JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.25.167.148

193.25.167.148 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 4%: ?

ISP	Xantho UAB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS60781
Domain Name	xantho.lt
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.25.167.148

Whois 193.25.167.148

IP Abuse Reports for 193.25.167.148:

This IP address has been reported a total of 6 times from 5 distinct sources. 193.25.167.148 was first reported on January 15th 2025, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 taivas.nl	2026-07-26 05:02:01 (9 hours ago)	Fake_GoogleBot	Bad Web Bot SSH
🇩🇪 BlueWire Hosting	2026-04-29 13:58:50 (2 months ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-08 20:51:21 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 193.25.167.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 193.25.167.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 16:51:17.743771 2026] [security2:error] [pid 92394:tid 92394] [client 193.25.167.148:51621] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.nbcnewsradio.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.nbcnewsradio.com"] [uri "/index.php/example.com"] [unique_id "ada_xXNw-QzNjgvcLmG0ggAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-29 00:10:04 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 193.25.167.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 193.25.167.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 20:09:59.898877 2025] [security2:error] [pid 19052:tid 19052] [client 193.25.167.148:37081] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.nbcnewsradio.com"] [uri "/example.htaccess"] [unique_id "aQFbV-e3Lx5iysRYnEv0awAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 WebRanger	2025-10-17 11:09:08 (9 months ago)	GET /events../.git/config HTTP/1.1 400 650 "- GET /events../.git/config HTTP/1.1" 400 650 "-" "Mozil ... show more GET /events../.git/config HTTP/1.1 400 650 "- GET /events../.git/config HTTP/1.1" 400 650 "-" "Mozilla/5.0 X11 Linux x86_64 AppleWebKit/537.36 KHTML, like Gecko Chrome/107.0.0.0 Safari/537.36" "- show less	Bad Web Bot Web App Attack
Anonymous	2025-01-15 06:20:19 (1 year ago)	\| A web attack returned code 200 (success).	Hacking SQL Injection Web App Attack

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a04:4e40:e040:0:ee8:1c72:435:5b7

🇺🇸 207.90.244.3

🇮🇷 178.131.170.187

🇺🇸 144.202.82.88

🇩🇪 45.135.141.12

🇨🇳 14.103.114.231

🇩🇪 213.209.159.231

🇺🇸 194.110.150.131

🇺🇸 192.161.49.2

🇦🇷 167.250.118.53

🇺🇸 146.190.63.248

🇺🇸 143.244.168.161

🇺🇸 137.184.114.102

🇫🇷 93.5.96.59

🇧🇬 78.128.114.174

🇧🇬 78.128.113.74

🇺🇸 3.238.245.240

🇲🇽 189.190.217.141

🇺🇸 185.180.141.8

🇺🇸 136.66.91.186