JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.195.233.203

185.195.233.203 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 47%: ?

47%

ISP	31173 Services AB infrastructure in Stockholm, SE.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS39351
Domain Name	31173.se
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.195.233.203

Whois 185.195.233.203

IP Abuse Reports for 185.195.233.203:

This IP address has been reported a total of 36 times from 25 distinct sources. 185.195.233.203 was first reported on March 6th 2023, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-09 07:30:59 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 185.195.233.203 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 185.195.233.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 03:30:53.692187 2026] [security2:error] [pid 3424:tid 3424] [client 185.195.233.203:53552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "americanacademyofteachersofsinging.org"] [uri "/.git/index"] [unique_id "ak9OLWTJmyQj6DYL9NCfLQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-09 07:14:49 (10 hours ago)		Web App Attack
🇧🇪 cmbplf	2026-07-09 06:39:28 (11 hours ago)	243 requests with url.path .git/	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-09 06:34:14 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 185.195.233.203 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 185.195.233.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 02:34:09.099507 2026] [security2:error] [pid 23632:tid 23660] [client 185.195.233.203:38706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alexlogic.com"] [uri "/.git/index"] [unique_id "ak9A4UoVZhr1K2Nq3n3G7AAAAVU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 06:13:27 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 185.195.233.203 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 185.195.233.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 02:13:22.898087 2026] [security2:error] [pid 22430:tid 22430] [client 185.195.233.203:51386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "al-ketab.net"] [uri "/.git/index"] [unique_id "ak88Aoki82ccXGwPf9I7KQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-07-09 06:09:28 (12 hours ago)	Try to access /.git/index	Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 05:44:55 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 185.195.233.203 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 185.195.233.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 01:44:48.606059 2026] [security2:error] [pid 20576:tid 20576] [client 185.195.233.203:48766] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aholsniffsglue.com"] [uri "/.git/index"] [unique_id "ak81UKirvYOncdbHtdpo2AAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 05:21:07 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 185.195.233.203 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 185.195.233.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 01:21:00.857398 2026] [security2:error] [pid 8979:tid 8979] [client 185.195.233.203:45720] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "affordablehomegoods.com"] [uri "/.git/index"] [unique_id "ak8vvJhFUgLfKVf1gCfZFgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 05:04:16 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 185.195.233.203 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 185.195.233.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 01:04:08.946259 2026] [security2:error] [pid 22579:tid 22579] [client 185.195.233.203:46338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adrienberthaud.com"] [uri "/.git/index"] [unique_id "ak8ryIJZJXJP7AM8DOtNfgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Mendip_Defender	2026-07-09 04:51:12 (13 hours ago)	[09/Jul/2026:05:51:02.550600 +0100] ak8otkE8YALT4E4aWywI_gAAAIA 185.195.233.203 49860 188.246.206.60 ... show more [09/Jul/2026:05:51:02.550600 +0100] ak8otkE8YALT4E4aWywI_gAAAIA 185.195.233.203 49860 188.246.206.60 7081 [09/Jul/2026:05:51:03.270763 +0100] ak8ot3HzmO2T0IlMm7UDIwAAAFU 185.195.233.203 49874 188.246.206.60 7081 ... show less	Brute-Force
🇺🇸 mnsf	2026-06-18 21:05:51 (2 weeks ago)	Scanning/Probing (14)	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-05-31 12:06:04 (1 month ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇺🇸 factor1	2026-05-15 08:50:35 (1 month ago)	Fail2ban at churndash Reports Abuse.	Brute-Force Web App Attack
🇩🇪 LRob	2026-05-15 08:45:09 (1 month ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇳🇱 Mangelot Hosting	2026-05-15 08:19:48 (1 month ago)	(modsecurity) srv102 ModSecurity 185.195.233.203 (SE/Sweden/-): 10 in the last 3600 secs; Ports: ; ... show more (modsecurity) srv102 ModSecurity 185.195.233.203 (SE/Sweden/-): 10 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇧 80.83.30.29

🇬🇧 35.203.210.130

🇧🇬 185.253.159.70

🇺🇸 172.217.46.93

🇺🇸 162.216.150.117

🇧🇩 161.248.205.207

🇵🇰 160.250.115.109

🇵🇰 160.30.104.144

🇮🇩 103.63.24.25

🇧🇩 103.55.146.63

🇹🇷 95.5.118.68

🇺🇸 91.230.168.45

🇩🇪 82.165.175.206

🇺🇸 45.194.67.28

🇳🇱 45.148.10.157

🇺🇸 17.22.245.193

🇩🇪 213.209.159.114

🇧🇪 198.235.24.254

🇬🇧 193.163.125.67

🇮🇳 182.95.127.42