JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 62.93.179.158

62.93.179.158 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 65%: ?

65%

ISP	GTT Communications Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	gtt.net
Country	🇪🇸 Spain
City	Madrid, Madrid

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 62.93.179.158

Whois 62.93.179.158

IP Abuse Reports for 62.93.179.158:

This IP address has been reported a total of 45 times from 29 distinct sources. 62.93.179.158 was first reported on January 20th 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 HamSammich	2026-07-24 18:14:04 (13 hours ago)	Automated sensor: 1 SIP connection/probe attempts over the last 24h (latest 2026-07-24T18:14Z).	Brute-Force Exploited Host
🇧🇷 chronos	2026-07-24 10:54:27 (20 hours ago)	Generic malicious activity: ET VOIP Modified Sipvicious Asterisk PBX User-Agent... \| Port: 5060 \| Pr ... show more Generic malicious activity: ET VOIP Modified Sipvicious Asterisk PBX User-Agent... \| Port: 5060 \| Proto: UDP \| Location: Spain, Madrid show less	Port Scan Hacking
🇫🇷 security.rdmc.fr	2026-07-24 10:05:14 (21 hours ago)	VoIP Attack proto:UDP src:64873 dst:5060	Port Scan Fraud VoIP
🇯🇵 jay hung	2026-07-24 09:30:46 (21 hours ago)	2026-07-24T09:30:45.948785+00:00 quarktech kernel: [3530108.586604] [UFW BLOCK] IN=eth0 OUT= MAC=22: ... show more 2026-07-24T09:30:45.948785+00:00 quarktech kernel: [3530108.586604] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=62.93.179.158 DST=172.237.20.248 LEN=341 TOS=0x00 PREC=0x40 TTL=102 ID=21822 PROTO=UDP SPT=64891 DPT=5060 LEN=321 ... show less	Port Scan
🇨🇿 lp	2026-07-24 02:59:13 (1 day ago)	anomaly: udp_src_session, 2001 > threshold 2000, repeats 267 times	Port Scan
🇦🇩 bakunin1848	2026-07-24 02:33:56 (1 day ago)	Firewall IPS Detection on 24-07-2026 at 04:33:56	Port Scan Exploited Host
Anonymous	2026-07-23 22:02:54 (1 day ago)	external scanner	Port Scan
🇳🇱 WeCloudit-Anti-Abuse	2026-07-23 16:25:02 (1 day ago)	SIP scanner detected!	Port Scan Hacking
🇩🇪 ValtonTahiri	2026-07-23 16:14:50 (1 day ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=62.93.179.158; proto=UDP; source_port=64879; target_port=5060 show less	Port Scan
🇱🇻 garmtech.com	2026-06-08 17:25:42 (1 month ago)	IM360 WAF: Direct access to sensitive file or dotfile MV:/.env	Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 06:51:47 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 62.93.179.158 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 62.93.179.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 02:51:41.912955 2026] [security2:error] [pid 2857:tid 2857] [client 62.93.179.158:64159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "7bsuperfruit.com"] [uri "/.env"] [unique_id "aiEgfR8G3pQOLcKm4fsG0gAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 06:29:46 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 62.93.179.158 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 62.93.179.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 02:29:41.632036 2026] [security2:error] [pid 7898:tid 7898] [client 62.93.179.158:59775] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "7319atwood.com"] [uri "/.env"] [unique_id "aiEbVYUk4VfnEn1F6k3sCgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nationaleventpros.com	2026-06-04 06:26:30 (1 month ago)	vulnerability scan	Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 06:13:18 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 62.93.179.158 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 62.93.179.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 02:13:11.139012 2026] [security2:error] [pid 28776:tid 28776] [client 62.93.179.158:49163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "69strains.com"] [uri "/.env"] [unique_id "aiEXd2ZfZdQjeb6ola6ebgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 04:38:48 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 62.93.179.158 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 62.93.179.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 00:38:43.522787 2026] [security2:error] [pid 13826:tid 13826] [client 62.93.179.158:52691] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4dbm.com"] [uri "/.env"] [unique_id "aiEBU2J0hA0tJmVWxqrRSgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 218.156.8.97

🇳🇱 81.19.216.125

🇺🇸 69.74.29.21

🇺🇸 20.168.12.53

🇮🇪 3.255.112.229

🇧🇷 177.47.87.16

🇨🇱 168.129.177.245

🇮🇳 124.253.183.146

🇨🇳 117.72.152.142

🇺🇦 91.222.39.166

🇸🇬 82.38.180.22

🇹🇼 59.102.226.59

🇸🇬 47.82.48.47

🇳🇱 45.148.10.141

🇺🇸 2604:a940:300:5b6:0:24::

🇩🇪 194.88.98.120

🇸🇰 178.40.241.209

🇳🇱 176.65.149.64

🇺🇸 65.49.20.85

🇨🇳 61.145.181.7