JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 62.93.167.92

62.93.167.92 was found in our database!

This IP was reported 172 times. Confidence of Abuse is 12%: ?

12%

ISP	GTT Communications Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	gtt.net
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 62.93.167.92

Whois 62.93.167.92

IP Abuse Reports for 62.93.167.92:

This IP address has been reported a total of 172 times from 65 distinct sources. 62.93.167.92 was first reported on May 22nd 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 1gz	2026-07-24 03:28:32 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: CHALLENGE Protocol: HTTP/2 (GET met ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: /script.js UA: Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/150.0.7871.113 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 anycast_ac	2026-07-19 17:46:38 (1 month ago)	[DDoS Attacker] This IP was attacking website anycast.ac and sent 105 requests on port 443	DDoS Attack Web App Attack
🇺🇸 xmission.com	2026-07-06 07:09:44 (1 month ago)	Blocked by UFW (TCP on 6996) Source port: 4349 TTL: 108 Packet length: 52 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 6996) Source port: 4349 TTL: 108 Packet length: 52 TOS: 0x08 This report (for 62.93.167.92) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇿 plzenskypruvodce.cz	2026-05-06 12:19:17 (3 months ago)	2026-05-06T14:19:13.778493+02:00 web wordpress(choteborky.cz)[1103879]: Authentication attempt for u ... show more 2026-05-06T14:19:13.778493+02:00 web wordpress(choteborky.cz)[1103879]: Authentication attempt for unknown user saravanan from 62.93.167.92 2026-05-06T14:19:15.185447+02:00 web wordpress(choteborky.cz)[1103930]: Authentication attempt for unknown user administrator from 62.93.167.92 2026-05-06T14:19:16.572616+02:00 web wordpress(choteborky.cz)[1103879]: Authentication attempt for unknown user root from 62.93.167.92 ... show less	Brute-Force
🇩🇪 findlab	2026-05-03 12:20:01 (3 months ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-04-12 18:07:07 (4 months ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Mangelot Hosting	2026-04-11 16:57:01 (4 months ago)	(upload_shell) srv101 Shell upload 62.93.167.92 (CA/Canada/-): 1 in the last 3600 secs; Ports: ; Di ... show more (upload_shell) srv101 Shell upload 62.93.167.92 (CA/Canada/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇫🇷 dynamix	2026-04-11 16:56:26 (4 months ago)	Multiple WAF Violations	Web App Attack
🇳🇿 Antinson	2026-04-10 03:06:59 (4 months ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇧🇪 cmbplf	2026-04-10 00:28:49 (4 months ago)	382 requests with url.path /.well-known/acme-challenge/.php 314 requests with url.path /.well-k ... show more 382 requests with url.path /.well-known/acme-challenge/.php 314 requests with url.path /.well-known/pki-validation/*.php show less	Brute-Force Bad Web Bot
🇺🇸 wordpresshosting.solutions	2026-04-09 15:20:09 (4 months ago)	Generic web shell path probe. Evidence: 62.93.167.92 - - [09/Apr/2026:15:20:09 +0000] "GET /shell.ph ... show more Generic web shell path probe. Evidence: 62.93.167.92 - - [09/Apr/2026:15:20:09 +0000] "GET /shell.php HTTP/1.1" 301 844 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-09 00:35:37 (4 months ago)	(mod_security) mod_security (id:240000) triggered by 62.93.167.92 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 62.93.167.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 20:35:31.768498 2026] [security2:error] [pid 3419630:tid 3419630] [client 62.93.167.92:42592] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|boyt.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "boyt.org"] [uri "/images/stories/themes.php"] [unique_id "adb0U3VPFkeqsxmBpeMBvgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-04-08 21:43:22 (4 months ago)	IM360 WAF: Suspicious files in jQuery	Web App Attack
🇱🇻 garmtech.com	2026-04-08 21:42:59 (4 months ago)	IM360 WAF: Interaction with fake plugin MV:/wp-content/plugins/pwnd/pwnd.php	Web App Attack
🇱🇻 garmtech.com	2026-04-08 21:42:56 (4 months ago)	IM360 WAF: Interaction with fake plugin MV:/wp-content/plugins/seoplugins/db.php?u	Web App Attack

Showing 1 to 15 of 172 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 113.206.64.38

🇺🇸 34.186.14.133

🇹🇼 198.235.24.22

🇷🇺 185.230.240.133

🇲🇾 180.75.245.69

🇺🇸 172.191.149.99

🇺🇸 172.171.244.250

172.28.108.248

🇧🇷 167.249.17.174

🇩🇪 167.94.146.41

🇺🇸 162.144.21.160

🇷🇸 160.99.1.3

🇧🇷 160.20.85.230

🇺🇸 136.70.79.109

🇮🇳 103.147.248.23

🇨🇳 101.71.52.128

🇳🇱 89.248.172.10

🇬🇧 81.110.254.173

🇭🇰 47.76.65.20

🇺🇸 45.79.181.179