AbuseIPDB » 93.113.180.209
93.113.180.209
This IP was reported 9 times. Confidence of
Abuse
is 4% : ?
ISP
freakhosting.com
Usage Type
Data Center/Web Hosting/Transit
ASN
AS215703
Hostname(s)
repofoll.store
Domain Name
freakhosting.com
Country
🇩🇪
Germany
City
Frankfurt am Main, Hesse
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 93.113.180.209 :
This IP address has been reported a total of
9
times from
6 distinct
sources.
93.113.180.209 was first reported on
August 8th 2024 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-06-20 23:08:34
(1 day ago)
fail2ban:mail3:14,18
Port Scan
Brute-Force
🇦🇺
Bay13
2024-08-10 14:26:35
(1 year ago)
f2b http-redirect
Hacking
Web App Attack
🇸🇬
oncord
2024-08-10 11:48:50
(1 year ago)
Form spam
Web Spam
🇨🇭
backslash
2024-08-10 05:05:40
(1 year ago)
Web Spam
🇺🇸
TPI-Abuse
2024-08-09 16:33:05
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 93.113.180.209 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 93.113.180.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 09 12:32:57.269902 2024] [security2:error] [pid 4876:tid 4876] [client 93.113.180.209:48592] [client 93.113.180.209] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bestprostate.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bestprostate.com"] [uri "/contact-us/mailto:[email protected] "] [unique_id "ZrZEuY1x40snez2JHRnCVgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇬
oncord
2024-08-09 11:34:12
(1 year ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2024-08-09 03:19:35
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 93.113.180.209 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 93.113.180.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 08 23:19:28.902759 2024] [security2:error] [pid 11381:tid 11381] [client 93.113.180.209:47734] [client 93.113.180.209] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||riser-astrology.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "riser-astrology.com"] [uri "/mailto:[email protected] "] [unique_id "ZrWKwGkNPLw_QHSpcgvXvwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
hermawan
2024-08-08 19:04:05
(1 year ago)
[Fri Aug 09 00:14:58.055421 2024] [security2:error] [pid 814017:tid 134780020590144] [client 93.113. ...
show more
[Fri Aug 09 00:14:58.055421 2024] [security2:error] [pid 814017:tid 134780020590144] [client 93.113.180.209:54792] [client 93.113.180.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AI" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "38"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: AI found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Trailer/93.3.3516.28 request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "matomo.staklim-malang.info"] [uri "/"] [unique_id "ZrT9ElFbhopEa-irTqZ76gAAChA"] [matomo.staklim-malang.info] [matomo.staklim-malang.info] top=[814034] [FQiIKjdVGy4] [ZrT9ElFbhopEa-irTqZ76gAAChA] keep_alive=[1] [2024-08-09 00:14:58.055426] [R:ZrT9ElFbhopEa-irTqZ76gAAChA] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML,
...
show less
Hacking
Web App Attack
🇸🇬
oncord
2024-08-08 06:53:01
(1 year ago)
Form spam
Web Spam
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: