JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.73.162.166

3.73.162.166 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 60%: ?

60%

ISP	A100 ROW GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-73-162-166.eu-central-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.73.162.166

Whois 3.73.162.166

IP Abuse Reports for 3.73.162.166:

This IP address has been reported a total of 18 times from 10 distinct sources. 3.73.162.166 was first reported on June 27th 2022, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-26 11:01:32 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.73.162.166 (ec2-3-73-162-166.eu-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 3.73.162.166 (ec2-3-73-162-166.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 07:01:26.548655 2026] [security2:error] [pid 2173065:tid 2173065] [client 3.73.162.166:46344] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.theledmancom.rotarymagnetics.com"] [uri "/.git/config"] [unique_id "amXpBixNdeA4kyLpCdhZpAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 09:35:21 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.73.162.166 (ec2-3-73-162-166.eu-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 3.73.162.166 (ec2-3-73-162-166.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 05:35:15.336287 2026] [security2:error] [pid 391786:tid 391866] [client 3.73.162.166:45642] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.theknighttemplar.com.aafm.us"] [uri "/.git/config"] [unique_id "amXU05Uk_tj2j8Ty7sGcJAAAAY4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 04:52:54 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.73.162.166 (ec2-3-73-162-166.eu-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 3.73.162.166 (ec2-3-73-162-166.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 00:52:46.763724 2026] [security2:error] [pid 18023:tid 18023] [client 3.73.162.166:52056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thehomzasson.andrsn.com"] [uri "/.git/config"] [unique_id "amWSnohdD-pcr4sBffy-4QAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-25 22:02:39 (17 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-24. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-25 08:16:14 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 3.73.162.166 (ec2-3-73-162-166.eu-central-1.com ... show more (mod_security) mod_security (id:949110) triggered by 3.73.162.166 (ec2-3-73-162-166.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 04:16:08.334280 2026] [security2:error] [pid 1320960:tid 1320960] [client 3.73.162.166:52004] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.tgtn.cescfoundation.org"] [uri "/.git/config"] [unique_id "amRwyCwYzQBwRbMV780nHgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-07-25 07:55:02 (1 day ago)	crowdsecurity/http-crawl-non_statics	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 04:08:04 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 3.73.162.166 (ec2-3-73-162-166.eu-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 3.73.162.166 (ec2-3-73-162-166.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 00:07:56.369068 2026] [security2:error] [pid 1841956:tid 1841956] [client 3.73.162.166:36892] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.texascottagebakers.org.texascottagebakers.com"] [uri "/.git/config"] [unique_id "amQ2nP0M4YCoxJaD-AesawAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-25 02:09:54 (1 day ago)	Excessive 404/403 errors	Brute-Force
🇳🇱 homeshowdomain.nl	2026-07-24 22:00:35 (1 day ago)	Auto-ban: >3000 req/min op 2026-07-24	Web App Attack SSH Hacking
Anonymous	2026-07-24 09:27:04 (2 days ago)	Bot / scanning and/or hacking attempts: GET /.env.save HTTP/1.1, GET /.env.development HTTP/1.1, POS ... show more Bot / scanning and/or hacking attempts: GET /.env.save HTTP/1.1, GET /.env.development HTTP/1.1, POST / HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env.production HTTP/1.1, GET /.env.local HTTP/1.1, GET /.env.test HTTP/1.1, GET /.git/config HTTP/1.1, GET /.env.sample HTTP/1.1, GET / HTTP/1.1, GET /.env.staging HTTP/1.1, GET /.env.remote HTTP/1.1, GET /.env.old HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env HTTP/1.1 show less	Hacking Web App Attack
🇩🇪 big-cloud.nl	2026-07-24 07:59:51 (2 days ago)	Try to access /.git/config	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 05:14:36 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 3.73.162.166 (ec2-3-73-162-166.eu-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 3.73.162.166 (ec2-3-73-162-166.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 01:14:32.351895 2026] [security2:error] [pid 464919:tid 464919] [client 3.73.162.166:41626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gotomywebmail.com.globalweb123.com"] [uri "/.git/config"] [unique_id "amL0uPSGodmg970rNGzj1AAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-07-24 05:10:02 (2 days ago)	crowdsecurity/http-crawl-non_statics	Brute-Force Web App Attack
Anonymous	2026-07-24 04:28:21 (2 days ago)	[ns3.backorder.gr] httpd-config-scan: sites=www.example.com,debug-gosolar.gr,www.gosolar.gr; logs=/v ... show more [ns3.backorder.gr] httpd-config-scan: sites=www.example.com,debug-gosolar.gr,www.gosolar.gr; logs=/var/log/httpd/access_log,/var/log/httpd/domains/debug-gosolar.gr.log,/var/log/httpd/domains/gosolar.gr.log; samples=/.git/config \| /.env \| /.env.local show less	Hacking Web App Attack
🇮🇹 VHosting	2026-07-24 03:20:04 (2 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.45.50.44

🇺🇸 172.70.38.185

🇺🇸 137.184.67.181

🇻🇳 116.99.175.123

🇻🇳 103.82.22.235

🇳🇱 91.92.40.41

🇺🇸 66.132.186.129

🇺🇦 37.53.62.218

🇬🇧 2001:41d0:80b:2700::

🇮🇳 103.247.6.15

🇫🇷 85.204.70.94

🇲🇾 47.250.114.237

🇻🇳 27.79.44.188

🇳🇱 23.176.184.152

🇺🇸 13.83.42.96

🇷🇺 5.129.176.156

🇧🇪 198.235.24.175

🇧🇷 187.84.113.74

🇮🇶 185.24.61.63

🇺🇸 167.71.163.146