AbuseIPDB » 187.19.231.220
187.19.231.220
This IP was reported 9 times. Confidence of
Abuse
is 12% : ?
ISP
BRISANET SERVICOS DE TELECOMUNICACOES S.A
Usage Type
Fixed Line ISP
ASN
AS28126
Hostname(s)
187-19-231-220-tmp.static.brisanet.net.br
Domain Name
brisanet.com.br
Country
🇧🇷
Brazil
City
Catu, Bahia
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 187.19.231.220 :
This IP address has been reported a total of
9
times from
8 distinct
sources.
187.19.231.220 was first reported on
August 21st 2025 , and the most recent report was
1 hour ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-09-30 15:48:43
(1 hour ago)
(mod_security) mod_security (id:210350) triggered by 187.19.231.220 (187-19-231-220-tmp.static.brisa ...
show more
(mod_security) mod_security (id:210350) triggered by 187.19.231.220 (187-19-231-220-tmp.static.brisanet.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 11:48:38.449984 2026] [security2:error] [pid 17346:tid 17346] [client 187.19.231.220:42056] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gisur.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gisur.com"] [uri "/"] [unique_id "ar0vVnv44go2RxV_ixTwZQAAAA8"], referer: https://seopbnbacklinks.store/dir/backlink-outreach-services-82088
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-14 03:00:14
(1 month ago)
Large-scale coordinated botnet (1.2M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a ...
show more
Large-scale coordinated botnet (1.2M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]) employed by Angara Technologies Group | Attack Signature Blocked: /wishlist/index/add/product/11204/form_key/SaXl5uTb77CdBd97/ | UA: Mozilla/5.0 (Linux; Android 4.4.2) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/54.0.879.0 Safari/532.0 | (Magento Site)
show less
Hacking
Bad Web Bot
Web App Attack
🇫🇷
MatStef132
2026-07-15 21:06:40
(2 months ago)
MatShield L7: blocked on mathost.eu (ua-quarantined)
Bad Web Bot
2026-01-15 09:20:18
(8 months ago)
Unauthorized connection attempt on Port 23
Port Scan
Hacking
Exploited Host
2025-11-19 03:54:55
(10 months ago)
scanning http requests from known botnet
Web App Attack
2025-11-15 06:32:07
(10 months ago)
scanning http requests from known botnet
Web App Attack
🇨🇭
backslash
2025-11-05 18:25:22
(10 months ago)
block ruleset A5EE6C8F745F0934168261886A3817E5C386412A
Bad Web Bot
2025-11-04 21:42:26
(10 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.04 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.04 is noted in report timestamp
show less
Hacking
Brute-Force
🇳🇱
exxos
2025-08-21 07:03:01
(1 year ago)
http-no-verb
Hacking
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: