AbuseIPDB » 193.143.1.119

193.143.1.119 was found in our database!

This IP was reported 716 times. Confidence of Abuse is 0%: ?

ISP	Proton66 OOO
Usage Type	Data Center/Web Hosting/Transit
ASN	AS198953
Domain Name	proton66.ru
Country	Russian Federation
City	Saint Petersburg, St.-Petersburg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 193.143.1.119

Whois 193.143.1.119

IP Abuse Reports for 193.143.1.119:

This IP address has been reported a total of 716 times from 197 distinct sources. 193.143.1.119 was first reported on May 29th 2024, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
ISPLtd	2024-06-19 02:43:05 (7 months ago)	193.143.1.119 - - [18/Jun/2024:23:43:04 -0300] "GET /blog/wp-content/themes/.git/config ...	Hacking Hacking Web App Attack Web App Attack
Rizzy	2024-06-19 02:38:54 (7 months ago)	Multiple WAF Violations	Brute-Force Brute-Force Web App Attack Web App Attack
babahgroup	2024-06-18 22:10:57 (7 months ago)	(SECURITY-REASON) mod_security (id:210492) triggered by 193.143.1.119 (RU/Russia/-): 3 in the last 3 ... show more(SECURITY-REASON) mod_security (id:210492) triggered by 193.143.1.119 (RU/Russia/-): 3 in the last 3600 secs show less	Brute-Force Brute-Force
rdpguard.com	2024-06-18 19:43:36 (7 months ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force Brute-Force
Anonymous	2024-06-18 18:30:25 (7 months ago)	$f2bV_matches	Web App Attack Web App Attack
Anonymous	2024-06-18 18:29:37 (7 months ago)	fail2ban apache-modsecurity [msg "Restricted access based on geolocation rules."] [uri "/api/admin/v ... show morefail2ban apache-modsecurity [msg "Restricted access based on geolocation rules."] [uri "/api/admin/v4/.git/config"] show less	Web App Attack Web App Attack
FABIO EGAS	2024-06-18 18:22:12 (7 months ago)	(mod_security) mod_security triggered on hostname [redacted] 193.143.1.119 (RU/Russia/-)	SQL Injection SQL Injection
kais-universum.de	2024-06-18 17:05:02 (7 months ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host Exploited Host
4server	2024-06-18 16:40:00 (7 months ago)	[TueJun1817:49:25.8447382024][security2:error][pid192717:tid22737154209536][client193.143.1.119:0][c ... show more[TueJun1817:49:25.8447382024][security2:error][pid192717:tid22737154209536][client193.143.1.119:0][client193.143.1.119]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\$mozilla\^\\|mozilla/[45]\\\\\\\\.[1-9]\\|\^mozilla/4\\\\\\\\.0\$$\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"345\"][id\"330131\"][rev\"3\"][msg\"Atomicorp.comWAFRules:MaliciousBotBlocked$FakeMozillaUserAgentStringDetected$\"][severity\"CRITICAL\"][hostname\"hosting-ticino-svizzera.ch\"][uri\"/admin/.git/config\"][unique_id\"ZnGshc5lzLWyZBM94QOqMAAAAUs\"][TueJun1817:49:26.1621522024][security2:error][pid192599:tid22737615566592][client193.143.1.119:0][client193.143.1.119]ModSecurity:Accessdeniedwithcode403$phase2$.Matchof\"rx$windows-live-social-object-extractor-engine\\|nutch-$\"against\"REQUEST_HEADERS:User-Agent\"required.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"220\"][id\"330056\"][rev\"10\"][msg\"Atomicorp.comWAFRules:EmailHarvest show less	Blog Spam Blog Spam
Christopher Hughes	2024-06-18 16:30:38 (7 months ago)	193.143.1.119 - - [18/Jun/2024:17:30:37 +0100] "GET /admin/.git/config HTTP/1.1" 404 3663 "-" "Mozil ... show more193.143.1.119 - - [18/Jun/2024:17:30:37 +0100] "GET /admin/.git/config HTTP/1.1" 404 3663 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; http://www.google.com/bot.html)" ... show less	Web App Attack Web App Attack
Garden	2024-06-18 16:01:00 (7 months ago)	Scan for vulnerabilities.	Hacking Hacking Web App Attack Web App Attack
MPL	2024-06-18 14:54:18 (7 months ago)	tcp ports: 80,443 (476 or more attempts)	Port Scan Port Scan
MPL	2024-06-18 14:54:18 (7 months ago)	tcp ports: 80,443 (476 or more attempts)	Port Scan Port Scan
Savvii	2024-06-18 09:40:20 (7 months ago)	63 attempts against mh-misbehave-ban on onion	Brute-Force Brute-Force Bad Web Bot Bad Web Bot Web App Attack Web App Attack
mondor.ro	2024-06-18 08:58:26 (7 months ago)	Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 193.143.1.119, Reason: ... show moreCluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 193.143.1.119, Reason:[(mod_security) mod_security (id:210492) triggered by 193.143.1.119 (RU/Russia/-): 3 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs: show less	Port Scan Port Scan