JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.153.66.93

161.153.66.93 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 30%: ?

30%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.153.66.93

Whois 161.153.66.93

IP Abuse Reports for 161.153.66.93:

This IP address has been reported a total of 4 times from 4 distinct sources. 161.153.66.93 was first reported on September 10th 2026, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-09-16 19:51:00 (17 hours ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇵🇱 Budyn	2026-09-16 18:59:22 (17 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: budyn.ovh \| URI: /actuator/gateway/routes \| UA: Mozilla/5.0 (X11; Linux aarch64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-10 23:12:57 (6 days ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: /index.php/zuhause \| 2026-09-10 23:12 UTC show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-10 20:28:35 (6 days ago)	(mod_security) mod_security (id:210730) triggered by 161.153.66.93 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 161.153.66.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 16:28:28.901261 2026] [security2:error] [pid 3321:tid 3321] [client 161.153.66.93:24698] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.saadeh.ws\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.saadeh.ws"] [uri "/tntserv.com"] [unique_id "aqMS7JrTvOCiXFDBvKSOGQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 4 of 4 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇭 202.79.29.108

🇧🇷 189.125.111.177

🇳🇱 176.65.148.38

🇮🇳 130.210.44.52

🇮🇩 103.121.20.18

🇮🇩 103.90.25.243

🇮🇩 103.10.120.8

🇫🇷 85.217.140.24

🇹🇷 78.189.238.192

🇭🇰 69.33.211.13

🇺🇸 66.132.195.98

🇳🇱 45.148.10.35

🇵🇰 39.56.67.206

🇨🇳 14.29.198.130

🇸🇪 217.211.15.160

🇨🇭 209.99.188.233

🇪🇨 186.46.129.76

🇸🇪 172.160.227.37

🇺🇸 172.68.138.151

🇯🇵 160.251.253.29