AbuseIPDB » 193.36.225.201

193.36.225.201 was found in our database!

This IP was reported 100 times. Confidence of Abuse is 37%: ?

37%

ISP	VPN Consumer Los Angeles, United States
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 193.36.225.201

Whois 193.36.225.201

IP Abuse Reports for 193.36.225.201:

This IP address has been reported a total of 100 times from 49 distinct sources. 193.36.225.201 was first reported on January 4th 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
TPI-Abuse	2024-08-29 02:52:21 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 193.36.225.201 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 193.36.225.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 28 22:52:16.364448 2024] [security2:error] [pid 1444650:tid 1444650] [client 193.36.225.201:49297] [client 193.36.225.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lognlumber.com"] [uri "/wp-config.php"] [unique_id "Zs_iYA9_BwTs-PWLLoMgUgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Roderic	2024-08-28 15:29:20 (4 months ago)	(mod_security) mod_security triggered on hostname [redacted] 193.36.225.201 (US/United States/-)	SQL Injection
Jim Keir	2024-08-28 08:26:09 (4 months ago)	2024-08-28 08:26:08 193.36.225.201 File scanning, blocking 193.36.225.201 for 5 minutes	Web App Attack
Anonymous	2024-08-28 03:32:44 (4 months ago)	[Wed Aug 28 03:32:39.951561 2024] [:error] [pid 3413756] [client 193.36.225.201:44915] script ' ... show more[Wed Aug 28 03:32:39.951561 2024] [:error] [pid 3413756] [client 193.36.225.201:44915] script '/var/www/vhosts/mcdermit.org/BOISD/1337.php' not found or unable to stat, referer: http://mcdermit.org/1337.php [Wed Aug 28 03:32:40.754667 2024] [:error] [pid 3413756] [client 193.36.225.201:44915] script '/var/www/vhosts/mcdermit.org/BOISD/css.php' not found or unable to stat, referer: http://mcdermit.org/css.php [Wed Aug 28 03:32:41.810395 2024] [:error] [pid 3413756] [client 193.36.225.201:44915] script '/var/www/vhosts/mcdermit.org/BOISD/olux.php' not found or unable to stat, referer: http://mcdermit.org/olux.php [Wed Aug 28 03:32:42.597620 2024] [:error] [pid 3413756] [client 193.36.225.201:44915] script '/var/www/vhosts/mcdermit.org/BOISD/priv8.php' not found or unable to stat, referer: http://mcdermit.org/priv8.php [Wed Aug 28 03:32:43.770167 2024] [:error] [pid 3413756] [client 193.36.225.201:44915] script '/var/www/vhosts/mcdermit.org/BOISD/wp-term.php' not found or unable to stat, ... show less	Brute-Force
Melle	2024-08-28 01:45:32 (4 months ago)	Unauthorized connection attempt detected from IP address 193.36.225.201	Hacking
Hirte	2024-08-28 01:34:02 (4 months ago)	MYH: Web Attack GET /wp-content/themes/include.php	Web Spam Hacking Bad Web Bot Web App Attack
Anonymous	2024-08-27 20:37:13 (4 months ago)	wordpress-trap	Web App Attack
Anonymous	2024-08-27 13:51:27 (4 months ago)	wordpress-trap	Web App Attack
Anonymous	2024-08-27 08:11:24 (4 months ago)	wordpress-trap	Web App Attack
Mainpine	2024-08-27 06:52:15 (4 months ago)	probing for vulnerable web apps	Web App Attack
TPI-Abuse	2024-08-26 12:50:16 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 193.36.225.201 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 193.36.225.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 26 08:50:09.173739 2024] [security2:error] [pid 12527:tid 12527] [client 193.36.225.201:63365] [client 193.36.225.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "moonlightmotel.com"] [uri "/wp-content/plugins/wp-config.php"] [unique_id "Zsx6Ae0O1wX7WrbU3GLHTAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-08-26 09:02:11 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 193.36.225.201 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 193.36.225.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 26 05:02:03.784840 2024] [security2:error] [pid 32329:tid 32329] [client 193.36.225.201:15913] [client 193.36.225.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mike-garner.com"] [uri "/wp-config.php"] [unique_id "ZsxEi8K_nVy093SOVxXQdQAAADc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-08-26 05:46:10 (4 months ago)	wordpress-trap	Web App Attack
maxxsense	2024-08-26 04:08:00 (4 months ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 193.36.225.201 (US/Unite ... show more(apache-scanners) Failed apache-scanners trigger with match [redacted] from 193.36.225.201 (US/United States/-) show less	Port Scan
Anonymous	2024-08-25 16:38:25 (5 months ago)	wordpress-trap	Web App Attack