AbuseIPDB » 193.36.237.98
193.36.237.98
This IP was reported 8 times. Confidence of
Abuse
is 0% : ?
ISP
Packethub S.A.
Usage Type
Data Center/Web Hosting/Transit
ASN
Unknown
Domain Name
packethub.net
Country
🇲🇾
Malaysia
City
Kuala Lumpur, Kuala Lumpur
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 193.36.237.98 :
This IP address has been reported a total of
8
times from
7 distinct
sources.
193.36.237.98 was first reported on
February 25th 2024 , and the most recent report was
2 months ago
Old Reports:
The most recent abuse report for this IP address is from
2 months ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-07-30 09:21:10
(2 months ago)
Automated Apache credential probe in 15m: hits=30; url=/xmlrpc.php; category=web-app-attack
Web App Attack
🇺🇸
TPI-Abuse
2026-07-30 07:25:50
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 193.36.237.98 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 193.36.237.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 03:25:43.437587 2026] [security2:error] [pid 848674:tid 848674] [client 193.36.237.98:29184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 193.36.237.98 (+1 hits since last alert)|susanoneill.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "susanoneill.us"] [uri "/xmlrpc.php"] [unique_id "amr8d0UfjSr1jiws6u2-lgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇻🇪
hablaxdev
2026-06-23 19:03:00
(3 months ago)
This IP address is associated with a systemic fraud pattern across our platform, characterized by mu ...
show more
This IP address is associated with a systemic fraud pattern across our platform, characterized by multiple 3D Secure (3DS) authenticated transactions and the subsequent provisioning of digital goods, ultimately resulting in chargebacks from the payment gateway.
show less
Fraud Orders
🇩🇪
N2N
2026-03-09 12:20:59
(7 months ago)
Hacking
Web App Attack
🇩🇪
N2N
2026-03-08 10:06:12
(7 months ago)
Hacking
Web App Attack
2024-08-30 17:47:34
(2 years ago)
Web App Attack
🇩🇰
Papy Abuse
2024-08-01 10:44:29
(2 years ago)
honeypots-httpproxy
Port Scan
🇮🇩
hermawan
2024-02-25 08:30:38
(2 years ago)
[Sun Feb 25 15:30:34.072904 2024] [security2:error] [pid 544954:tid 129127420003904] [client 193.36. ...
show more
[Sun Feb 25 15:30:34.072904 2024] [security2:error] [pid 544954:tid 129127420003904] [client 193.36.237.98:49794] [client 193.36.237.98] ModSecurity: Access denied with code 403 (phase 1). String match within "/accept-charset/ /content-encoding/ /content-range/ /identity/ /if/ /lock-token/ /proxy/ /x-http-method/ /x-http-method-override/ /x-method-override/ " at TX:header_name_accept-charset. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1608"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: Matched Data: connection found within TX:header_name_accept-charset: /accept-charset/ request_line = GET /index.php/profil/meteorologi/list-all-categories/4073-meteorologi/prakiraan-meteorologi/prakiraan-cuaca-harian-tiap-3-jam-sekali-per-kecamatan/1228-prakiraan-cuaca-situbondo HTTP/1.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag
...
show less
Hacking
Web App Attack
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: