JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 62.93.167.89

62.93.167.89 was found in our database!

This IP was reported 177 times. Confidence of Abuse is 21%: ?

21%

ISP	GTT Communications Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	gtt.net
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 62.93.167.89

Whois 62.93.167.89

IP Abuse Reports for 62.93.167.89:

This IP address has been reported a total of 177 times from 67 distinct sources. 62.93.167.89 was first reported on May 21st 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 klaus_ph	2026-08-10 14:53:39 (2 weeks ago)	62.93.167.89 - - [09/Aug/2026:03:28:33 +0200] "GET /lka/Record/c0003882/Details?lng=el&print=1 HTTP/ ... show more 62.93.167.89 - - [09/Aug/2026:03:28:33 +0200] "GET /lka/Record/c0003882/Details?lng=el&print=1 HTTP/1.1" 200 13830 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_3_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.155 Safari/537.36" ... show less	Bad Web Bot
🇺🇸 xmission.com	2026-08-05 20:37:54 (3 weeks ago)	Blocked by UFW (TCP on 60973) Source port: 52193 TTL: 111 Packet length: 52 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 60973) Source port: 52193 TTL: 111 Packet length: 52 TOS: 0x08 This report (for 62.93.167.89) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 1gz	2026-07-23 16:16:30 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: CHALLENGE Protocol: HTTP/3 (GET met ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: CHALLENGE Protocol: HTTP/3 (GET method) Endpoint: /script.js UA: Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/150.0.7871.113 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇮🇹 A000Z	2026-07-16 00:09:07 (1 month ago)	Fail2Ban: 62.93.167.89 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ... show more Fail2Ban: 62.93.167.89 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇫🇷 matthieul.dev	2026-07-12 06:40:27 (1 month ago)	Blocked by os-abuseipdb; 7 hits, proto=tcp,udp, ports=4272	Port Scan Brute-Force
🇺🇸 TPI-Abuse	2026-05-12 05:59:02 (3 months ago)	(mod_security) mod_security (id:240000) triggered by 62.93.167.89 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 62.93.167.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 01:58:53.585484 2026] [security2:error] [pid 24024:tid 24024] [client 62.93.167.89:58100] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|wedeliverstrippers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "wedeliverstrippers.com"] [uri "/images/stories/themes.php"] [unique_id "agLBnbrkNMgunwMqQqSc8QAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-04-30 16:10:07 (3 months ago)	(wordpress) Apache: Failed WordPress login from 62.93.167.89 (CA/Canada/-): 10 in the last 3600 secs ... show more (wordpress) Apache: Failed WordPress login from 62.93.167.89 (CA/Canada/-): 10 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-04-26 12:57:53 (4 months ago)	(wordpress) Apache: Failed WordPress login from 62.93.167.89 (CA/Canada/-): 10 in the last 3600 secs ... show more (wordpress) Apache: Failed WordPress login from 62.93.167.89 (CA/Canada/-): 10 in the last 3600 secs (0-193) show less	Hacking
🇺🇸 TPI-Abuse	2026-04-12 13:55:06 (4 months ago)	(mod_security) mod_security (id:240000) triggered by 62.93.167.89 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 62.93.167.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 09:54:59.928191 2026] [security2:error] [pid 3161557:tid 3161571] [client 62.93.167.89:45928] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.metrobaselexpoforum.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.metrobaselexpoforum.org"] [uri "/images/stories/themes.php"] [unique_id "adukM8W2tDo9R7xRtjW0kQAAAQo"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 pengpeng	2026-04-11 17:05:24 (4 months ago)	monitor: on VM-0-7-ubuntu \| port: 8330 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇫🇷 dynamix	2026-04-11 16:50:09 (4 months ago)	Multiple WAF Violations	Web App Attack
🇳🇿 Antinson	2026-04-11 14:20:50 (4 months ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-10 00:03:54 (4 months ago)	(mod_security) mod_security (id:240000) triggered by 62.93.167.89 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 62.93.167.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 09 20:03:47.195819 2026] [security2:error] [pid 3901345:tid 3901345] [client 62.93.167.89:37144] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.siouxfallslimos.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.siouxfallslimos.com"] [uri "/images/stories/themes.php"] [unique_id "adg-YxFVK4lY_suQx6V1FgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-04-09 22:16:58 (4 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-04-09 03:56:25 (4 months ago)	(mod_security) mod_security (id:240000) triggered by 62.93.167.89 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 62.93.167.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 23:56:17.279569 2026] [security2:error] [pid 3025489:tid 3025489] [client 62.93.167.89:50326] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|title30.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "title30.com"] [uri "/images/stories/themes.php"] [unique_id "adcjYS72WLlahrG8ylkF-AAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 177 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.228

🇦🇷 181.47.126.134

🇦🇷 181.46.9.55

🇮🇳 103.8.118.140

🇸🇬 43.156.77.155

🇬🇧 35.203.211.144

🇸🇬 34.96.48.1

🇺🇸 17.166.21.233

🇺🇸 17.166.21.225

🇺🇸 17.166.21.200

🇳🇱 195.178.110.137

🇦🇷 186.129.198.111

🇦🇷 181.46.69.67

🇦🇷 181.46.66.56

🇺🇸 143.42.1.44

🇺🇸 47.143.208.202

🇳🇱 45.148.10.151

🇯🇵 20.153.204.5

🇺🇸 17.166.21.161

🇺🇸 17.166.21.150