JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.36.222.16

193.36.222.16 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 36%: ?

36%

ISP	Micron Hosting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	micronhost.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.36.222.16

Whois 193.36.222.16

IP Abuse Reports for 193.36.222.16:

This IP address has been reported a total of 21 times from 17 distinct sources. 193.36.222.16 was first reported on July 18th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 oncord	2026-06-17 06:52:41 (1 week ago)	Form spam	Web Spam
🇫🇷 tilellit.pro	2026-06-16 21:41:28 (1 week ago)	Fail2Ban banned 193.36.222.16 for security violations in jail wp-armour. Log: 2026/06/16 21:41:27 [e ... show more Fail2Ban banned 193.36.222.16 for security violations in jail wp-armour. Log: 2026/06/16 21:41:27 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 193.36.222.16 \| Target: contactform7 \| URI: /wp-json/contact-form-7/v1/contact-forms/15583/feedback" , client: 193.36.222.16, server: [REDACTED], request: "POST /wp-json/contact-form-7/v1/contact-forms/15583/feedback HTTP/2.0", upstream: [REDACTED], host: [REDACTED], referrer: "https://cnpuertocolon.com/contacto" ... show less	Web Spam
🇩🇪 FeG Deutschland	2026-06-16 14:34:35 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇫🇷 COMAITE	2026-06-09 17:45:21 (2 weeks ago)	Common web attack from 193.36.222.16.	Web App Attack
🇨🇭 backslash	2026-06-09 09:27:29 (2 weeks ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇦🇺 oncord	2026-06-09 09:22:52 (2 weeks ago)	Form spam	Web Spam
🇨🇿 unhfree.net	2026-05-29 01:20:12 (4 weeks ago)	May 29 02:01:53 canopus dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user ... show more May 29 02:01:53 canopus dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=193.36.222.16, lip=10.98.231.74, TLS May 29 02:23:39 canopus dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=193.36.222.16, lip=10.98.231.74, TLS May 29 02:42:09 canopus dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=193.36.222.16, lip=10.98.231.74, TLS May 29 02:56:12 canopus dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=193.36.222.16, lip=10.98.231.74, TLS May 29 03:20:11 canopus dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=193.36.222.16, lip=10.98.231.74, TLS ... show less	Brute-Force Exploited Host
🇮🇹 VHosting	2026-05-12 21:44:16 (1 month ago)	Detected mail brute force attack from 4 different servers	Brute-Force
Anonymous	2026-05-12 06:44:06 (1 month ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇬🇧 consul.to	2026-02-24 09:17:22 (4 months ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-02-24 09:13:24 (4 months ago)	[redacted] 193.36.222.16 - - [24/Feb/2026:10:13:14 +0100] "GET /wp-admin/css/colors/blue/rk2.php HTT ... show more [redacted] 193.36.222.16 - - [24/Feb/2026:10:13:14 +0100] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" [redacted] 193.36.222.16 - - [24/Feb/2026:10:13:15 +0100] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" [redacted] 193.36.222.16 - - [24/Feb/2026:10:13:17 +0100] "GET /wp-admin/user/wp-login.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" [redacted] 193.36.222.16 - - [24/Feb/2026:10:13:18 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" [redacted] 193.36.222 ... show less	Hacking Web App Attack
🇧🇪 cmbplf	2026-02-24 07:25:33 (4 months ago)	275 requests with url.path /.well-known/acme-challenge/.php 229 requests with url.path /.well-k ... show more 275 requests with url.path /.well-known/acme-challenge/.php 229 requests with url.path /.well-known/pki-validation/*.php show less	Brute-Force Bad Web Bot
Anonymous	2026-02-24 06:59:10 (4 months ago)	193.36.222.16 - - [24/Feb/2026:07:57:01 +0100] "GET /manager.php HTTP/1.1" 404 482 "-" "Mozilla/5.0 ... show more 193.36.222.16 - - [24/Feb/2026:07:57:01 +0100] "GET /manager.php HTTP/1.1" 404 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.36.222.16 - - [24/Feb/2026:07:57:01 +0100] "GET /bless.php HTTP/1.1" 404 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.36.222.16 - - [24/Feb/2026:07:57:01 +0100] "GET /O-Simple.php HTTP/1.1" 404 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.36.222.16 - - [24/Feb/2026:07:57:01 +0100] "GET /lock360.php HTTP/1.1" 404 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.36.222.16 - - [24/Feb/2026:07:57:01 +0100] "GET /zwso.php HTTP/1.1" 404 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.36.222.16 - - [24/Feb/2026:07:57:02 +0100] "GET /c ... show less	DDoS Attack
🇺🇸 TPI-Abuse	2026-02-24 03:30:43 (4 months ago)	(mod_security) mod_security (id:240000) triggered by 193.36.222.16 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240000) triggered by 193.36.222.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 22:30:39.141842 2026] [security2:error] [pid 7788:tid 7788] [client 193.36.222.16:29213] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|yeswecanhandyservices.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "yeswecanhandyservices.com"] [uri "/images/stories/themes.php"] [unique_id "aZ0bX4cXzOsFcmQ_id1zjAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-17 11:19:27 (8 months ago)	wordpress-trap	Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 167.172.152.94

🇨🇳 223.88.145.224

🇪🇸 212.30.33.223

🇬🇧 194.50.235.141

🇺🇸 185.226.196.14

🇸🇬 178.128.95.176

🇻🇳 171.244.141.86

🇺🇸 149.19.236.55

🇺🇸 52.161.50.37

🇳🇱 45.148.10.157

🇯🇵 20.78.0.33

🇳🇱 176.65.139.238

🇵🇱 172.253.206.53

🇧🇷 170.247.208.182

🇩🇪 134.19.55.211

🇺🇸 64.23.194.25

🇸🇬 47.84.202.133

🇷🇴 193.32.162.84

🇳🇱 185.242.226.81

🇳🇱 176.65.131.215