AbuseIPDB » 193.174.89.19

Check an IP Address, Domain Name, or Subnet

e.g. 35.170.78.142, microsoft.com, or 5.188.10.0/24

193.174.89.19 was found in our database!

This IP was reported 530 times. Confidence of Abuse is 100%: ?

100%

ISP	Fachhochschule Muenster
Usage Type	University/College/School
Hostname(s)	fb02itsscan06.fh-muenster.de
Domain Name	fh-muenster.de
Country	Germany
City	Muenster, Nordrhein-Westfalen

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 193.174.89.19

Whois 193.174.89.19

IP Abuse Reports for 193.174.89.19:

This IP address has been reported a total of 530 times from 128 distinct sources. 193.174.89.19 was first reported on March 12th 2020, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
Zarla	20 Oct 2020	Scan or attack attempt on email service.	Email Spam Port Scan Brute-Force
Zarla	17 Oct 2020	Scan or attack attempt on email service.	Email Spam Port Scan Brute-Force
Lunik	17 Oct 2020	193.174.89.19 - - [07/Oct/2020:23:36:12 +0100] "GET /connector.sds HTTP/1.1" 444 0 "-" "Mozilla/5.0 ... show more193.174.89.19 - - [07/Oct/2020:23:36:12 +0100] "GET /connector.sds HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:81.0) Gecko/20100101 Firefox/81.0" ... show less	Web Spam Port Scan Web App Attack
rakkor	16 Oct 2020	2020/06/30 03:48:04 [error] 8086#8086: 13026 open() "/var/services/web/connector.sds" failed (2: No ... show more2020/06/30 03:48:04 [error] 8086#8086: 13026 open() "/var/services/web/connector.sds" failed (2: No such file or directory), client: 193.174.89.19, server: , request: "GET /connector.sds HTTP/1.1", host: "80.0.208.108" show less	Brute-Force Web App Attack
Anonymous	12 Oct 2020	[2020-10-09 09:03:16.6946] GET /connector.sds	Web App Attack
Lunik	10 Oct 2020	193.174.89.19 - - [07/Oct/2020:23:36:12 +0100] "GET /connector.sds HTTP/1.1" 444 0 "-" "Mozilla/5.0 ... show more193.174.89.19 - - [07/Oct/2020:23:36:12 +0100] "GET /connector.sds HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:81.0) Gecko/20100101 Firefox/81.0" ... show less	Web Spam Port Scan Web App Attack
Shadymint	10 Oct 2020	url probing	Web App Attack
SE-botlist	10 Oct 2020	Port scan denied	Port Scan
AvonleaConsulting	09 Oct 2020	Brute force attack stopped by firewall	Web Spam Brute-Force Web App Attack
JailSeed	09 Oct 2020	Tried to find non-existing directory/file on the server	Hacking Brute-Force Web App Attack
geot	09 Oct 2020	GET /gui/status HTTP/1.1 GET /connector.sds HTTP/1.1	Web App Attack
ChillScanner	09 Oct 2020	<HTTPS> TCP (SYN) 193.174.89.19:57890 -> port 443, len 40	Port Scan
iNetWorker	09 Oct 2020	firewall-block, port(s): 443/tcp	Port Scan
SaferWeb	09 Oct 2020	srvr1: (mod_security) mod_security (id:920350) triggered by 193.174.89.19 (DE/-/fb02itsscan06.fh-mue ... show moresrvr1: (mod_security) mod_security (id:920350) triggered by 193.174.89.19 (DE/-/fb02itsscan06.fh-muenster.de): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/10/09 13:52:30 [error] 3294#0: 8762 [client 193.174.89.19] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host' [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/connector.sds"] [unique_id "160224435099.652804"] [ref "o0,13v34,13"], client: 193.174.89.19, [redacted] request: "GET /connector.sds HTTP/1.1" [redacted] show less	Hacking Web App Attack
Anonymous	09 Oct 2020	login try	Port Scan