193.122.153.190
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Oracle Public Cloud
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS31898
- Domain Name
- oracleemaildelivery.com
- Country
- 🇺🇸 United States of America
- City
- Ashburn, Virginia
Abuse Reports
Total reports
445 from
345 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
|
Web App Attack Bad Web Bot | |
| 🇪🇸 IT Infraestructura |
Illegal Resource Access Request blocked URL: /.git/config(GET)
|
Bad Web Bot Web App Attack | |
| 🇧🇷 Peregrine |
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 193.122.153.190 104.22.93.30 - - [08/Nov/2026:02:38:54 -0300] "GET /.git/config HTTP/1.1" 404 18193
|
Bad Web Bot | |
| 🇵🇰 sbk97 (https://sayor.net) |
SAYOR honeypot: observed attack /.git/config
|
Brute-Force | |
| 🇫🇷 SpaceHost-Server |
|
Brute-Force Web App Attack | |
| 🇹🇷 eryilmaz |
Automated attack blocked by eryilmaz WAF/defense engine (level 1, source: siem_correlation, path: /)
|
Web App Attack Hacking | |
| 🇺🇸 leasj |
Observed Scanned 1 known-sensitive endpoint(s), e.g.: /.git/config.
|
Hacking Bad Web Bot Web App Attack | |
| 🇦🇺 aranguren.org |
|
Web App Attack | |
| Anonymous |
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
|
Web App Attack Bad Web Bot | |
| 🇨🇭 filou812 |
url tried is "/.git/config"
|
Web App Attack | |
| 🇭🇺 miszterx.hu |
XORP (haproxy): 2x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
|
Web App Attack | |
| 🇺🇸 solantex |
Unauthorized automated scanning and reconnaissance against Solantex resources. No crawl, scan or test permission has been granted to this source.
|
Web App Attack | |
| 🇺🇸 not_hanjo_mei |
Scanning for exposed credential files (.env, .git, cloud keys): 6 requests in 24h.
|
Hacking Web App Attack | |
| 🇪🇸 tutaim.com |
⛔ [09/11/26] This IP has been detected performing multiple attacks on websites (4 attempts blocked). Potential malicious activity.
|
Brute-Force SSH Web App Attack FTP Brute-Force | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-07.
|
Web App Attack SSH Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown