This IP address has been reported a total of
66
times from
39 distinct
sources.
193.122.196.222 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Switzerland
with 2
reports;
Argentina
with 1
report;
Germany
with 1
report.
The most common categories in these recent reports were:
Web App Attack
9
times;
Hacking
5
times;
Brute-Force
2
times;
Bad Web Bot
1
time;
Exploited Host
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[SunOct1821:30:12.3897142026][security2:error][pid124256:tid124274][client193.122.196.222:0]ModSecur ...
show more[SunOct1821:30:12.3897142026][security2:error][pid124256:tid124274][client193.122.196.222:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bhttpx\\\\\\\\b\|\\\\\\\\bnaabu\\\\\\\\b\|\\\\\\\\bffuf\\\\\\\\b\|\\\\\\\\bgobuster\\\\\\\\b\|\\\\\\\\bferoxbuster\\\\\\\\b\|\\\\\\\\bwfuzz\\\\\\\\b\|\\\\\\\\bjaeles\\\\\\\\b\|\\\\\\\\bzgrab2\?\\\\\\\\b\|\\\\\\\\bcommix\\\\\\\\b\|\\\\\\\\bxsstrike\\\\\\\\b\|\\\\\\\\bkiterunner\\\\\\\\b\|\(\?:\^\|[/]\)katana\(\?:/\|\\\\\\\\b\)\|\\\\\\\\bkr/\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"70\"][id\"338800\"][rev\"2\"][msg\"Atomicorp.comWAFRules:Blockedrecon/fuzzUA\"][severity\"CRITICAL\"][hostname\"mgpublishing.ch\"][uri\"/\"][unique_id\"atUeRJzaTgUsixKrjz7txAAAAQE\"]
show less
Violations:
________________________________________
Signature Violation
Signature: part=" db", ...
show moreViolations:
________________________________________
Signature Violation
Signature: part=" db", rgxp="\ db$"
Signature Description: Sensitive db files in URL
Matched Text: db
Found In: url
Offset: 9
Dictionary Name: Recommended for Blocking for Web Applications
show less
[FriOct0921:52:39.5175552026][security2:error][pid3061937:tid3062048][client193.122.196.222:0]ModSec ...
show more[FriOct0921:52:39.5175552026][security2:error][pid3061937:tid3062048][client193.122.196.222:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bhttpx\\\\\\\\b\|\\\\\\\\bnaabu\\\\\\\\b\|\\\\\\\\bffuf\\\\\\\\b\|\\\\\\\\bgobuster\\\\\\\\b\|\\\\\\\\bferoxbuster\\\\\\\\b\|\\\\\\\\bwfuzz\\\\\\\\b\|\\\\\\\\bjaeles\\\\\\\\b\|\\\\\\\\bzgrab2\?\\\\\\\\b\|\\\\\\\\bcommix\\\\\\\\b\|\\\\\\\\bxsstrike\\\\\\\\b\|\\\\\\\\bkiterunner\\\\\\\\b\|\(\?:\^\|[/]\)katana\(\?:/\|\\\\\\\\b\)\|\\\\\\\\bkr/\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"70\"][id\"338800\"][rev\"2\"][msg\"Atomicorp.comWAFRules:Blockedrecon/fuzzUA\"][severity\"CRITICAL\"][hostname\"vetreriaperletti.ch\"][uri\"/\"][unique_id\"aslGB-ToMj2_LCYT11I07gAAAMk\"]
show less
[193.122.196.222] triggered by honeypot on port [80], Timestamp [2026-08-13T23:07:50Z]METHOD=GET PAT ...
show more[193.122.196.222] triggered by honeypot on port [80], Timestamp [2026-08-13T23:07:50Z]METHOD=GET PATH=/ HTTP=HTTP/1.1 UA="httpx - Open-source project (github.com/projectdiscovery/httpx)" HOST="ticis.e
show less
TCP SYN flood detected by MikroTik RouterOS filter (sustained half-open connection rate from single ...
show moreTCP SYN flood detected by MikroTik RouterOS filter (sustained half-open connection rate from single source). Source automatically blacklisted.
show less
