JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.122.253.109

193.122.253.109 was found in our database!

This IP was reported 169 times. Confidence of Abuse is 100%: ?

100%

ISP	Oracle Public Cloud
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracleemaildelivery.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.122.253.109

Whois 193.122.253.109

IP Abuse Reports for 193.122.253.109:

This IP address has been reported a total of 169 times from 115 distinct sources. 193.122.253.109 was first reported on May 21st 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 maxpower	2026-07-08 11:59:33 (6 days ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 193.122.253.109 (US/United States/-): 2 ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 193.122.253.109 (US/United States/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 193.122.253.109 - - [08/Jul/2026:13:59:25 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 10423 "-" "libredtail-http" "-" host=51.89.2.98 193.122.253.109 - - [08/Jul/2026:13:59:28 +0200] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 10419 "-" "libredtail-http" "-" host=51.89.2.98 show less	Port Scan
🇦🇹 urnilxfgbez	2026-07-06 22:45:00 (1 week ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇦🇹 urnilxfgbez	2026-07-04 22:45:00 (1 week ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 bigscoots.com	2026-07-04 18:58:01 (1 week ago)	(sshd) Failed SSH login from 193.122.253.109 (US/United States/-): 5 in the last 3600 secs; Ports: * ... show more (sshd) Failed SSH login from 193.122.253.109 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 4 13:54:56 15520 sshd[19304]: Invalid user admin from 193.122.253.109 port 44246 Jul 4 13:54:58 15520 sshd[19304]: Failed password for invalid user admin from 193.122.253.109 port 44246 ssh2 Jul 4 13:57:14 15520 sshd[19917]: Invalid user orangepi from 193.122.253.109 port 48550 Jul 4 13:57:17 15520 sshd[19917]: Failed password for invalid user orangepi from 193.122.253.109 port 48550 ssh2 Jul 4 13:57:57 15520 sshd[21091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.122.253.109 user=root show less	Brute-Force SSH
🇳🇿 realstuffie	2026-07-04 16:52:48 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-cve-2021-41773	Web App Attack Hacking
🇺🇸 MPL	2026-07-04 14:50:02 (1 week ago)	tcp/443 (2 or more attempts)	Port Scan
Anonymous	2026-07-03 07:13:42 (1 week ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
Anonymous	2026-07-02 23:26:58 (1 week ago)	Blocked by firewall on hugin [22/tcp] \| Rule: AbuseIPDB \| SPT: 56321 \| TTL: 56 \| LEN: 40 \| TOS: 0x00 ... show more Blocked by firewall on hugin [22/tcp] \| Rule: AbuseIPDB \| SPT: 56321 \| TTL: 56 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH
🇺🇦 Luk	2026-07-02 22:28:00 (1 week ago)	Jul 3 01:26:31 khomus sshd-session[87486]: Invalid user admin from 193.122.253.109 port 33200 Jul ... show more Jul 3 01:26:31 khomus sshd-session[87486]: Invalid user admin from 193.122.253.109 port 33200 Jul 3 01:26:31 khomus sshd-session[87486]: Connection closed by invalid user admin 193.122.253.109 port 33200 [preauth] Jul 3 01:27:08 khomus sshd-session[87489]: Invalid user orangepi from 193.122.253.109 port 50134 Jul 3 01:27:09 khomus sshd-session[87489]: Connection closed by invalid user orangepi 193.122.253.109 port 50134 [preauth] Jul 3 01:27:59 khomus sshd-session[87493]: Connection closed by authenticating user root 193.122.253.109 port 34772 [preauth] ... show less	Brute-Force SSH
🇳🇱 stom	2026-07-02 20:57:48 (1 week ago)	2026-07-02T20:56:32.675379 socky.stom66.co.uk sshd[4173048]: Invalid user admin from 193.122.253.109 ... show more 2026-07-02T20:56:32.675379 socky.stom66.co.uk sshd[4173048]: Invalid user admin from 193.122.253.109 port 48498 2026-07-02T20:57:45.367627 socky.stom66.co.uk sshd[4173947]: Invalid user orangepi from 193.122.253.109 port 40754 ... show less	Brute-Force SSH
🇦🇹 centurion	2026-07-01 14:56:04 (1 week ago)	Blocked by UFW on ns03 [2375/tcp] Source port: 37917 TTL: 54 Packet length: 40 TOS: 0x00 This repor ... show more Blocked by UFW on ns03 [2375/tcp] Source port: 37917 TTL: 54 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 oh.mg	2026-07-01 02:50:42 (1 week ago)	2026-07-01T03:48:46.488801+01:00 frans sshd[1955883]: pam_unix(sshd:auth): authentication failure; l ... show more 2026-07-01T03:48:46.488801+01:00 frans sshd[1955883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.122.253.109 2026-07-01T03:48:48.589060+01:00 frans sshd[1955883]: Failed password for invalid user admin from 193.122.253.109 port 50670 ssh2 2026-07-01T03:50:41.288572+01:00 frans sshd[1956091]: Invalid user orangepi from 193.122.253.109 port 47324 ... show less	Brute-Force SSH
🇦🇹 urnilxfgbez	2026-06-30 22:45:00 (1 week ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 MPL	2026-06-30 11:35:51 (2 weeks ago)	tcp/23 (4 or more attempts)	Port Scan
🇺🇸 NXTwoThou	2026-06-30 00:42:42 (2 weeks ago)	/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh	Web App Attack

Showing 1 to 15 of 169 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.120.72.229

🇹🇷 176.236.29.136

🇨🇳 116.236.222.106

🇨🇳 111.225.214.187

🇺🇸 205.210.31.50

🇭🇰 149.88.76.188

🇨🇿 77.75.77.36

🇺🇸 66.132.186.218

🇮🇳 49.207.186.21

🇸🇬 34.177.101.188

🇸🇪 185.246.130.20

🇻🇳 180.93.245.215

🇵🇱 83.175.136.227

🇺🇸 66.132.195.65

🇦🇹 46.125.136.217

🇻🇳 14.177.234.24

🇺🇸 173.252.70.3

🇺🇸 147.185.132.9

🇺🇸 138.94.216.161

🇨🇳 114.66.60.222