JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.233.138.168

193.233.138.168 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 0%: ?

ISP	AEZA GROUP LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210644
Domain Name	aeza.ru
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.233.138.168

Whois 193.233.138.168

IP Abuse Reports for 193.233.138.168:

This IP address has been reported a total of 13 times from 7 distinct sources. 193.233.138.168 was first reported on April 12th 2024, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-09-22 06:21:00 (9 months ago)	"Undesired, excess traffic against library/education infrastructure"	Brute-Force
🇬🇧 CrystalMaker	2025-08-29 16:17:47 (9 months ago)	Vulnerability scan - GET /t/having-some-problems-uninstalling-the-network-manager/499893	Hacking
🇺🇸 TPI-Abuse	2025-07-13 13:11:16 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 193.233.138.168 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 193.233.138.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 13 09:11:09.431584 2025] [security2:error] [pid 15891:tid 15891] [client 193.233.138.168:55071] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kingstoneproperties.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kingstoneproperties.com"] [uri "/[email protected]"] [unique_id "aHOwbSSw1omDNm5Do_f54AAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-06-19 03:25:05 (1 year ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 nationaleventpros.com	2025-04-17 12:02:54 (1 year ago)	WordPress login attempt	Brute-Force
🇦🇺 MAGIC	2024-11-22 07:06:34 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2024-11-09 19:02:00 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 193.233.138.168 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 193.233.138.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 09 14:01:50.180711 2024] [security2:error] [pid 1411781:tid 1411781] [client 193.233.138.168:25095] [client 193.233.138.168] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Grissom-II/Thumbs.db"] [unique_id "Zy-xniTZzaEiGLKNefFz8gAAABo"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Grissom-II/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-10-06 14:33:51 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-09-18 20:40:07 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇦🇺 MAGIC	2024-06-08 01:07:14 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇨🇭 backslash	2024-05-22 23:35:02 (2 years ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 TPI-Abuse	2024-04-14 02:38:09 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 193.233.138.168 (193-233-138-168.zen-cloud.com) ... show more (mod_security) mod_security (id:210730) triggered by 193.233.138.168 (193-233-138-168.zen-cloud.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 13 22:38:02.426168 2024] [security2:error] [pid 20690] [client 193.233.138.168:48119] [client 193.233.138.168] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Steelcase/pics/LEAP/Thumbs.db"] [unique_id "ZhtBipLAyNNzePAQzMzhZgAAABE"], referer: https://vitalitywebb.com/backstore/Steelcase/pics/LEAP/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2024-04-12 05:35:05 (2 years ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 61.76.112.4

🇹🇼 211.22.166.107

🇳🇱 204.76.203.231

🇳🇱 195.178.110.199

🇺🇸 162.216.150.253

🇰🇷 150.109.241.177

🇭🇰 112.119.21.245

🇳🇱 91.92.42.147

🇸🇬 84.247.151.140

🇳🇱 45.148.10.141

🇮🇹 4.232.94.242

🇺🇸 162.216.149.210

🇨🇳 124.31.105.72

🇺🇸 68.193.185.137

🇺🇸 23.227.187.220

🇺🇸 3.83.245.221

🇺🇾 200.71.13.21

🇺🇸 162.216.150.26

🇺🇸 135.237.126.251

🇳🇱 64.188.77.26