AbuseIPDB » 202.93.153.230

202.93.153.230 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 8%: ?

ISP	Smart Axiata Co. Ltd.
Usage Type	Mobile ISP
Domain Name	smart.com.kh
Country	Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 202.93.153.230

Whois 202.93.153.230

IP Abuse Reports for 202.93.153.230:

This IP address has been reported a total of 22 times from 18 distinct sources. 202.93.153.230 was first reported on January 10th 2021, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Hobby Bob	2024-08-14 03:47:47 (1 month ago)	Aug 14 04:47:46 mail dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=, rip=202. ... show moreAug 14 04:47:46 mail dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=, rip=202.93.153.230, lip=X.X.X.X session= show less	Port Scan Hacking
Anonymous	2024-07-18 20:32:05 (1 month ago)		DNS Compromise DDoS Attack
Anonymous	2024-06-08 10:16:01 (3 months ago)	Automatic report - Vulnerability scan /autodiscover/autodiscover.xml	Web App Attack
Anonymous	2024-06-05 12:46:20 (3 months ago)	Automatic report - Vulnerability scan /autodiscover/autodiscover.xml	Web App Attack
Anonymous	2024-06-01 13:00:45 (3 months ago)	Automatic report - Vulnerability scan /autodiscover/autodiscover.xml	Web App Attack
Anonymous	2024-04-30 08:33:33 (4 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
penjaga BRIN	2024-04-19 11:02:06 (4 months ago)	Multiple WP scan detected from same source ip.-111	Brute-Force
Anonymous	2024-03-17 14:22:47 (5 months ago)		DNS Compromise DDoS Attack
TPI-Abuse	2024-03-16 20:12:05 (5 months ago)	(mod_security) mod_security (id:240950) triggered by 202.93.153.230 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:240950) triggered by 202.93.153.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 16 16:11:59.404247 2024] [security2:error] [pid 3115] [client 202.93.153.230:58310] [client 202.93.153.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\D" at TX:1. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "4530"] [id "240950"] [rev "2"] [msg "COMODO WAF: XSS & SQL injection vulnerability in Pragyan CMS 3.0 (CVE-2015-1471)\|\|www.contagion-game.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.contagion-game.com"] [uri "/wiki/index.php"] [unique_id "ZfX9D01LDUH1i2mJ_KVm2QAAAAU"], referer: http://www.contagion-game.com/ show less	Brute-Force Bad Web Bot Web App Attack
ThreatBook.io	2023-10-05 01:23:24 (11 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/202.93.153.230	Web App Attack
4server	2022-09-06 09:45:54 (2 years ago)	[TueSep0615:45:12.2362252022][:error][pid13457:tid47802952513280][client202.93.153.230:50907][client ... show more[TueSep0615:45:12.2362252022][:error][pid13457:tid47802952513280][client202.93.153.230:50907][client202.93.153.230]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\|boot\\\\\\\\.ini\\|web.config\)\\\\\\\\b\\|$\\|\^\\|\\\\\\\\.\\\\\\\\.$/etc/\\|/\\\\\\\\.$\?:history\\|bash_history\\|sh_history\\|env$\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"189\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"136.243.224.50\"][uri\"/.env\"][unique_id\"YxdO6AZCaNlwzq4h-rUmzgAAABA\"][TueSep0615:45:50.6835792022][:error][pid13589:tid47802960918272][client202.93.153.230:31144][client202.93.153.230]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.co show less	Port Scan Brute-Force Web App Attack
10dencehispahard SL	2022-08-07 10:20:20 (2 years ago)	Unauthorized login attempts [{'wordpress-xmlrpc'}]	Brute-Force Web App Attack
pusathosting.com	2022-07-05 11:46:04 (2 years ago)	ang 202.93.153.230 {wartamerdekanews.com} "POST /wp-comments-post.php 429 202.93.153.230 {wart ... show moreang 202.93.153.230 {wartamerdekanews.com} "POST /wp-comments-post.php 429 202.93.153.230 {wartamerdekanews.com} "POST /wp-comments-post.php 429 202.93.153.230 {wartamerdekanews.com} "POST /wp-comments-post.php 429 show less	Web Spam
snydr	2022-03-28 09:33:30 (2 years ago)	connection attempt port 445 TCP	Port Scan
IrisFlower	2021-12-29 17:19:23 (2 years ago)	Unauthorized connection attempt detected from IP address 202.93.153.230 to port 443 [J]	Port Scan Hacking