AbuseIPDB » 193.233.140.75

193.233.140.75 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 27%: ?

27%

ISP	TrafficTransitSolution LLC
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	undefined.hostname.localhost
Domain Name	traffictransitsolution.us
Country	United States of America
City	Tukwila, Washington

Report 193.233.140.75

Whois 193.233.140.75

IP Abuse Reports for 193.233.140.75:

This IP address has been reported a total of 15 times from 9 distinct sources. 193.233.140.75 was first reported on March 1st 2023, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-12-05 09:03:19 (3 days ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
TPI-Abuse	2024-12-04 12:01:29 (4 days ago)	(mod_security) mod_security (id:210730) triggered by 193.233.140.75 (undefined.hostname.localhost): ... show more(mod_security) mod_security (id:210730) triggered by 193.233.140.75 (undefined.hostname.localhost): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 04 07:01:23.293506 2024] [security2:error] [pid 11483:tid 11561] [client 193.233.140.75:60939] [client 193.233.140.75] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|jeflis.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jeflis.com"] [uri "/mailto:[email protected]"] [unique_id "Z1BEk6Y4V0rUoHzeU66HegAAAQY"], referer: https://www.jeflis.com/ show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-11-30 03:28:19 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 193.233.140.75 (undefined.hostname.localhost): ... show more(mod_security) mod_security (id:225170) triggered by 193.233.140.75 (undefined.hostname.localhost): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 29 22:28:13.436366 2024] [security2:error] [pid 25456:tid 25481] [client 193.233.140.75:35253] [client 193.233.140.75] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|paidsearchconsulting.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paidsearchconsulting.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z0qGTS46ZYHZIqVZbt72XwAAABc"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
statistics indonesia	2024-11-29 20:42:42 (1 week ago)	XML RPC Scan Activities	Brute-Force Web App Attack
TPI-Abuse	2024-11-17 03:59:44 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 193.233.140.75 (undefined.hostname.localhost): ... show more(mod_security) mod_security (id:225170) triggered by 193.233.140.75 (undefined.hostname.localhost): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 16 22:59:38.818833 2024] [security2:error] [pid 18061:tid 18154] [client 193.233.140.75:25773] [client 193.233.140.75] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|fostexlaw.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fostexlaw.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZzlqKls7PfnwVtWWxQgMaQAAAY8"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
el-brujo	2024-11-15 06:12:33 (3 weeks ago)	Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: elhacker.net userAgent: Apache-HttpC ... show moreCloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: elhacker.net userAgent: Apache-HttpClient/4.5.13 (Java/11.0.24) Action: managed_challenge Source: firewallManaged ASN Description: PUREVOLTAGE-INC Country: RU Method: POST Timestamp: 2024-11-15T06:12:33Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
TPI-Abuse	2024-11-11 16:54:27 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 193.233.140.75 (undefined.hostname.localhost): ... show more(mod_security) mod_security (id:210730) triggered by 193.233.140.75 (undefined.hostname.localhost): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 11 11:54:22.766703 2024] [security2:error] [pid 2987393:tid 2987393] [client 193.233.140.75:48187] [client 193.233.140.75] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mtreedconstruction.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mtreedconstruction.com"] [uri "/mailto:[email protected]"] [unique_id "ZzI2vtm5ypQI4AQpN7ExpAAAABI"], referer: http://www.mtreedconstruction.com/ show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-11-03 03:43:43 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 193.233.140.75 (undefined.hostname.localhost): ... show more(mod_security) mod_security (id:210730) triggered by 193.233.140.75 (undefined.hostname.localhost): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 02 23:43:36.128984 2024] [security2:error] [pid 1809728:tid 1809728] [client 193.233.140.75:22979] [client 193.233.140.75] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Apex II/Thumbs.db"] [unique_id "ZybxaP4tLaAVKPra-kCEsAAAAAo"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Apex%20II/ show less	Brute-Force Bad Web Bot Web App Attack
Xuan Can	2024-09-02 21:07:07 (3 months ago)	(mod_security) mod_security (id:6) triggered by 193.233.140.75 (RU/Russia/undefined.hostname.localho ... show more(mod_security) mod_security (id:6) triggered by 193.233.140.75 (RU/Russia/undefined.hostname.localhost): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 03 04:07:01.719349 2024] [security2:error] [pid 29388:tid 29439] [client 193.233.140.75:46765] [client 193.233.140.75] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "63"] [id "6"] [severity "CRITICAL"] [hostname "sieuthimaychu.vn"] [uri "/wp-login.php"] [unique_id "ZtYo9cgbcAV2bLYa9zbnygAAAFg"] show less	Brute-Force SSH
Anonymous	2024-06-30 11:44:31 (5 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
backslash	2024-05-16 00:35:02 (6 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
backslash	2024-04-10 17:05:03 (7 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
www.narsol.org	2023-09-18 11:32:05 (1 year ago)	Sep 18 07:32:03 do1 wordpress(narsol.org)[2004801]: Authentication attempt for unknown user media fr ... show moreSep 18 07:32:03 do1 wordpress(narsol.org)[2004801]: Authentication attempt for unknown user media from 193.233.140.75 Sep 18 07:32:04 do1 wordpress(narsol.org)[2274245]: Authentication attempt for unknown user media from 193.233.140.75 ... show less	DDoS Attack Web App Attack
niceshops.com	2023-07-14 00:00:19 (1 year ago)	Web Attack multi (Jul 23 23:43:20 Matching rules: Detect possible SQL injection - E.g. Waitfor .. D ... show moreWeb Attack multi (Jul 23 23:43:20 Matching rules: Detect possible SQL injection - E.g. Waitfor .. Delay ) show less	SQL Injection Brute-Force Bad Web Bot Web App Attack
Anonymous	2023-03-01 13:17:20 (1 year ago)	Malicious request detected Hacking activity detected	Hacking Brute-Force Web App Attack