JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.239.232.235

193.239.232.235 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 47%: ?

47%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	Svea Hosting AB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS41634
Hostname(s)	tor-exit.lu.ke
Domain Name	svea.net
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.239.232.235

Whois 193.239.232.235

IP Abuse Reports for 193.239.232.235:

This IP address has been reported a total of 42 times from 27 distinct sources. 193.239.232.235 was first reported on October 5th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-04 11:59:19 (2 days ago)	Blocked by UFW (TCP on 56432) Source port: 50678 TTL: 51 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 56432) Source port: 50678 TTL: 51 Packet length: 60 TOS: 0x00 This report (for 193.239.232.235) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 pltcldvlpr	2026-06-04 02:33:02 (2 days ago)	Bogus Useragent: 193.239.232.235 - - [04/Jun/2026:04:33:02 +0200] "GET / HTTP/1.1" 301 178 "https:// ... show more Bogus Useragent: 193.239.232.235 - - [04/Jun/2026:04:33:02 +0200] "GET / HTTP/1.1" 301 178 "https://www.google.com" "Mozilla/4.0 (compatible;MSIE 7.0;Windows NT 6.0)" asn=41634 org="Svea Hosting AB" country=SE ... show less	Bad Web Bot
🇫🇷 ✨	2026-06-02 01:35:18 (4 days ago)	Rule : PLESK BOT 2026-06-02 03:33:51 Unauthorized login attempt to Plesk Panel from IP 193.239.232.2 ... show more Rule : PLESK BOT 2026-06-02 03:33:51 Unauthorized login attempt to Plesk Panel from IP 193.239.232.235 with username admin show less	Hacking Brute-Force Web App Attack
🇳🇱 Kotiacat_one	2026-05-26 05:42:33 (1 week ago)	2026-05-26T08:42:32.693270+03:00 kotiacat.nexus sshd-session[13352]: Invalid user admin1 from 193.23 ... show more 2026-05-26T08:42:32.693270+03:00 kotiacat.nexus sshd-session[13352]: Invalid user admin1 from 193.239.232.235 port 39390 ... show less	Brute-Force SSH
🇳🇱 Kotiacat_one	2026-05-25 02:23:27 (1 week ago)	2026-05-25T05:23:27.017691+03:00 kotiacat.nexus sshd-session[4504]: Invalid user 1 from 193.239.232. ... show more 2026-05-25T05:23:27.017691+03:00 kotiacat.nexus sshd-session[4504]: Invalid user 1 from 193.239.232.235 port 41426 ... show less	Brute-Force SSH
🇳🇱 Kotiacat_one	2026-05-23 20:27:40 (1 week ago)	2026-05-23T23:27:39.291686+03:00 kotiacat.nexus sshd-session[7782]: Invalid user admin from 193.239. ... show more 2026-05-23T23:27:39.291686+03:00 kotiacat.nexus sshd-session[7782]: Invalid user admin from 193.239.232.235 port 52534 ... show less	Brute-Force SSH
Anonymous	2026-05-21 15:03:00 (2 weeks ago)	APTUDE WEBFORM SPAM 193.239.232.235 (tor-exit.lu.ke)	Web Spam
🇺🇸 rodt	2026-05-19 18:41:02 (2 weeks ago)	Attack category: ET INFO \| Signature: A network intrusion attempt from 193.239.232.235 to Raspberry ... show more Attack category: ET INFO \| Signature: A network intrusion attempt from 193.239.232.235 to Raspberry Pi 86:74 has been detected and blocked. \| Target port: 35570/TCP \| Detected by Anti-Trust (UDR7 IDS/IPS monitor). show less	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-05-18 22:37:46 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 193.239.232.235 (tor-exit.lu.ke): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 193.239.232.235 (tor-exit.lu.ke): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 18:37:40.983847 2026] [security2:error] [pid 25963:tid 25963] [client 193.239.232.235:52298] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.learnserve.net"] [uri "/.git/config"] [unique_id "aguUtLoKIfrrhXb-UNXMwQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2026-05-09 01:00:56 (4 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇬🇧 Globe2	2026-05-08 10:25:51 (4 weeks ago)	ModSec - Multiple 403s within a short period of time [server: H3]	Web App Attack
Anonymous	2026-05-06 04:02:28 (1 month ago)	2026-05-05 19:00:26,508 fail2ban.actions [3625835]: NOTICE [tor] Ban 193.239.232.235 2026-05 ... show more 2026-05-05 19:00:26,508 fail2ban.actions [3625835]: NOTICE [tor] Ban 193.239.232.235 2026-05-05 22:00:24,132 fail2ban.actions [3625835]: NOTICE [tor] Ban 193.239.232.235 2026-05-06 01:00:23,681 fail2ban.actions [3625835]: NOTICE [tor] Ban 193.239.232.235 2026-05-06 04:00:32,032 fail2ban.actions [3625835]: NOTICE [tor] Ban 193.239.232.235 2026-05-06 07:02:27,532 fail2ban.actions [3625835]: NOTICE [tor] Ban 193.239.232.235 show less	Brute-Force
🇺🇸 TPI-Abuse	2026-04-29 23:46:30 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 193.239.232.235 (tor-exit.lu.ke): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 193.239.232.235 (tor-exit.lu.ke): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 19:46:22.565050 2026] [security2:error] [pid 28385:tid 28385] [client 193.239.232.235:35408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.adoniahenterprises.com"] [uri "/.git/config"] [unique_id "afKYTtUTs3TwMq_LW9gKuwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-24 21:02:36 (1 month ago)	2026-04-24 12:00:27,028 fail2ban.actions [7718]: NOTICE [tor] Ban 193.239.232.235 2026-04-24 ... show more 2026-04-24 12:00:27,028 fail2ban.actions [7718]: NOTICE [tor] Ban 193.239.232.235 2026-04-24 15:00:25,153 fail2ban.actions [7718]: NOTICE [tor] Ban 193.239.232.235 2026-04-24 18:00:26,761 fail2ban.actions [7718]: NOTICE [tor] Ban 193.239.232.235 2026-04-24 21:00:36,033 fail2ban.actions [7718]: NOTICE [tor] Ban 193.239.232.235 2026-04-25 00:02:35,755 fail2ban.actions [7718]: NOTICE [tor] Ban 193.239.232.235 show less	Brute-Force
🇺🇸 TPI-Abuse	2026-04-24 18:30:56 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 193.239.232.235 (tor-exit.lu.ke): 1 in the last ... show more (mod_security) mod_security (id:210831) triggered by 193.239.232.235 (tor-exit.lu.ke): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 14:30:51.993747 2026] [security2:error] [pid 8863:tid 8863] [client 193.239.232.235:38080] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.dennisdsmith.com\|F\|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.dennisdsmith.com"] [uri "/robots.txt"] [unique_id "aeu2224YkqdIsuolCkP6cwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.176.31.210

🇳🇱 185.223.235.47

🇨🇦 85.217.149.55

🇬🇧 81.19.219.219

🇳🇱 45.148.10.157

🇦🇷 190.137.140.51

🇲🇽 189.169.77.217

🇧🇷 179.185.227.77

🇨🇳 119.29.198.247

🇳🇱 62.250.234.181

🇺🇸 38.148.99.59

🇺🇸 38.141.252.55

🇬🇧 31.14.254.55

🇬🇧 217.146.80.99

🇲🇾 203.121.40.210

🇧🇷 186.235.38.27

🇨🇷 186.177.88.21

🇺🇸 162.216.150.157

🇺🇸 147.185.132.105

🇬🇧 139.28.176.28