This IP address has been reported a total of
5
times from
3 distinct
sources.
193.25.167.93 was first reported on
April 7th 2026 , and the most recent report was
1 day ago United States of America
with 2
reports;
Croatia
with 1
report.
The most common categories in these recent reports were:
Hacking
3
times;
Exploited Host
1
time;
Web App Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
GreekCity
2026-10-23 12:41:22
(1 day ago)
[Fri Oct 23 07:41:21.494532 2026] [proxy_fcgi:error] [pid 3642771:tid 3642771] [client 193.25.167.93 ...
show more
[Fri Oct 23 07:41:21.494532 2026] [proxy_fcgi:error] [pid 3642771:tid 3642771] [client 193.25.167.93:36783] AH01071: Got error 'Primary script unknown'
...
show less
Hacking
🇺🇸
GreekCity
2026-10-23 07:41:21
(1 day ago)
bad-bot hacking for vulnerable links.
Hacking
Exploited Host
🇭🇷
bubausluge
2026-10-18 22:28:39
(6 days ago)
Blocked by https://aegis.hr — WAF: LFI/RFI - (MITRE T1190), 1 attempts, Period: 2026-10-18 22:08:39 ...
show more
Blocked by https://aegis.hr — WAF: LFI/RFI - (MITRE T1190), 1 attempts, Period: 2026-10-18 22:08:39 to 2026-10-18 22:08:39
show less
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-04-14 23:23:07
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 193.25.167.93 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.25.167.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 19:23:02.745399 2026] [security2:error] [pid 1701188:tid 1701188] [client 193.25.167.93:56407] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fivecentmiracle.com.mundanestudies.org"] [uri "/.env.old"] [unique_id "ad7MVupiS7ula-8lDq2YqwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-07 15:19:19
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 193.25.167.93 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.25.167.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 11:19:15.638521 2026] [security2:error] [pid 1298866:tid 1298866] [client 193.25.167.93:37397] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "armenianpress.am"] [uri "/.env.production.local"] [unique_id "adUgc3anSU5qGvwbR5cDwAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
5
of 5 reports
