JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 206.232.1.93

206.232.1.93 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 17%: ?

17%

ISP	Aventice LLC
Usage Type	Fixed Line ISP
ASN	AS11572
Domain Name	aventice.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 206.232.1.93

Whois 206.232.1.93

IP Abuse Reports for 206.232.1.93:

This IP address has been reported a total of 17 times from 12 distinct sources. 206.232.1.93 was first reported on September 21st 2024, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-01 20:28:10 (9 hours ago)	(mod_security) mod_security (id:210730) triggered by 206.232.1.93 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 206.232.1.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 16:28:02.994292 2026] [security2:error] [pid 30849:tid 30849] [client 206.232.1.93:48801] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|capitalswisscorp.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "capitalswisscorp.com"] [uri "/mailto:[email protected]"] [unique_id "apc1Uvbn2kbDlP2i1bDHXgAAAAM"], referer: http://CapitalSwissCorp.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 08:56:27 (5 days ago)	(mod_security) mod_security (id:210730) triggered by 206.232.1.93 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 206.232.1.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 04:56:20.936609 2026] [security2:error] [pid 31199:tid 31199] [client 206.232.1.93:39927] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|holgerfeld.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "holgerfeld.com"] [uri "/mailto:[email protected]"] [unique_id "ao_7tIe7H8_E40wywG6CXAAAAAo"], referer: http://holgerfeld.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-04 09:41:55 (4 weeks ago)	FortiWeb WAF: 20 attacks detected. Threat Score: 11378055. Types: Client Management(10), Signature D ... show more FortiWeb WAF: 20 attacks detected. Threat Score: 11378055. Types: Client Management(10), Signature Detection(10). Origin: United States. show less	Web App Attack
Anonymous	2026-07-22 04:03:05 (1 month ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇱🇻 garmtech.com	2026-05-19 15:39:08 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-39.206.232.1.93.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-39.206.232.1.93.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-19 16:27:36 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 206.232.1.93 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 206.232.1.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 19 12:27:30.345979 2026] [security2:error] [pid 2252578:tid 2252578] [client 206.232.1.93:63091] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|capitalswisscorp.com:80\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "capitalswisscorp.com"] [uri "/mailto:[email protected]"] [unique_id "aeUCcqbNNF8Le74KbMw0JQAAAAo"], referer: http://capitalswisscorp.com show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 robotstxt	2026-04-19 09:35:12 (4 months ago)	206.232.1.93 - - [19/Apr/2026:09:34:48 +0000] "GET /mailto:[email protected] HTTP/1.1" 404 43624 "https:/ ... show more 206.232.1.93 - - [19/Apr/2026:09:34:48 +0000] "GET /mailto:[email protected] HTTP/1.1" 404 43624 "https://fundaciopacopuerto.cat" rt="0.595" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36" "-" h="fundaciopacopuerto.cat" sn="fundaciopacopuerto.cat" ru="/mailto:[email protected]" u="/index.php" ucs="-" ua="unix:/var/run/php/fundacio82.sock" us="404" uct="0.000" urt="0.596" 206.232.1.93 - - [19/Apr/2026:09:34:50 +0000] "GET /mailto:[email protected] HTTP/1.1" 404 43625 "https://fundaciopacopuerto.cat" rt="0.402" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36" "-" h="fundaciopacopuerto.cat" sn="fundaciopacopuerto.cat" ru="/mailto:[email protected]" u="/index.php" ucs="-" ua="unix:/var/run/php/fundacio82.sock" us="404" uct="0.000" urt="0.401" 206.232.1.93 - - [19/Apr/2026:09:34:52 +0000] "GET /mailto:[email protected] HTTP/1.1" 404 43625 "https://fundaciopacopuerto.cat" rt="0.458 ... show less	Bad Web Bot
🇦🇺 MAGIC	2026-04-17 01:04:49 (4 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇱🇻 garmtech.com	2026-04-13 14:41:50 (4 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 17-41.206.232.1.93.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 17-41.206.232.1.93.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-03-28 22:40:24 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 206.232.1.93 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 206.232.1.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 28 18:40:18.667895 2026] [security2:error] [pid 27804:tid 27804] [client 206.232.1.93:29971] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|CapitalSwissCorp.com:80\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "capitalswisscorp.com"] [uri "/mailto:[email protected]"] [unique_id "achY0ulmPyKCZQAid7EoYAAAAAg"], referer: http://CapitalSwissCorp.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-02-20 08:20:03 (6 months ago)		SQL Injection
🇮🇩 BPS-StatisticsIndonesia	2025-04-06 11:49:22 (1 year ago)	WP Login Scan Activities	Web App Attack
Anonymous	2025-02-26 10:45:41 (1 year ago)	wordpress-trap	Web App Attack
Anonymous	2025-02-24 18:11:24 (1 year ago)	wordpress-trap	Web App Attack
🇻🇳 Xuan Can	2024-12-03 05:41:27 (1 year ago)	(mod_security) mod_security (id:6) triggered by 206.232.1.93 (US/United States/-): 1 in the last 360 ... show more (mod_security) mod_security (id:6) triggered by 206.232.1.93 (US/United States/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 03 12:41:20.477417 2024] [security2:error] [pid 1407:tid 1450] [client 206.232.1.93:0] [client 206.232.1.93] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "6"] [severity "CRITICAL"] [hostname "kb.sieuthimaychu.vn"] [uri "/wp-login.php"] [unique_id "Z06aAC9sWovGfypqOj43zQAAAVA"], referer: http://kb.sieuthimaychu.vn show less	Brute-Force SSH

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a01:4f8:c17:6820::1

🇬🇧 213.166.84.39

🇺🇸 165.154.182.187

🇸🇬 161.118.199.50

🇳🇱 160.119.71.135

🇺🇸 151.247.52.43

🇮🇳 103.127.170.129

🇺🇸 100.50.17.159

🇷🇴 92.118.39.71

🇺🇸 64.62.156.12

🇺🇸 45.156.129.86

🇺🇸 40.124.81.97

🇹🇼 36.237.247.28

🇫🇮 34.88.29.206

🇮🇷 5.123.82.19

🇧🇷 205.210.31.252

🇺🇸 198.178.119.32

🇧🇷 177.93.153.144

🇺🇸 165.154.135.185

🇩🇪 151.243.11.240