AbuseIPDB » 186.193.242.128
186.193.242.128
This IP was reported 10 times. Confidence of
Abuse
is 13% : ?
ISP
ALTA REDE FIBER TELECOM LTDA
Usage Type
Fixed Line ISP
ASN
AS28260
Hostname(s)
242-193.186-128.dynamic.frinet.com.br
Domain Name
altarede.com.br
Country
🇧🇷
Brazil
City
Nova Friburgo, Rio de Janeiro
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 186.193.242.128 :
This IP address has been reported a total of
10
times from
9 distinct
sources.
186.193.242.128 was first reported on
November 1st 2022 , and the most recent report was
2 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-10-15 05:56:30
(2 days ago)
[Thu Oct 15 12:55:31.137994 2026] [security2:error] [pid 218424:tid 139627021194944] [client 186.193 ...
show more
[Thu Oct 15 12:55:31.137994 2026] [security2:error] [pid 218424:tid 139627021194944] [client 186.193.242.128:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "224"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: ?id= found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?id=474&start=20 HTTP/1.1 Request URI RAW = /index.php/profil/arsip-artikel?id=474&start=20 Request Basename = arsip-artikel"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "atBq0yRAIQTnDULP_x6ztgAAAAs"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[218462] [9yEEsloxfq8] [atBq0yRAIQTnDULP_x6ztgAAAAs] keep_alive=[
...
show less
Email Spam
Hacking
🇺🇸
TPI-Abuse
2026-09-26 03:03:09
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 186.193.242.128 (242-193.186-128.dynamic.frinet ...
show more
(mod_security) mod_security (id:210350) triggered by 186.193.242.128 (242-193.186-128.dynamic.frinet.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 23:03:05.441551 2026] [security2:error] [pid 18934:tid 18934] [client 186.193.242.128:50740] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||alpinexport.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "alpinexport.com"] [uri "/"] [unique_id "arc16TSQ8FFGfT7UVjLDBgAAAB0"], referer: https://drcheckerfree.online/dir/seo-link-building-services-7607
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-15 03:55:03
(2 months ago)
denied traffic to a honeypot network. destination port 24178.
Port Scan
Hacking
2026-08-15 03:27:56
(2 months ago)
unsolicited UDP packet to port 50032 (520 bytes)
Hacking
🇷🇸
Scan
2026-08-15 02:19:25
(2 months ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
2025-11-25 07:10:34
(10 months ago)
scanning http requests from known botnet
Web App Attack
2025-11-20 18:07:45
(10 months ago)
scanning http requests from known botnet
Web App Attack
2025-10-11 12:16:51
(1 year ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇪🇸
Global Cyber Police
2025-07-28 08:46:20
(1 year ago)
Malicious bot activity detected: Hitting honeypot page. Part of massive botnet.
DDoS Attack
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
IrisFlower
2022-11-01 03:52:33
(3 years ago)
Unauthorized connection attempt detected from IP address 186.193.242.128 to port 23 [J]
Port Scan
Hacking
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: