AbuseIPDB » 193.169.255.204

Check an IP Address, Domain Name, or Subnet

e.g. 3.234.244.105, microsoft.com, or 5.188.10.0/24

193.169.255.204 was found in our database!

This IP was reported 790 times. Confidence of Abuse is 100%: ?

100%

ISP	Fufo Studio
Usage Type	Data Center/Web Hosting/Transit
Domain Name	astrovm.net
Country	Poland
City	Olsztyn, Warminsko-mazurskie

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 193.169.255.204

Whois 193.169.255.204

IP Abuse Reports for 193.169.255.204:

This IP address has been reported a total of 790 times from 139 distinct sources. 193.169.255.204 was first reported on June 3rd 2021, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
Anonymous	05 Oct 2021	Blocked by firewall for Directory Traversal - wp-config.php in query string: img=..%2Fwp-config.php ... show moreBlocked by firewall for Directory Traversal - wp-config.php in query string: img=..%2Fwp-config.php at http://****/wp-admin/admin-ajax.php?action=kbslider_show_image&img=..%2Fwp-config.php 05/10/2021 07:02:13 (2 hours 10 mins ago) IP: 193.169.255.204 Hostname: 193.169.255.204 Human/Bot: Human Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0 show less	Hacking Web App Attack
nextweb	02 Oct 2021	(mod_security) mod_security (id:210492) triggered by 193.169.255.204 (PL/Poland/-/-/-/[AS213010 Giga ... show more(mod_security) mod_security (id:210492) triggered by 193.169.255.204 (PL/Poland/-/-/-/[AS213010 GigaHostingServices OU]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
Harbi	24 Sep 2021	brute force attempts, scan for backdoor	Hacking SQL Injection Brute-Force Web App Attack
factor1	23 Sep 2021	Bruteforce and Hacking attempts.	Hacking Brute-Force
el-brujo	21 Sep 2021	21/Sep/2021:07:10:09 +0200Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 193.169 ... show more21/Sep/2021:07:10:09 +0200Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 193.169.255.204] ModSecurity: Warning. Pattern match "(?i)(?:\\\\\\\\x5c\|(?:%(?:c(?:0%(?:[2aq]f\|5c\|9v)\|1%(?:[19p]c\|8s\|af))\|2(?:5(?:c(?:0%25af\|1%259c)\|2f\|5c)\|%46\|f)\|(?:(?:f(?:8%8)?0%8\|e)0%80%a\|bg%q)f\|%3(?:2(?:%(?:%6\|4)6\|F)\|5%%63)\|u(?:221[56]\|002f\|EFC8\|F025)\|1u\|5c)\|0x(?:2f\|5c)\|\\\\\\\\/))(?:%(?:(?:f(?:(?:c%80\|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "50"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: %2F..%2F found within REQUEST_URI_RAW: /wp-content/plugins/media-library-assistant/includes/mla-file-downloader.php?mla_download_type=text%2Fhtml&mla_download_file=..%2F..%2F..%2F..%2Fwp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_ ... show less	Hacking Web App Attack
baku.hosting	18 Sep 2021	(mod_security) mod_security (id:949110) triggered by 193.169.255.204 (PL/Poland/-): 8 in the last 36 ... show more(mod_security) mod_security (id:949110) triggered by 193.169.255.204 (PL/Poland/-): 8 in the last 3600 secs show less	Brute-Force
Clapper	18 Sep 2021	(mod_security) mod_security (id:949110) triggered by 193.169.255.204 (PL/Poland/-): 5 in the last 14 ... show more(mod_security) mod_security (id:949110) triggered by 193.169.255.204 (PL/Poland/-): 5 in the last 14400 secs; ID: zul show less	Brute-Force Bad Web Bot
Clapper	17 Sep 2021	(mod_security) mod_security (id:949110) triggered by 193.169.255.204 (PL/Poland/-): 5 in the last 14 ... show more(mod_security) mod_security (id:949110) triggered by 193.169.255.204 (PL/Poland/-): 5 in the last 14400 secs; ID: DAN show less	Brute-Force Bad Web Bot
Major Hostility	16 Sep 2021	"GET /wp-content/plugins/media-library-assistant/includes/mla-file-downloader.php?mla_download_type= ... show more"GET /wp-content/plugins/media-library-assistant/includes/mla-file-downloader.php?mla_download_type=text%2Fhtml&mla_download_file=..%2F..%2F..%2F..%2Fwp-config.php HTTP/1.1" 404 "GET /wp-content/plugins/worprees-plugin-bug-dar/ultimate-member/includes/admin/core/class-admin-upgrade.php?pack=..%2F..%2F..%2F..%2F..%2F..%2F..%2Fwp-config.php HTTP/1.1" 404 show less	Web App Attack
el-brujo	15 Sep 2021	16/Sep/2021:05:24:36 +0200Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 193.169 ... show more16/Sep/2021:05:24:36 +0200Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 193.169.255.204] ModSecurity: Warning. Pattern match "(?i)(?:\\\\\\\\x5c\|(?:%(?:c(?:0%(?:[2aq]f\|5c\|9v)\|1%(?:[19p]c\|8s\|af))\|2(?:5(?:c(?:0%25af\|1%259c)\|2f\|5c)\|%46\|f)\|(?:(?:f(?:8%8)?0%8\|e)0%80%a\|bg%q)f\|%3(?:2(?:%(?:%6\|4)6\|F)\|5%%63)\|u(?:221[56]\|002f\|EFC8\|F025)\|1u\|5c)\|0x(?:2f\|5c)\|\\\\\\\\/))(?:%(?:(?:f(?:(?:c%80\|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "50"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: %2F..%2F found within REQUEST_URI_RAW: /wp-content/plugins/media-library-assistant/includes/mla-file-downloader.php?mla_download_type=text%2Fhtml&mla_download_file=..%2F..%2F..%2F..%2Fwp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_ ... show less	Hacking Web App Attack
security.rdmc.fr	14 Sep 2021	Automatic report - Banned IP Access	Web App Attack
Apache	12 Sep 2021	(mod_security) mod_security (id:210492) triggered by 193.169.255.204 (PL/Poland/-): 5 in the last 30 ... show more(mod_security) mod_security (id:210492) triggered by 193.169.255.204 (PL/Poland/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
nextweb	12 Sep 2021	(mod_security) mod_security (id:210492) triggered by 193.169.255.204 (PL/Poland/-/-/-/[AS213010 Giga ... show more(mod_security) mod_security (id:210492) triggered by 193.169.255.204 (PL/Poland/-/-/-/[AS213010 GigaHostingServices OU]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
4server	08 Sep 2021	[WedSep0815:32:55.2762192021][:error][pid7986:tid47578586744576][client193.169.255.204:60812][client ... show more[WedSep0815:32:55.2762192021][:error][pid7986:tid47578586744576][client193.169.255.204:60812][client193.169.255.204]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\(\?:\\\\\\\\x5c\\|\(\?:%\(\?:2\(\?:5\(\?:2f\\|5c\)\\|F\\|f\)\\|c\(\?:0%\(\?:9v\\|af\)\\|1\)\\|u\(\?:221[56]\\|002f\)\\|2\(\?:F\\|F\)\\|e0??\\|1u\\|5c\)\\|\\\\\\\\/\)\)\(\?:%\(\?:2\(\?:\(\?:52\)\?e\\|E\)\\|\(\?:e0%8\\|c\)0?\\|u\(\?:002e\\|2024\)\\|2\(\?:E\\|E\)\)\\|\\\\\\\\.\){2}\(\?:\\\\\\\\x5c\\|\(\?:%\(\?:2\(\?:5\(\?:2f\\|5c\)\\|F\\|f\)\\|c\(\?:0%\(\?:9v\\|af\)\\|1\)\\|...\"atARGS:mla_download_file.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"199\"][id\"340007\"][rev\"47\"][msg\"Atomicorp.comWAFRules:GenericPathRecursiondenied\"][data\"/../\,ARGS:mla_download_file\"][severity\"CRITICAL\"][hostname\"yex-swiss.ch\"][uri\"/wp-content/plugins/media-library-assistant/includes/mla-file-downloader.php\"][unique_id\"YTi7hxmSTex0woo3UdrTqgAAAMo\"][WedSep0815:32:59.2094182021][:error][pid7986:tid47578586744576][client193.169.255.204:60812][cli show less	Port Scan Brute-Force Web App Attack
MortimerCat	08 Sep 2021	Trying to access wordpress plugins	Web App Attack