JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.195.233.192

185.195.233.192 was found in our database!

This IP was reported 68 times. Confidence of Abuse is 72%: ?

72%

ISP	31173 Services AB infrastructure in Stockholm, SE.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS39351
Domain Name	31173.se
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.195.233.192

Whois 185.195.233.192

IP Abuse Reports for 185.195.233.192:

This IP address has been reported a total of 68 times from 47 distinct sources. 185.195.233.192 was first reported on November 18th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 thetomtaylor.co.uk	2026-06-10 09:06:02 (1 day ago)	Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice01,ice02,wa01]	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 08:26:08 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 185.195.233.192 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 185.195.233.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 04:26:05.135615 2026] [security2:error] [pid 30983:tid 30983] [client 185.195.233.192:45446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "casadelsolmexico.net"] [uri "/.git/index"] [unique_id "aikfnX8IG1CBATPZahDJ6gAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 08:05:45 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 185.195.233.192 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 185.195.233.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 04:05:41.643963 2026] [security2:error] [pid 13501:tid 13501] [client 185.195.233.192:57456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carbonless.net"] [uri "/.git/index"] [unique_id "aika1eC4Dcf8hWdqqY7L7QAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-06-10 07:44:03 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 07:42:00 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 185.195.233.192 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 185.195.233.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 03:41:53.016966 2026] [security2:error] [pid 26327:tid 26327] [client 185.195.233.192:39422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cameronwv.com"] [uri "/.git/index"] [unique_id "aikVQa4sEgUlpa0uo-uGbgAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-06-10 07:17:24 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-06-10 07:07:02 (1 day ago)	Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [wa02]	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 06:52:30 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 185.195.233.192 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 185.195.233.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 02:52:26.488938 2026] [security2:error] [pid 19755:tid 19767] [client 185.195.233.192:49420] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bullfrogspond.com"] [uri "/.git/index"] [unique_id "aikJqlc65etjgJJorHfsdwAAAEg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-06-10 06:37:29 (1 day ago)	Try to access /.git/index	Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 06:31:38 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 185.195.233.192 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 185.195.233.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 02:31:33.580780 2026] [security2:error] [pid 25569:tid 25569] [client 185.195.233.192:43610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brownbarn.com"] [uri "/.git/index"] [unique_id "aikExe1X5D3NhnLtY8X-ywAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 06:16:32 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 185.195.233.192 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 185.195.233.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 02:16:25.545068 2026] [security2:error] [pid 18664:tid 18664] [client 185.195.233.192:56774] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "briannalls.com"] [uri "/.git/index"] [unique_id "aikBOTcDr9YZdFNrgRTsNwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-10 06:10:02 (1 day ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 05:54:51 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 185.195.233.192 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 185.195.233.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 01:54:43.573668 2026] [security2:error] [pid 23471:tid 23471] [client 185.195.233.192:36598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bowerwood.com"] [uri "/.git/index"] [unique_id "aij8I2Dm99LwGx5c6VFQZAAAACk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 inlink.ltd	2026-06-10 05:35:22 (1 day ago)	dot file probe	Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 05:25:28 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 185.195.233.192 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 185.195.233.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 01:25:24.890299 2026] [security2:error] [pid 20673:tid 20673] [client 185.195.233.192:46138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bodybuildbid.com"] [uri "/.git/index"] [unique_id "aij1RBvSL60jEI9XOR8AcAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 68 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 213.21.235.179

🇮🇳 203.192.211.180

🇹🇼 198.235.24.97

🇺🇸 184.105.139.68

🇹🇼 104.199.254.193

🇹🇷 94.123.167.95

🇳🇱 88.151.33.126

🇺🇸 64.62.197.236

🇺🇸 64.62.197.166

🇺🇸 47.254.21.155

🇧🇷 45.205.1.76

🇺🇸 34.106.180.195

🇧🇪 34.77.93.14

🇵🇱 194.180.48.31

🇲🇽 187.140.196.75

🇮🇳 182.95.191.186

🇺🇸 162.243.172.115

🇺🇸 162.217.163.128

🇭🇰 152.32.172.177

🇳🇱 77.83.39.55