JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.233.137.70

193.233.137.70 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 0%: ?

ISP	AEZA GROUP LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210644
Domain Name	aeza.ru
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.233.137.70

Whois 193.233.137.70

IP Abuse Reports for 193.233.137.70:

This IP address has been reported a total of 33 times from 13 distinct sources. 193.233.137.70 was first reported on November 30th 2021, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 oncord	2025-02-20 14:43:34 (1 year ago)	Form spam	Web Spam
Anonymous	2025-02-18 20:44:31 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 oncord	2025-02-17 16:09:22 (1 year ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2025-02-06 21:51:31 (1 year ago)	(mod_security) mod_security (id:217280) triggered by 193.233.137.70 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:217280) triggered by 193.233.137.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 06 16:51:23.370707 2025] [security2:error] [pid 26936:tid 26936] [client 193.233.137.70:40225] [client 193.233.137.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|www.namisushionline.com\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.namisushionline.com"] [uri "/action.php"] [unique_id "Z6Uu2_ERr-w3VNVwQ48qWgAAAAA"], referer: https://www.namisushionline.com show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 oncord	2025-02-05 00:46:49 (1 year ago)	Form spam	Web Spam
Anonymous	2025-01-20 05:04:14 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 oncord	2024-12-26 04:08:41 (1 year ago)	Form spam	Web Spam
Anonymous	2024-12-24 22:28:34 (1 year ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 oncord	2024-12-22 11:01:33 (1 year ago)	Form spam	Web Spam
Anonymous	2024-12-19 03:38:27 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 oncord	2024-12-18 04:02:21 (1 year ago)	Form spam	Web Spam
🇩🇪 nyuuzyou	2024-12-14 17:55:32 (1 year ago)	Intensive scraping: /web?s=free%20dominos%20pizza%20code%20Stotesbury&country=ga-ga&scraper=yep. Use ... show more Intensive scraping: /web?s=free%20dominos%20pizza%20code%20Stotesbury&country=ga-ga&scraper=yep. User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36. show less	Bad Web Bot
🇺🇸 TPI-Abuse	2024-12-07 05:10:52 (1 year ago)	(mod_security) mod_security (id:217280) triggered by 193.233.137.70 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:217280) triggered by 193.233.137.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 07 00:10:44.828492 2024] [security2:error] [pid 1409:tid 1409] [client 193.233.137.70:64009] [client 193.233.137.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|sandersonpropertyimprovements.com\|F\|2"] [data "Matched Data: post found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "sandersonpropertyimprovements.com"] [uri "/php/sendmail.php"] [unique_id "Z1PY1Iv_VOfXVJCCD1gDvQAAAAc"], referer: http://sandersonpropertyimprovements.com/contact.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-12-06 02:42:12 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 193.233.137.70 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 193.233.137.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 05 21:42:05.993926 2024] [security2:error] [pid 1182910:tid 1182910] [client 193.233.137.70:29863] [client 193.233.137.70] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|puduspoems.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "puduspoems.com"] [uri "/web/20140107222105/http:/wwp.icq.com/scripts/WWPMsg.dll"] [unique_id "Z1JkfS2QxRW591wFzhZvWwAAAAc"], referer: http://puduspoems.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 nyuuzyou	2024-11-17 11:11:12 (1 year ago)	Intensive scraping: /web?s=Fitness%20Coach%20for%20teenagers%20Bellefonte&country=ga-ga&scraper=marg ... show more Intensive scraping: /web?s=Fitness%20Coach%20for%20teenagers%20Bellefonte&country=ga-ga&scraper=marginalia. User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36. show less	Bad Web Bot

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇼 168.253.248.179

🇳🇱 159.65.200.161

🇺🇸 134.122.21.135

🇸🇬 86.107.104.231

🇷🇴 2.57.122.238

🇰🇷 222.239.251.12

🇦🇷 186.108.247.58

🇦🇷 186.19.45.212

🇮🇳 117.99.131.125

🇺🇸 69.167.32.8

🇮🇳 64.227.151.51

🇭🇰 47.238.251.89

🇭🇰 43.230.170.201

🇺🇸 209.160.115.10

🇳🇵 203.9.211.200

🇺🇸 173.236.138.212

🇺🇸 170.106.72.93

🇰🇷 158.180.78.62

🇸🇬 139.59.105.208

🇨🇳 120.52.92.197