JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 124.93.197.57

124.93.197.57 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 4%: ?

ISP	China Unicom Liaoning province network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Shenyang, Liaoning

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 124.93.197.57

Whois 124.93.197.57

IP Abuse Reports for 124.93.197.57:

This IP address has been reported a total of 17 times from 9 distinct sources. 124.93.197.57 was first reported on August 5th 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-24 19:10:03 (4 days ago)	(mod_security) mod_security (id:210831) triggered by 124.93.197.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 124.93.197.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 15:09:53.353671 2026] [security2:error] [pid 15223:tid 15223] [client 124.93.197.57:47154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.lapsychiatrist.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.lapsychiatrist.com"] [uri "/"] [unique_id "ajwrgT3ODAZI4ILjFjD7YwAAABU"], referer: https://www.lapsychiatrist.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-29 19:41:36 (4 weeks ago)	(mod_security) mod_security (id:210831) triggered by 124.93.197.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 124.93.197.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 15:41:29.723631 2026] [security2:error] [pid 4602:tid 4640] [client 124.93.197.57:22863] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.nrgla.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.nrgla.com"] [uri "/"] [unique_id "ahnr6exD-u054tHx1iUQXgAAAFM"], referer: http://www.nrgla.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-19 21:16:45 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 124.93.197.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 124.93.197.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 17:16:37.498768 2026] [security2:error] [pid 18046:tid 18046] [client 124.93.197.57:2524] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.ionlineshopper.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.ionlineshopper.com"] [uri "/"] [unique_id "agzTNZQifq7b76Q2HRY4FwAAAAw"], referer: http://www.ionlineshopper.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-03-12 14:00:49 (3 months ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-03-12 03:29:52 (3 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
Anonymous	2026-03-04 10:45:54 (3 months ago)	Port scan 41162	Port Scan
🇮🇹 VHosting	2026-02-05 01:34:34 (4 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
Anonymous	2025-12-05 19:03:09 (6 months ago)	Web attack	Bad Web Bot Web App Attack
Anonymous	2025-12-03 16:00:38 (6 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2025-12-01 23:03:01 (6 months ago)	Web attack	Bad Web Bot Web App Attack
🇦🇹 urnilxfgbez	2025-10-09 22:45:00 (8 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 TPI-Abuse	2025-09-23 09:47:37 (9 months ago)	(mod_security) mod_security (id:210350) triggered by 124.93.197.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 124.93.197.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 23 05:47:22.048755 2025] [security2:error] [pid 28500:tid 28500] [client 124.93.197.57:56126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.renju.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/tournament/2816/game/118613/"] [unique_id "aNJsqhR4nifckO8JYIiRxgAAACQ"], referer: https://www.renju.net/tournament/2816/game/118613 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2025-09-22 23:01:48 (9 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-09-13 16:59:55 (9 months ago)	(mod_security) mod_security (id:210350) triggered by 124.93.197.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 124.93.197.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 13 12:59:45.645033 2025] [security2:error] [pid 3688:tid 3688] [client 124.93.197.57:57248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.renju.net\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/tournament/695/game/22156"] [unique_id "aMWjAWqA0P3ZJFRonpaqTQAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-08-06 21:57:17 (10 months ago)	Infected user bad webscan	Exploited Host

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 171.244.37.103

🇸🇪 171.25.158.57

🇮🇳 139.59.68.31

🇺🇸 66.132.172.158

🇱🇻 62.60.234.140

🇱🇹 62.60.130.228

🇳🇱 45.148.10.157

🇨🇳 14.29.214.161

🇨🇳 1.12.77.250

🇺🇸 45.79.82.114

🇧🇷 20.206.91.91

🇧🇷 187.101.212.119

🇺🇸 161.35.232.200

🇨🇳 120.82.84.23

🇸🇬 103.7.11.134

🇮🇹 93.92.78.217

🇨🇳 27.41.244.241

🇺🇸 165.227.209.27

🇮🇩 163.7.9.55

🇨🇦 138.197.174.121