JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

193.187.95.80

Neutral Activity

Abuse confidence score ?

0% Low Risk

147 reports

8 reporters · latest 9 months ago

ISP	LLC IT BASIS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS50867
Domain Name	hostkey.ru
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

193.187.95.80 has been reported 147 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 193.187.95.80

Export CSV

This IP address has been reported a total of 147 times from 8 distinct sources. 193.187.95.80 was first reported on November 23rd 2020, and the most recent report was 9 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:18 (9 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-12-27 17:46:11 (9 months ago)	(mod_security) mod_security (id:225170) triggered by 193.187.95.80 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 193.187.95.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 12:46:04.154184 2025] [security2:error] [pid 12531:tid 12531] [client 193.187.95.80:63857] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|realclean.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "realclean.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVAbXP82Y9LSTKXscDfjxQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-25 00:18:38 (9 months ago)	(mod_security) mod_security (id:225170) triggered by 193.187.95.80 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 193.187.95.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 24 19:18:34.779649 2025] [security2:error] [pid 20762:tid 20762] [client 193.187.95.80:19351] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|latentpixel.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "latentpixel.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUyC2oiokQKRa65pMluDYgAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-24 18:56:04 (9 months ago)	(mod_security) mod_security (id:225170) triggered by 193.187.95.80 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 193.187.95.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 24 13:55:56.083796 2025] [security2:error] [pid 6373:tid 6373] [client 193.187.95.80:42701] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.indiahouseportland.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.indiahouseportland.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUw3PHLOfEK5MZ6By8MmRQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 sms.ru	2024-09-29 00:05:07 (2 years ago)	SMS pumping attack from foreign country	DDoS Attack
🇩🇪 SCHAPPY	2023-07-26 01:30:57 (3 years ago)	Mutliple attempts to access web resources unauthorized, HTTP code 403.	Web App Attack
🇩🇪 ps-center	2022-02-09 14:16:50 (4 years ago)	C1,Magento Bruteforce Login Attack POST /index.php/admin/	Web Spam Bad Web Bot Web App Attack
🇩🇪 ps-center	2022-02-07 12:42:26 (4 years ago)	SS5,Magento Bruteforce Login Attack POST /index.php/admin/	Web Spam Bad Web Bot Web App Attack
🇩🇪 ps-center	2022-02-03 13:30:07 (4 years ago)	SS5,Magento Bruteforce Login Attack POST /index.php/admin/	Web Spam Bad Web Bot Web App Attack
🇩🇪 TST	2022-01-31 17:27:13 (4 years ago)	hacker backend sniffing: /index.php/admin/	Hacking Web App Attack
🇩🇪 ps-center	2022-01-31 14:33:29 (4 years ago)	SS5,Magento Bruteforce Login Attack POST /index.php/admin/	Web Spam Bad Web Bot Web App Attack
🇳🇱 xyz.rip	2022-01-28 23:22:36 (4 years ago)	Magento Bruteforce Attempt...	Brute-Force Web App Attack
🇩🇪 ps-center	2022-01-27 02:00:36 (4 years ago)	C1,Magento Bruteforce Login Attack POST /index.php/admin/	Web Spam Bad Web Bot Web App Attack
🇩🇪 ps-center	2022-01-24 03:11:04 (4 years ago)	C1,Magento Bruteforce Login Attack POST /index.php/admin/	Web Spam Bad Web Bot Web App Attack
🇳🇱 xyz.rip	2022-01-21 07:59:33 (4 years ago)	Magento Bruteforce Attempt...	Brute-Force Web App Attack

Showing 1 to 15 of 147 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.218.206.100

🇳🇱 193.47.62.69

🇺🇸 172.252.119.168

🇺🇸 138.68.40.82

🇸🇮 102.220.161.84

🇺🇸 71.6.142.213

🇺🇸 66.132.172.100

🇳🇱 185.223.235.6

🇩🇪 185.220.101.3

🇸🇬 157.245.147.189

🇭🇰 152.32.239.15

🇭🇰 123.202.197.213

🇺🇸 64.62.156.60

🇺🇸 43.153.77.90

🇺🇸 35.236.77.201

🇫🇷 34.155.208.249

🇨🇭 20.250.43.245

🇹🇼 210.61.216.167

🇲🇽 187.212.33.78

🇳🇱 185.172.56.112