JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.239.176.180

193.239.176.180 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 15%: ?

15%

ISP	H Development & Management SRL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS48955
Domain Name	ip.ro
Country	🇷🇴 Romania
City	Bucharest, Bucharest

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.239.176.180

Whois 193.239.176.180

IP Abuse Reports for 193.239.176.180:

This IP address has been reported a total of 15 times from 10 distinct sources. 193.239.176.180 was first reported on July 31st 2025, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇪 AutosOnShow	2026-06-26 15:00:09 (9 hours ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-06-26 14:59:08.634 \|	Web App Attack
🇮🇪 AutosOnShow	2026-06-25 10:23:05 (1 day ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-06-25 10:22:28.696 \|	Web App Attack
🇮🇪 AutosOnShow	2026-05-25 13:16:05 (1 month ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-05-25 13:15:43.567 \|	Web App Attack
Anonymous	2026-05-22 13:49:21 (1 month ago)	LH-Watcher: FAKE_ID [Fake Googlebot]	Bad Web Bot
🇨🇭 Origon	2026-05-02 00:45:19 (1 month ago)	http-bad-user-agent - IP: 193.239.176.180 - time="2026-05-02T02:45:18+02:00" level=info msg="(555f6 ... show more http-bad-user-agent - IP: 193.239.176.180 - time="2026-05-02T02:45:18+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 193.239.176.180 (RO/48955) : 4h ban on Ip 193.239.176.180" module=db show less	Bad Web Bot
🇮🇪 Jim Keir	2026-03-01 00:55:26 (3 months ago)	2026-03-01 00:55:25 193.239.176.180 File scanning, blocking 193.239.176.180 for 5 minutes	Web App Attack
🇨🇳 ThreatBook.io	2026-01-29 00:54:40 (4 months ago)	2026-01-28 11:11:12 /.env 2026-01-28 11:11:12 /,{"body":"0x%5B%5D=androxgh0st","content_type":"appli ... show more 2026-01-28 11:11:12 /.env 2026-01-28 11:11:12 /,{"body":"0x%5B%5D=androxgh0st","content_type":"application/x-www-form-urlencoded","header":{"Accept":["/"],"Accept-Encoding":["gzip"],"Connection":["close"],"Content-Length":["20"],"Content-Type":["application/x-www-form-urlencoded"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"]},"host":"44.243.95.195","method":"POST","proto":"HTTP/1.1","remote_addr":"193.239.176.180:36429","status_code":200,"url":"/","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"} show less	Web App Attack
🇮🇪 AutosOnShow	2026-01-14 10:56:03 (5 months ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-01-14 10:55:05.230 \|	Web App Attack
🇮🇹 mgarofano80	2025-12-24 03:31:23 (6 months ago)		Brute-Force Web App Attack
🇮🇪 AutosOnShow	2025-12-20 16:44:04 (6 months ago)	blocked for webapp attack \| path requested: /.env \| seen at 2025-12-20 16:43:13.995 \|	Web App Attack
🇮🇪 Jim Keir	2025-11-30 21:18:42 (6 months ago)	2025-11-30 21:18:42 193.239.176.180 File scanning, blocking 193.239.176.180 for 5 minutes	Web App Attack
🇺🇸 ne1for23	2025-11-29 13:40:56 (6 months ago)	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 193.239.176.180 - - [29/Nov/2025:13:40:56 +0000] "GET /.env HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" "-" show less	Hacking
🇺🇸 dpinse	2025-10-07 20:11:28 (8 months ago)	teler detected Directory Bruteforce against resource /.env from 193.239.176.180	Bad Web Bot
🇨🇴 j458rjqwi348fhjq46	2025-08-06 13:08:54 (10 months ago)	Malicious IP detected by WAF with anomaly score 10.0. Attack types: Suspicious URL detected (extende ... show more Malicious IP detected by WAF with anomaly score 10.0. Attack types: Suspicious URL detected (extended rules), Exposure of environment file (.env), Timestamp deviates by 1.8 hours. Activity: 174 requests to 2 URLs. Period: 2025-08-06 07:51:27 - 2025-08-06 07:51:27 (America/Bogota). Origin: RO. Source: Automated WAF log analysis. show less	Hacking Web App Attack
🇵🇭 Lorenzo Arcinue	2025-07-31 04:57:23 (10 months ago)	Aggressive Web Scan	Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 185.180.141.35

🇷🇺 94.159.44.234

🇺🇸 64.62.197.159

🇧🇷 179.98.117.114

🇭🇰 129.226.114.61

🇮🇳 122.166.253.226

🇰🇷 115.91.48.142

🇰🇷 110.14.190.221

🇩🇪 103.14.32.224

🇷🇺 94.25.169.21

🇫🇷 86.252.67.41

🇩🇪 69.5.169.60

🇺🇸 64.62.197.118

🇫🇷 51.159.71.139

🇺🇸 50.116.49.221

🇹🇼 198.235.24.97

🇧🇩 157.15.22.54

🇺🇸 135.237.126.79

🇨🇳 117.164.191.217

🇳🇱 104.45.59.6