JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.32.127.216

193.32.127.216 was found in our database!

This IP was reported 1,371 times. Confidence of Abuse is 55%: ?

55%

ISP	31173 Services AB infrastructure in Zürich, CH.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS39351
Domain Name	31173.se
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.32.127.216

Whois 193.32.127.216

IP Abuse Reports for 193.32.127.216:

This IP address has been reported a total of 1,371 times from 134 distinct sources. 193.32.127.216 was first reported on August 11th 2021, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 nate naten	2026-09-19 21:53:04 (2 hours ago)	HoneyTrap: git_config attempt on /.git/config from Switzerland	Bad Web Bot Web App Attack
Anonymous	2026-09-18 15:12:36 (1 day ago)	[ssd5.kdns.gr] httpd-config-scan: sites=www.casa-ampia.gr; logs=/var/log/httpd/domains/casa-ampia.gr ... show more [ssd5.kdns.gr] httpd-config-scan: sites=www.casa-ampia.gr; logs=/var/log/httpd/domains/casa-ampia.gr.log; samples=/.git/config show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 13:40:58 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 193.32.127.216 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 193.32.127.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 09:40:53.814436 2026] [security2:error] [pid 8392:tid 8392] [client 193.32.127.216:1184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tiln.org"] [uri "/.git/config"] [unique_id "aq0_ZTGx9xF8kfEOGOCZzQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 el-brujo	2026-09-18 12:41:17 (1 day ago)	Cloudflare WAF: Request Path: /.git/config Request Query: Host: foro.elhacker.net userAgent: Mozill ... show more Cloudflare WAF: Request Path: /.git/config Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246 Action: block Source: firewallManaged ASN Description: 31173 Services AB Country: CH Method: GET Timestamp: 2026-09-18T12:41:17Z ruleId: 23548ee2b36547a1be09bb2c0550c529. Report generated by Cloudflare-WAF-to-AbuseIPDB. show less	Hacking SQL Injection Web App Attack
🇳🇱 Alt255	2026-09-18 06:52:16 (1 day ago)	[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 193.32.127.216 - - [18/Sep/2026:08:52:11 +0200] "GET /.git/config HTTP/1.1" 403 6242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246" ... show less	Bad Web Bot Web App Attack
🇦🇺 paulshipley.com.au	2026-09-17 14:12:41 (2 days ago)	[Fri Sep 18 00:12:40.649799 2026] [security2:error] [pid 521374] [client 193.32.127.216:17478] [clie ... show more [Fri Sep 18 00:12:40.649799 2026] [security2:error] [pid 521374] [client 193.32.127.216:17478] [client 193.32.127.216] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/.git/config"] [unique_id "aqv1WN2F-VLMu0HMphiHQQAAAA4"] ... show less	Web App Attack
🇩🇪 pltcldvlpr	2026-09-17 10:11:43 (2 days ago)	CMS/framework probe: 193.32.127.216 - - [17/Sep/2026:12:11:42 +0200] "GET /.git/config HTTP/1.1" 404 ... show more CMS/framework probe: 193.32.127.216 - - [17/Sep/2026:12:11:42 +0200] "GET /.git/config HTTP/1.1" 404 4857 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246" asn=39351 org="31173 Services AB" country=CH ... show less	Web App Attack
🇩🇪 IVski.com	2026-09-16 22:30:52 (3 days ago)	IVski WAF \| Sensitive file probe - looking for exposed .git/config	Hacking Brute-Force Web App Attack
🇺🇸 xmission.com	2026-09-11 04:26:13 (1 week ago)	Blocked by UFW (TCP on 51413) Source port: 35227 TTL: 46 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 51413) Source port: 35227 TTL: 46 Packet length: 60 TOS: 0x08 This report (for 193.32.127.216) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 zupan	2026-08-18 14:56:27 (1 month ago)	Blocked by UFW on vps [49473/tcp] \| SPT: 44555 \| TTL: 56 \| LEN: 60 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on vps [49473/tcp] \| SPT: 44555 \| TTL: 56 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-13 06:44:38 (1 month ago)	Blocked by UFW (TCP on 8333) Source port: 61973 TTL: 109 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8333) Source port: 61973 TTL: 109 Packet length: 52 TOS: 0x08 This report (for 193.32.127.216) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-02 05:47:54 (1 month ago)	Blocked by UFW (TCP on 60973) Source port: 58075 TTL: 46 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 60973) Source port: 58075 TTL: 46 Packet length: 60 TOS: 0x08 This report (for 193.32.127.216) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 matthieul.dev	2026-07-12 00:00:38 (2 months ago)	Blocked by os-abuseipdb; 6 hits, proto=tcp,udp, ports=16220	Port Scan Brute-Force
🇫🇷 matthieul.dev	2026-07-07 21:30:27 (2 months ago)	Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=18814	Port Scan Brute-Force
🇩🇪 Vegascosmetics	2026-07-04 12:14:22 (2 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security	DDoS Attack Hacking Exploited Host

Showing 1 to 15 of 1371 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.222.205.45

🇯🇵 128.1.49.161

🇷🇸 109.207.41.219

🇬🇧 195.96.139.236

🇨🇱 190.110.96.234

🇫🇮 147.185.133.253

🇵🇭 124.83.61.209

🇨🇳 119.96.159.237

🇰🇪 41.90.184.83

🇨🇳 39.97.249.70

🇮🇶 37.238.66.21

🇹🇬 196.170.24.39

🇹🇷 176.234.206.69

🇺🇦 176.36.201.190

🇧🇷 137.131.208.99

🇭🇰 118.193.34.74

🇳🇬 105.112.216.246

🇮🇳 68.233.118.203

🇻🇪 38.3.195.120

🇹🇭 1.0.210.161