [09/Jul/2026:05:10:29 +0000] "GET /.env.dev HTTP/1.1" [REDACTED] 200 2627 195.181.163.73 - - [09/Jul/2026:05:10:31 +0000] "GET /.env.staging HTTP/1.1" show less	Port Scan
Anonymous	2026-07-09 05:09:42 (1 hour ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
Anonymous	2026-07-09 04:06:12 (2 hours ago)	GET config.env \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like ... show more GET config.env \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 \| Time: 2026-07-09 04:06:12 UTC show less	Web App Attack
🇬🇧 andypiper	2026-07-09 01:01:17 (5 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 Matthew Ping	2026-07-09 00:15:01 (6 hours ago)	ModSecurity rule 949110 triggered on wp1. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-07-09 00:08:42 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 195.181.163.73 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 195.181.163.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 20:08:35.021632 2026] [security2:error] [pid 30465:tid 30465] [client 195.181.163.73:60278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "papelandia.com.ve"] [uri "/.env.local"] [unique_id "ak7mgwpRzaM-OunBlOCCFgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-07-08 21:36:45 (8 hours ago)	1.785 requests with url.path .env 228 requests with url.path .git/* 209 requests with url.path ... show more 1.785 requests with url.path .env 228 requests with url.path .git/* 209 requests with url.path */.git/config show less	Brute-Force Bad Web Bot
🇬🇧 Axel	2026-07-08 20:21:52 (10 hours ago)	Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /src/.env Ser ... show more Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /src/.env Server: UK-01 show less	Web App Attack Hacking SQL Injection
Anonymous	2026-07-08 19:44:34 (10 hours ago)	(caddyscan) Scanner path probe from 195.181.163.73 (US/United States/-): 5 in the last 3600 secs; Po ... show more (caddyscan) Scanner path probe from 195.181.163.73 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 195.181.163.73 - - [08/Jul/2026:19:44:30 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 195.181.163.73 - - [08/Jul/2026:19:44:30 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 195.181.163.73 - - [08/Jul/2026:19:44:30 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 195.181.163.73 - - [08/Jul/2026:19:44:30 +0000] "GET /.env.prod HTTP/1.1" [REDACTED] 200 2627 195.181.163.73 - - [08/Jul/2026:19:44:31 +0000] "GET /.git/config HTTP/1.1" show less	Port Scan
🇩🇪 IloGus	2026-07-08 17:30:32 (12 hours ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 17:16:44 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 195.181.163.73 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 195.181.163.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 13:16:39.140251 2026] [security2:error] [pid 27868:tid 27868] [client 195.181.163.73:63013] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pyxelstudios.com"] [uri "/.env"] [unique_id "ak6F96HAOjNUL-UcNZYxlwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ReyhZhao	2026-07-08 17:02:09 (13 hours ago)	Bunkerweb ModSecurity alert: Potential Remote Command Execution (RCE) detected. Unix shell code was ... show more Bunkerweb ModSecurity alert: Potential Remote Command Execution (RCE) detected. Unix shell code was identified within the request arguments, triggering a security rule designed to prevent application attacks. show less	Brute-Force
Anonymous	2026-07-08 16:07:03 (14 hours ago)	Automated web scanner. Requested suspicious paths: /.env \| /.env.production. UTC: 2026-07-08 15:23:4 ... show more Automated web scanner. Requested suspicious paths: /.env \| /.env.production. UTC: 2026-07-08 15:23:41. show less	Web App Attack

Showing 1 to 15 of 225 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇴 87.120.104.75

🇦🇺 203.221.228.192

🇧🇷 192.178.95.24

🇵🇱 176.53.159.198

🇺🇸 162.216.150.37

🇩🇪 159.65.120.212

🇵🇱 143.20.97.31

🇸🇬 129.226.158.185

🇰🇷 119.28.161.148

🇳🇱 91.92.40.217

🇳🇱 91.92.40.11

🇩🇪 46.101.201.146

🇧🇬 5.188.206.30

🇩🇪 217.253.124.164

🇩🇪 178.105.244.244

🇩🇪 167.94.146.78

🇮🇳 139.59.45.149

🇮🇩 103.122.66.226

🇺🇸 45.194.67.120

🇳🇱 45.156.128.52