AbuseIPDB » 193.34.214.123

193.34.214.123 was found in our database!

This IP was reported 595 times. Confidence of Abuse is 43%: ?

43%

ISP	MEVSPACE sp. z o.o.
Usage Type	Data Center/Web Hosting/Transit
Domain Name	mevspace.com
Country	Poland
City	Warsaw, Mazovia

Report 193.34.214.123

Whois 193.34.214.123

IP Abuse Reports for 193.34.214.123:

This IP address has been reported a total of 595 times from 216 distinct sources. 193.34.214.123 was first reported on September 27th 2024, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
ut-addicted.com	2024-10-07 05:09:10 (2 months ago)	\[Mon Oct 07 07:09:08.734673 2024\] \[:error\] \[pid 25518:tid 140449226331904\] \[client 193.34.214 ... show more\[Mon Oct 07 07:09:08.734673 2024\] \[:error\] \[pid 25518:tid 140449226331904\] \[client 193.34.214.123:60264\] \[client 193.34.214.123\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 13\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/dnslookup.cgi"\] \[unique_id "ZwNs9E4i5w81eXQQpco@cwAAANg"\] show less	Brute-Force Web App Attack
Vaction	2024-10-07 05:09:09 (2 months ago)	193.34.214.123 - - [07/Oct/2024:07:09:08 +0200] "GET /dnslookup.cgi?host_name=www.google.com;%20ping ... show more193.34.214.123 - - [07/Oct/2024:07:09:08 +0200] "GET /dnslookup.cgi?host_name=www.google.com;%20ping%20-c%206%2045.156.25.49&lookup=Lookup&ess_=true HTTP/1.1" 404 360 "-" "Linux Gnu (cow)" show less	Hacking Bad Web Bot Web App Attack
Anonymous	2024-10-07 05:08:32 (2 months ago)	HTTP Req: GET /dnslookup.cgi?host_name=www.google.com;%20ping%20-c%206%2045.156.25.49&lookup=Lookup& ... show moreHTTP Req: GET /dnslookup.cgi?host_name=www.google.com;%20ping%20-c%206%2045.156.25.49&lookup=Lookup&ess_=true HTTP/1.1 Time: Mon, 07 Oct 2024 07:08:32 +0200 Unauthorised web server access and/or looking for web app vulnerabilities. Port 80 User Agent: Linux Gnu (cow) IP suspected 4 time(s) so far. show less	Hacking Bad Web Bot Web App Attack
psauxit	2024-10-07 05:08:25 (2 months ago)	Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ... show moreFail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping show less	Hacking Web App Attack
Deveroonie	2024-10-07 05:05:50 (2 months ago)	193.34.214.123 - - [07/Oct/2024:06:05:48 +0100] "GET /dnslookup.cgi?host_name=www.google.com; ping - ... show more193.34.214.123 - - [07/Oct/2024:06:05:48 +0100] "GET /dnslookup.cgi?host_name=www.google.com; ping -c 6 45.156.25.49&lookup=Lookup&ess_=true HTTP/1.1" 404 125 "-" "Linux Gnu (cow)" ... show less	Hacking Brute-Force Bad Web Bot
NXTwoThou	2024-10-07 05:03:47 (2 months ago)	BadRequest	Web App Attack
fynndows.de	2024-10-07 05:03:31 (2 months ago)	Requested URL: /dnslookup.cgi?host_name=www.google.com; ping -c 6 45.156.25.49&lookup=Lookup&ess_=tr ... show moreRequested URL: /dnslookup.cgi?host_name=www.google.com; ping -c 6 45.156.25.49&lookup=Lookup&ess_=true, Method: GET, User-Agent: Linux Gnu (cow) show less	Brute-Force Bad Web Bot Web App Attack
Charles	2024-10-07 05:01:33 (2 months ago)	193.34.214.123 - - [07/Oct/2024:13:01:31 +0800] "GET /dnslookup.cgi?host_name=www.google.com; ping" ... show more193.34.214.123 - - [07/Oct/2024:13:01:31 +0800] "GET /dnslookup.cgi?host_name=www.google.com; ping" 400 392 "-" "-" ... show less	Web Spam Email Spam Brute-Force Bad Web Bot Web App Attack SSH
Admins@FBN	2024-10-07 05:00:05 (2 months ago)	FW-PortScan: Traffic Blocked srcport=36166 dstport=80	Port Scan
Cookie	2024-10-07 04:55:33 (2 months ago)	Blocked by UFW (TCP on port 80). Source port: 54875 TTL: 247 Packet length: 40<br ... show moreBlocked by UFW (TCP on port 80). Source port: 54875 TTL: 247 Packet length: 40 TOS: 0x00 Timestamp: 2024-10-07 04:55:33 [Europe/Warsaw] This report (for 193.34.214.123) was generated by: https://github.com/sefinek24/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
rtbh.com.tr	2024-10-07 04:53:56 (2 months ago)	list.rtbh.com.tr report: tcp/81	Brute-Force
TrafficAnalyser	2024-10-07 04:48:23 (2 months ago)	Probing "GET /cgi-bin/slogin/login.py HTTP/1.1"	Web App Attack
IP Analyzer	2024-10-07 04:46:36 (2 months ago)	Unauthorized connection attempt from IP address 193.34.214.123 on Port 81	Port Scan
MPL	2024-10-07 04:44:48 (2 months ago)	tcp ports: 80,81 (94 or more attempts)	Port Scan
deangelys	2024-10-07 04:41:59 (2 months ago)	Honeypot activity: Unauthorized portscan activity of port(s):81	Port Scan