JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 192.3.33.249

192.3.33.249 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 56%: ?

56%

ISP	HostPapa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Hostname(s)	192-3-33-249-host.colocrossing.com
Domain Name	hostpapa.com
Country	🇺🇸 United States of America
City	Buffalo, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 192.3.33.249

Whois 192.3.33.249

IP Abuse Reports for 192.3.33.249:

This IP address has been reported a total of 30 times from 13 distinct sources. 192.3.33.249 was first reported on July 14th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇿🇦 conure.sh	2026-10-15 15:47:42 (1 day ago)	csagent: score 20.0: secrets grab x2; 2 domain(s) in 0s	Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 22:03:14 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 192.3.33.249 (192-3-33-249-host.colocrossing.co ... show more (mod_security) mod_security (id:210492) triggered by 192.3.33.249 (192-3-33-249-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 18:03:07.365574 2026] [security2:error] [pid 31093:tid 31093] [client 192.3.33.249:50618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seiganji.ichi51e.net"] [uri "/.git/HEAD"] [unique_id "as_8GwbzeT4JEw_HnnoiawAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 12:15:18 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 192.3.33.249 (192-3-33-249-host.colocrossing.co ... show more (mod_security) mod_security (id:210492) triggered by 192.3.33.249 (192-3-33-249-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 08:15:00.649743 2026] [security2:error] [pid 26963:tid 26963] [client 192.3.33.249:48509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.tolenaar.com"] [uri "/.git/HEAD"] [unique_id "as9yRA8JjK4IvJmn035O6wAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 10:55:14 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 192.3.33.249 (192-3-33-249-host.colocrossing.co ... show more (mod_security) mod_security (id:210492) triggered by 192.3.33.249 (192-3-33-249-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 06:54:58.403934 2026] [security2:error] [pid 23477:tid 23477] [client 192.3.33.249:55121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.tmcbizdev.com"] [uri "/.git/HEAD"] [unique_id "as9fgtIpRhNCTCx8Nk9D6gAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 00:02:31 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 192.3.33.249 (192-3-33-249-host.colocrossing.co ... show more (mod_security) mod_security (id:210492) triggered by 192.3.33.249 (192-3-33-249-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 20:02:26.513244 2026] [security2:error] [pid 19612:tid 19612] [client 192.3.33.249:53368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.tek-front.com"] [uri "/.git/HEAD"] [unique_id "as7GktpV_Of0lRmZpF_nQwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-13 23:24:24 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 192.3.33.249 (192-3-33-249-host.colocrossing.co ... show more (mod_security) mod_security (id:210492) triggered by 192.3.33.249 (192-3-33-249-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 19:23:57.250619 2026] [security2:error] [pid 21460:tid 21460] [client 192.3.33.249:56963] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cbrtome.tecnoconce.com"] [uri "/.git/HEAD"] [unique_id "as69jV95uwwHnYU0D43OkAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-13 20:41:35 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 192.3.33.249 (192-3-33-249-host.colocrossing.co ... show more (mod_security) mod_security (id:210492) triggered by 192.3.33.249 (192-3-33-249-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 16:41:25.861069 2026] [security2:error] [pid 12405:tid 12405] [client 192.3.33.249:34700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.tausiet.com"] [uri "/.git/HEAD"] [unique_id "as6XdWcAOqoxBzRU-zNuKQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 todix	2026-10-13 11:30:18 (3 days ago)	"GET /.git/HEAD HTTP/1.1" 403 6316 "-" "Python-urllib/3.10"	Web App Attack
🇳🇱 e.fierstra	2026-10-13 08:23:26 (3 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇮🇩 rvsdi	2026-10-13 05:24:33 (3 days ago)	[OGWAF] path_traversal attack blocked \| severity: high \| GET /.git/HEAD \| UA: Python-urllib/3.10	Hacking Web App Attack
🇳🇱 MyGlobalFlowers	2026-10-13 01:55:16 (3 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-10-12 21:01:56 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 192.3.33.249 (192-3-33-249-host.colocrossing.co ... show more (mod_security) mod_security (id:210492) triggered by 192.3.33.249 (192-3-33-249-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 17:01:47.575607 2026] [security2:error] [pid 8817:tid 8849] [client 192.3.33.249:38896] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.stonyp.com"] [uri "/.git/HEAD"] [unique_id "as1Ku5kaFVZ8nAwuWFwvhwAAAQU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-12 07:25:08 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 192.3.33.249 (192-3-33-249-host.colocrossing.co ... show more (mod_security) mod_security (id:210492) triggered by 192.3.33.249 (192-3-33-249-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 03:25:01.392987 2026] [security2:error] [pid 12274:tid 12274] [client 192.3.33.249:37709] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.casabella-khaolak.com"] [uri "/.git/HEAD"] [unique_id "asyLTVVlPSk-zcSkxsJjdgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-11 13:20:19 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 192.3.33.249 (192-3-33-249-host.colocrossing.co ... show more (mod_security) mod_security (id:210492) triggered by 192.3.33.249 (192-3-33-249-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 09:20:11.319980 2026] [security2:error] [pid 25893:tid 25893] [client 192.3.33.249:60232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.n3fjp.com"] [uri "/.git/HEAD"] [unique_id "asuNC7eGU0Ol9lCgM-hHSQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-11 08:42:29 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 192.3.33.249 (192-3-33-249-host.colocrossing.co ... show more (mod_security) mod_security (id:210492) triggered by 192.3.33.249 (192-3-33-249-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 04:42:11.082859 2026] [security2:error] [pid 17556:tid 17556] [client 192.3.33.249:44989] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.disenowebprofesional.com.spyasociados.com"] [uri "/.git/HEAD"] [unique_id "astL48-klU45Ij71YozX0gAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 202.63.202.229

🇻🇳 103.167.89.222

🇫🇷 172.71.131.190

🇮🇳 122.165.162.117

🇷🇺 85.175.72.188

🇬🇧 77.67.26.75

🇳🇱 20.160.86.7

🇨🇳 14.18.236.71

🇳🇱 192.42.116.98

🇦🇷 186.130.113.154

🇮🇩 163.7.1.218

🇰🇷 119.192.128.163

🇳🇱 109.160.32.163

🇨🇳 36.33.167.165

🇺🇸 20.65.170.49

🇷🇴 2.57.121.112

🇻🇪 201.249.192.30

🇷🇴 193.32.162.160

🇳🇱 85.11.167.7

🇷🇴 80.94.92.179