195.86.38.53
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Datacamp Limited
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS212238
- Domain Name
- datacamp.co.uk
- Country
- π¨π± Chile
- City
- Santiago, Santiago Metropolitan
Abuse Reports
Total reports
14 from
13 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
. It is possible that this IP is
no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| πΊπΈ cwytech |
Fleet-wide ban from the Ghostfleet π». Triggered by scenario: cwy/wp-us-login-only-high.
|
Bad Web Bot Web App Attack | |
| πΊπΈ SX Communications |
Web vulnerability scanning / probing from 195.86.38.53: automated requests for CMS admin paths, login endpoints, xmlrpc, and common scanner fingerprints over HTTPS. 1 hits; paths: /wp-login.php.
|
Port Scan Hacking Web App Attack | |
| πΊπΈ SX Communications |
Blocked abusive HTTP application-layer DoS / botnet traffic from 195.86.38.53: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
|
DDoS Attack Bad Web Bot Exploited Host | |
| π«π· claude CALVET |
gee-6 : Trying access system files=>/wp-login.php(wp-login.php)
|
Hacking | |
| π©πͺ EGP Abuse Dept |
Scanning for web/db/file exploits on www.frelu.nl
|
SQL Injection Bad Web Bot Web App Attack | |
| π©πͺ ghostwarriors |
Attempts against non-existent wp-login
|
Brute-Force Web App Attack | |
| π©πͺ yitzhaq |
|
Web App Attack Hacking | |
| π©πͺ hidemail.app |
Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto-banned by fail2ban.
|
Web App Attack Hacking | |
| πΊπ¦ URAN Publishing Service |
[09/Oct/2026:15:03:39 +0300] -- 195.86.38.53 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-login.php HTTP/1.1
|
Bad Web Bot Web App Attack | |
| π«π· masterguru |
(modsec_5015) ModSec 5015: Suspicious User-Agent from 195.86.38.53 (CL/Chile/-): 1 in the last 3600 secs (0-196)
|
Hacking | |
| πΊπΈ xmission.com |
Blocked by UFW (TCP on 42069)
Source port: 43351
TTL: 51
Packet length: 60
TOS: 0x08
This report (for 195.86.38.53) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| π¨π³ ιΉιΉ |
monitor: on VM-0-7-ubuntu | port: 54212 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| π«π· matthieul.dev |
Blocked by os-abuseipdb; 23 hits, proto=tcp,udp, ports=60819
|
Port Scan Brute-Force | |
| π¨π³ ThreatBook.io |
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown