JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.142.146.238

193.142.146.238 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 0%: ?

ISP	ColocaTel Datacenter
Usage Type	Data Center/Web Hosting/Transit
ASN	AS213438
Domain Name	colocatel.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.142.146.238

Whois 193.142.146.238

IP Abuse Reports for 193.142.146.238:

This IP address has been reported a total of 60 times from 24 distinct sources. 193.142.146.238 was first reported on June 9th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2024-07-23 06:43:35 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 193.142.146.238 (relay-nl-3.anonymous.org.za): ... show more (mod_security) mod_security (id:210492) triggered by 193.142.146.238 (relay-nl-3.anonymous.org.za): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 23 02:43:28.006454 2024] [security2:error] [pid 8381:tid 8381] [client 193.142.146.238:55248] [client 193.142.146.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "circleinthesquare.org"] [uri "/wp-config.phpbak"] [unique_id "Zp9REOLuORGLAPOlgYdCjwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 feuerwehr-pischeldorf.at	2024-07-01 03:44:47 (1 year ago)	Jul 1 05:44:44 v2202301167543214332 sshd[1137999]: Invalid user developer from 193.142.146.238 port ... show more Jul 1 05:44:44 v2202301167543214332 sshd[1137999]: Invalid user developer from 193.142.146.238 port 35848 Jul 1 05:44:46 v2202301167543214332 sshd[1137999]: Failed password for invalid user developer from 193.142.146.238 port 35848 ssh2 Jul 1 05:44:45 v2202301167543214332 sshd[1138001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.142.146.238 Jul 1 05:44:44 v2202301167543214332 sshd[1138001]: Invalid user docker from 193.142.146.238 port 35868 Jul 1 05:44:47 v2202301167543214332 sshd[1138001]: Failed password for invalid user docker from 193.142.146.238 port 35868 ssh2 ... show less	DDoS Attack Ping of Death Web Spam Email Spam Brute-Force Bad Web Bot SSH
🇩🇪 ghostwarriors	2024-06-30 13:20:40 (1 year ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇳🇱 Linuxmalwarehuntingnl	2024-06-30 09:55:20 (1 year ago)	Unauthorized connection attempt	Brute-Force
🇩🇪 paravroum.com	2024-06-29 17:00:49 (1 year ago)	Too much (>20) of invalid login attempts	Bad Web Bot
🇦🇺 oncord	2024-06-29 16:36:19 (1 year ago)	Form spam	Web Spam
🇩🇪 NxtGenIT	2024-06-29 12:21:23 (1 year ago)	193.142.146.238 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Att ... show more 193.142.146.238 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attempt show less	Brute-Force
🇮🇹 Samsteve169	2024-06-28 16:09:42 (2 years ago)	Attempt from 193.142.146.238	Brute-Force SSH
🇨🇿 lp	2024-06-28 07:54:00 (2 years ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 193.142.146.238 2024-06-28T07:21:52+0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 193.142.146.238 2024-06-28T07:21:52+02:00 vpn Access-Reject 'administrator' station: 193.142.146.238 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇩🇪 NxtGenIT	2024-06-27 20:42:26 (2 years ago)	193.142.146.238 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Att ... show more 193.142.146.238 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attempt show less	Brute-Force
🇺🇸 TPI-Abuse	2024-06-27 19:14:31 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 193.142.146.238 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 193.142.146.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 27 15:14:24.910314 2024] [security2:error] [pid 23396] [client 193.142.146.238:34144] [client 193.142.146.238] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|propertysubscription.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "propertysubscription.com"] [uri "/propertysubscri.sql"] [unique_id "Zn26EPEp3c9ICfvFkODUFwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2024-06-27 17:08:35 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2024-06-27 15:07:16 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 193.142.146.238 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 193.142.146.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 27 11:07:09.461616 2024] [security2:error] [pid 30814] [client 193.142.146.238:51568] [client 193.142.146.238] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|market1st.bridgital.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "market1st.bridgital.com"] [uri "/market1st.sql"] [unique_id "Zn2AHS4H7VGWAMUeQpkjoQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2024-06-26 22:52:41 (2 years ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 193.142.146.238 2024-06-26T23:40:20+0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 193.142.146.238 2024-06-26T23:40:20+02:00 vpn Access-Reject 'administrator' station: 193.142.146.238 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-06-26 16:48:29 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 193.142.146.238 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 193.142.146.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 26 12:48:21.998664 2024] [security2:error] [pid 18354] [client 193.142.146.238:58786] [client 193.142.146.238] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|caribef.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "caribef.com"] [uri "/ef.sql"] [unique_id "ZnxGVeSSgs0S_UDpbIsr8wAAABc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 185.176.8.77

🇺🇸 48.214.53.66

🇳🇱 45.156.87.56

🇰🇷 34.50.22.8

🇳🇱 192.42.116.46

🇺🇸 108.26.160.190

🇦🇹 37.19.223.28

🇿🇦 4.221.162.168

🇧🇷 205.210.31.220

🇵🇰 202.163.81.81

🇿🇦 197.221.109.86

🇸🇳 196.207.218.146

🇲🇽 187.198.255.128

🇳🇱 176.65.148.244

🇳🇱 173.239.217.184

🇩🇪 165.227.130.231

🇸🇬 165.154.29.144

🇺🇸 148.153.250.103

🇺🇸 148.153.180.60

🇩🇪 128.1.123.126