JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.93.244.97

195.93.244.97 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 100%: ?

100%

ISP	FS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS41745
Domain Name	forgesys.ru
Country	🇳🇱 Netherlands
City	Dronten, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.93.244.97

Whois 195.93.244.97

IP Abuse Reports for 195.93.244.97:

This IP address has been reported a total of 53 times from 36 distinct sources. 195.93.244.97 was first reported on May 31st 2026, and the most recent report was 2 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 Mga Admin	2026-07-07 01:35:59 (2 minutes ago)	195.93.244.97 - - [07/Jul/2026:08:35:57 +0700] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2 ... show more 195.93.244.97 - - [07/Jul/2026:08:35:57 +0700] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 226 "-" "libredtail-http" ... show less	Web App Attack
🇺🇸 drewf.ink	2026-07-07 01:23:57 (14 minutes ago)	[01:23] Attempted SSH login on port 22 with credentials root:2307	Brute-Force SSH
🇺🇸 sumnone	2026-07-07 01:22:44 (15 minutes ago)	Port probing on unauthorized port 22	Port Scan Hacking Exploited Host
🇺🇸 drewf.ink	2026-07-07 01:07:52 (30 minutes ago)	[01:07] Attempted SSH login on port 22 with credentials admin:admin	Brute-Force SSH
🇩🇪 xserverx.ru	2026-07-07 01:04:49 (33 minutes ago)	[UFW SCAN!!!!] SRC=195.93.244.97 LEN=40 TOS=0x00 PREC=0x60 TTL=56 PROTO=TCP SPT=39887 DPT=22 WINDOW= ... show more [UFW SCAN!!!!] SRC=195.93.244.97 LEN=40 TOS=0x00 PREC=0x60 TTL=56 PROTO=TCP SPT=39887 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 andypiper	2026-07-07 01:01:05 (37 minutes ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇩🇪 Random	2026-07-07 00:35:53 (1 hour ago)	Fail2Ban sshd jail triggered for 195.93.244.97	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-07-07 00:24:21 (1 hour ago)	(mod_security) mod_security (id:218420) triggered by 195.93.244.97 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:218420) triggered by 195.93.244.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 20:24:13.046536 2026] [security2:error] [pid 12595:tid 12595] [client 195.93.244.97:60272] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.48:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.48"] [uri "/hello.world"] [unique_id "akxHLTM4u3pcmdzDoWmRYwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Panter	2026-07-07 00:24:06 (1 hour ago)	Bruteforce detected by fail2ban SSH	Brute-Force SSH
🇧🇬 MazenHost	2026-07-07 00:15:05 (1 hour ago)	Jul 7 03:13:18 azianew sshd[53147]: Failed password for invalid user orangepi from 195.93.244.97 po ... show more Jul 7 03:13:18 azianew sshd[53147]: Failed password for invalid user orangepi from 195.93.244.97 port 43336 ssh2 Jul 7 03:13:48 azianew sshd[53152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.93.244.97 user=root Jul 7 03:13:50 azianew sshd[53152]: Failed password for root from 195.93.244.97 port 44340 ssh2 Jul 7 03:14:21 azianew sshd[53156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.93.244.97 user=root Jul 7 03:14:23 azianew sshd[53156]: Failed password for root from 195.93.244.97 port 32992 ssh2 Jul 7 03:15:02 azianew sshd[53160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.93.244.97 user=root Jul 7 03:15:04 azianew sshd[53160]: Failed password for root from 195.93.244.97 port 48906 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-07-06 23:42:01 (1 hour ago)	CVE-2021-41773 exploitation attempt MD	Web App Attack
🇮🇩 digitalsekuriti.id	2026-07-06 23:39:00 (1 hour ago)	2026-07-07T06:38:21.952618 mail.atmatech.id sshd[357119]: pam_unix(sshd:auth): authentication failur ... show more 2026-07-07T06:38:21.952618 mail.atmatech.id sshd[357119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.93.244.97 2026-07-07T06:38:24.221261 mail.atmatech.id sshd[357119]: Failed password for invalid user admin from 195.93.244.97 port 50846 ssh2 2026-07-07T06:38:56.143228 mail.atmatech.id sshd[357397]: Invalid user orangepi from 195.93.244.97 port 43462 ... show less	Brute-Force SSH
🇫🇮 decode5921	2026-07-06 23:15:03 (2 hours ago)	Blocked by CrowdSec — crowdsecurity/ssh-slow-bf	Brute-Force SSH
🇳🇱 Filli Group	2026-07-06 23:07:40 (2 hours ago)	2026-07-07T01:06:35.586811+02:00 ams01-nl-pop.as202427.net sshd[474185]: Invalid user admin from 195 ... show more 2026-07-07T01:06:35.586811+02:00 ams01-nl-pop.as202427.net sshd[474185]: Invalid user admin from 195.93.244.97 port 55754 2026-07-07T01:07:08.664160+02:00 ams01-nl-pop.as202427.net sshd[474190]: Invalid user orangepi from 195.93.244.97 port 55944 2026-07-07T01:07:39.724687+02:00 ams01-nl-pop.as202427.net sshd[474192]: User root from 195.93.244.97 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-06 23:00:03 (2 hours ago)	(sshd) Failed SSH login from 195.93.244.97 (PL/Poland/-): 5 in the last 3600 secs; Ports: ; Directi ... show more (sshd) Failed SSH login from 195.93.244.97 (PL/Poland/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jul 6 17:58:35 15553 sshd[18667]: Invalid user admin from 195.93.244.97 port 38628 Jul 6 17:58:37 15553 sshd[18667]: Failed password for invalid user admin from 195.93.244.97 port 38628 ssh2 Jul 6 17:59:08 15553 sshd[19041]: Invalid user orangepi from 195.93.244.97 port 49778 Jul 6 17:59:10 15553 sshd[19041]: Failed password for invalid user orangepi from 195.93.244.97 port 49778 ssh2 Jul 6 17:59:44 15553 sshd[19242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.93.244.97 user=root show less	Brute-Force SSH

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 202.4.170.20

🇬🇧 185.247.137.33

🇨🇳 180.76.174.141

🇵🇱 176.53.159.198

🇮🇩 163.7.0.179

🇨🇳 119.39.83.130

🇻🇳 103.200.25.79

🇳🇱 89.21.67.163

🇺🇸 64.62.156.38

🇳🇱 45.148.10.147

🇮🇩 36.64.68.99

🇬🇧 217.146.80.101

🇨🇳 202.105.98.252

🇰🇿 185.233.3.95

🇨🇴 181.136.156.80

🇰🇷 158.180.79.132

🇬🇧 123.58.207.140

🇳🇱 91.92.42.34

🇳🇱 88.210.63.69

🇫🇷 85.217.140.27