AbuseIPDB » 193.56.29.107

193.56.29.107 was found in our database!

This IP was reported 242 times. Confidence of Abuse is 0%: ?

ISP	Unknown
Usage Type	Unknown
ASN	AS207990
Domain Name	Unknown
Country	-
City	Unknown

Report 193.56.29.107

Whois 193.56.29.107

IP Abuse Reports for 193.56.29.107:

This IP address has been reported a total of 242 times from 99 distinct sources. 193.56.29.107 was first reported on January 6th 2022, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Thaliruth	2023-08-06 16:43:10 (1 year ago)	193.56.29.107 - - [06/Aug/2023:18:43:07 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin. ... show more193.56.29.107 - - [06/Aug/2023:18:43:07 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.0" 404 422 "-" "python-requests/2.25.1" ... show less	Bad Web Bot
Thaliruth	2023-08-06 15:17:10 (1 year ago)	193.56.29.107 - - [06/Aug/2023:17:17:09 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin. ... show more193.56.29.107 - - [06/Aug/2023:17:17:09 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.0" 404 423 "-" "python-requests/2.25.1" ... show less	Bad Web Bot
Anonymous	2023-08-06 13:04:06 (1 year ago)	[Sun Aug 06 15:04:04.984300 2023] [authz_core:error] [pid 734] [client 193.56.29.107:54816] AH01630: ... show more[Sun Aug 06 15:04:04.984300 2023] [authz_core:error] [pid 734] [client 193.56.29.107:54816] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Aug 06 15:04:05.325567 2023] [authz_core:error] [pid 693] [client 193.56.29.107:54833] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Aug 06 15:04:05.895225 2023] [access_compat:error] [pid 740] [client 193.56.29.107:54851] AH01797: client denied by server configuration: /var/www/html/.env ... show less	Web App Attack
cusezar.com	2023-08-06 09:59:07 (1 year ago)	193.56.29.107 /	Brute-Force
Thaliruth	2023-08-06 09:20:51 (1 year ago)	193.56.29.107 - - [06/Aug/2023:11:20:51 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin. ... show more193.56.29.107 - - [06/Aug/2023:11:20:51 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.0" 404 422 "-" "python-requests/2.25.1" ... show less	Bad Web Bot
Anonymous	2023-08-06 02:32:58 (1 year ago)	The IP has been banned due to the violation / illegal of the use. Filter: nginx-webattack	Hacking Web App Attack
ut-addicted.com	2023-08-03 21:42:29 (1 year ago)	\[Thu Aug 03 23:42:28.090788 2023\] \[:error\] \[pid 6915:tid 139784164980480\] \[client 193.56.29.1 ... show more\[Thu Aug 03 23:42:28.090788 2023\] \[:error\] \[pid 6915:tid 139784164980480\] \[client 193.56.29.107:53924\] \[client 193.56.29.107\] ModSecurity: Access denied with code 403 $phase 2$. Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded $Total Score: 8$"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/.env"\] \[unique_id "ZMwfROV5tEMXKzmqAefrUAAAAMY"\] show less	Brute-Force Web App Attack
ut-addicted.com	2023-08-03 20:17:10 (1 year ago)	\[Thu Aug 03 22:17:08.810453 2023\] \[:error\] \[pid 6915:tid 139784123021056\] \[client 193.56.29.1 ... show more\[Thu Aug 03 22:17:08.810453 2023\] \[:error\] \[pid 6915:tid 139784123021056\] \[client 193.56.29.107:60108\] \[client 193.56.29.107\] ModSecurity: Access denied with code 403 $phase 2$. Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded $Total Score: 8$"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/.env"\] \[unique_id "ZMwLROV5tEMXKzmqAefpQAAAAMo"\] show less	Brute-Force Web App Attack
nextweb	2023-08-03 09:01:06 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 193.56.29.107 (PL/Poland/Mazovia/Warsaw/-/[AS21 ... show more(mod_security) mod_security (id:210492) triggered by 193.56.29.107 (PL/Poland/Mazovia/Warsaw/-/[AS210228 Web Hosted Group Ltd]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
CrystalMaker	2023-07-29 14:15:55 (1 year ago)	Vulnerability scan - GET /.env; POST /	Hacking
mnsf	2023-07-29 10:05:19 (1 year ago)	Too many Status 50X (12)	Brute-Force Web App Attack
Anonymous	2023-07-27 19:15:24 (1 year ago)		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack
Mediashaker	2023-07-27 10:57:32 (1 year ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 193.56.29.107 (PL/Poland ... show more(apache-scanners) Failed apache-scanners trigger with match [redacted] from 193.56.29.107 (PL/Poland/-) show less	Port Scan
4server	2023-07-23 16:00:39 (1 year ago)	[SunJul2318:00:30.3579882023][security2:error][pid19170:tid47194639292160][client193.56.29.107:0][cl ... show more[SunJul2318:00:30.3579882023][security2:error][pid19170:tid47194639292160][client193.56.29.107:0][client193.56.29.107]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\|boot\\\\\\\\.ini\\|web.config\)\\\\\\\\b\\|$\\|\^\\|\\\\\\\\.\\\\\\\\.$/etc/\\|/\\\\\\\\.$\?:history\\|bash_history\\|sh_history\\|env$\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"199\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"cybertelgroup.com\"][uri\"/.env\"][unique_id\"ZL1OntpzMTY6-p-PnSeAMwAAAAE\"][SunJul2318:00:35.0673912023][security2:error][pid19266:tid47194713360128][client193.56.29.107:0][client193.56.29.107]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\ show less	Blog Spam
Anonymous	2023-07-23 04:55:02 (1 year ago)		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack