JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.37.255.222

193.37.255.222 was found in our database!

This IP was reported 200 times. Confidence of Abuse is 0%: ?

ISP	M247 LTD Bratislava Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247.com
Country	🇸🇰 Slovakia
City	Bratislava, Bratislava Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.37.255.222

Whois 193.37.255.222

IP Abuse Reports for 193.37.255.222:

This IP address has been reported a total of 200 times from 43 distinct sources. 193.37.255.222 was first reported on February 9th 2021, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 RLDD	2024-05-12 20:44:21 (2 years ago)	WP probing -fro	Web App Attack
🇺🇸 TPI-Abuse	2024-05-12 00:45:50 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 193.37.255.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 193.37.255.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 11 20:45:43.534570 2024] [security2:error] [pid 14878] [client 193.37.255.222:42901] [client 193.37.255.222] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|towlesilvapsychotherapy.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "towlesilvapsychotherapy.com"] [uri "/mysql.sql"] [unique_id "ZkARNyPfPlu6htEQRukb7gAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-05-09 16:20:18 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 193.37.255.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 193.37.255.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 09 12:20:12.031956 2024] [security2:error] [pid 16803] [client 193.37.255.222:24083] [client 193.37.255.222] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|olimpiacerda.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "olimpiacerda.com"] [uri "/mysql.sql"] [unique_id "Zjz3vBflqN26RrypZ5HlTgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Aetherweb Ark	2024-05-09 13:26:39 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 193.37.255.222 (SK/Slovakia/-): N in the last X ... show more (mod_security) mod_security (id:210730) triggered by 193.37.255.222 (SK/Slovakia/-): N in the last X secs show less	Web App Attack
🇺🇸 TPI-Abuse	2024-05-09 13:14:08 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 193.37.255.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 193.37.255.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 09 09:14:00.232022 2024] [security2:error] [pid 22332] [client 193.37.255.222:7945] [client 193.37.255.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bitcoincasting.com"] [uri "/.env"] [unique_id "ZjzMGOzsheqHCjCAwPbxngAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-05-08 07:02:55 (2 years ago)	Web Probe / Attack	Web App Attack
🇺🇸 TPI-Abuse	2024-05-05 02:18:44 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 193.37.255.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 193.37.255.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 04 22:18:36.561825 2024] [security2:error] [pid 21827] [client 193.37.255.222:31885] [client 193.37.255.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.robcohn.com"] [uri "/bak/sftp-config.json"] [unique_id "ZjbsfFQLkEBueSa7ZNmqVgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2024-05-03 03:03:34 (2 years ago)	Unauthorized login attempts [ accesslogs]	Brute-Force
🇧🇷 diego	2024-04-21 15:41:07 (2 years ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack
🇧🇷 diego	2024-04-21 10:52:45 (2 years ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack
🇺🇸 TPI-Abuse	2024-04-21 02:40:05 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 193.37.255.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 193.37.255.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 20 22:40:00.330144 2024] [security2:error] [pid 69964] [client 193.37.255.222:35947] [client 193.37.255.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "powderriverinc.com"] [uri "/old/sftp-config.json"] [unique_id "ZiR8gAQrokxS64EIw3OTWgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 hbrks	2024-04-17 21:39:52 (2 years ago)	HEAD http://crm.marche-be.com/backup/www.tar.gz * statusCode: 503 *	Web Spam Hacking Bad Web Bot
🇩🇪 hbrks	2024-04-17 21:20:59 (2 years ago)	HEAD http://crm.marche-be.com/backup/directory.tar * statusCode: 503 *	Web Spam Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2024-04-14 09:38:53 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 193.37.255.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 193.37.255.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 14 05:38:46.661853 2024] [security2:error] [pid 2878] [client 193.37.255.222:63859] [client 193.37.255.222] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|jfexpressfr8.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jfexpressfr8.com"] [uri "/backups/backup.sql"] [unique_id "ZhukJs3Nj036LycMuKNPSgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-04-14 09:07:50 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 193.37.255.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 193.37.255.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 14 05:07:45.371236 2024] [security2:error] [pid 21199] [client 193.37.255.222:61565] [client 193.37.255.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fxztrader.com"] [uri "/restore/sftp-config.json"] [unique_id "Zhuc4SpATd0et41OAy9XKQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 200 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.136.15.110

🇺🇸 151.240.254.43

🇺🇸 71.235.27.139

🇨🇳 58.17.6.119

🇺🇸 34.74.40.179

🇵🇰 202.47.52.118

🇺🇸 147.185.132.153

🇺🇸 91.230.168.249

🇧🇪 84.199.12.218

🇩🇰 80.208.64.11

🇫🇷 45.77.61.56

🇬🇧 35.203.211.143

🇧🇷 35.198.32.138

🇺🇸 34.123.224.228

🇧🇪 34.78.213.249

🇧🇪 34.52.207.86

🇺🇸 34.31.87.76

🇸🇬 34.21.225.185

🇲🇽 187.175.30.131

🇦🇷 186.13.24.118