JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 93.115.26.112

93.115.26.112 was found in our database!

This IP was reported 214 times. Confidence of Abuse is 100%: ?

100%

ISP	UAB Cherry Servers
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16125
Hostname(s)	ip-93-115-26-112.007.ptr.cherryservers.net
Domain Name	cherryservers.com
Country	🇱🇹 Lithuania
City	Siauliai, Siauliai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 93.115.26.112

Whois 93.115.26.112

IP Abuse Reports for 93.115.26.112:

This IP address has been reported a total of 214 times from 189 distinct sources. 93.115.26.112 was first reported on August 23rd 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 Ivo Vynckier	2026-08-24 09:52:00 (4 hours ago)	93.115.26.112 - - [23/Aug/2026:17:45:07 +0200] "HEAD /webmail/ HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Win ... show more 93.115.26.112 - - [23/Aug/2026:17:45:07 +0200] "HEAD /webmail/ HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 93.115.26.112 - - [23/Aug/2026:17:45:07 +0200] "HEAD /roundcube/ HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 93.115.26.112 - - [23/Aug/2026:17:45:07 +0200] "HEAD /mail/ HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" show less	Web App Attack
Anonymous	2026-08-24 09:13:02 (4 hours ago)	Scanner hitting /webmail/ on osef.cloud (CHERRYSERVERS-LT-DEDICATED) — aaguard	Brute-Force Port Scan
🇫🇷 bgg	2026-08-24 08:49:00 (5 hours ago)	93.115.26.112 - - [24/Aug/2026:00:50:26 +0200] "GET /roundcube/ HTTP/1.1" 404 5750 "-" "Mozilla/5.0 ... show more 93.115.26.112 - - [24/Aug/2026:00:50:26 +0200] "GET /roundcube/ HTTP/1.1" 404 5750 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 93.115.26.112 - - [24/Aug/2026:00:50:26 +0200] "GET /webmail/ HTTP/1.1" 200 39765 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 93.115.26.112 - - [24/Aug/2026:00:50:27 +0200] "GET /webmail/ HTTP/1.1" 200 39765 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack Hacking
🇫🇷 IRISIO	2026-08-24 07:35:55 (6 hours ago)	scans/SQL injection/spam posts : 704 queries	Web App Attack SQL Injection
🇺🇸 chronos	2026-08-24 06:56:37 (7 hours ago)	[AUTORAVALT][[24/08/2026 - 03:56:36 -03:00 UTC] Attack from [93.115.26.112][ip-93-115-26-112.007.ptr ... show more [AUTORAVALT][[24/08/2026 - 03:56:36 -03:00 UTC] Attack from [93.115.26.112][ip-93-115-26-112.007.ptr.cherryservers.net] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> CMS blog comment spam. Web App Atta] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇺🇸 JonathanYoung2161	2026-08-24 06:38:14 (7 hours ago)	93.115.26.112 - - [24/Aug/2026:01:38:10 -0500] "HEAD /webmail/ HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Win ... show more 93.115.26.112 - - [24/Aug/2026:01:38:10 -0500] "HEAD /webmail/ HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 93.115.26.112 - - [24/Aug/2026:01:38:11 -0500] "HEAD /roundcube/ HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 93.115.26.112 - - [24/Aug/2026:01:38:11 -0500] "HEAD /mail/ HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 93.115.26.112 - - [24/Aug/2026:01:38:12 -0500] "HEAD /webmail/ HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 93.115.26.112 - - [24/Aug/2026:01:38:12 -0500] "HEAD /roundcube/ HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇩🇪 london2038.com	2026-08-24 06:37:24 (7 hours ago)	93.115.26.112 - - [24/Aug/2026:08:37:22 +0200] "HEAD /webmail/ HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Win ... show more 93.115.26.112 - - [24/Aug/2026:08:37:22 +0200] "HEAD /webmail/ HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 93.115.26.112 - - [24/Aug/2026:08:37:22 +0200] "HEAD /roundcube/ HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 93.115.26.112 - - [24/Aug/2026:08:37:22 +0200] "HEAD /mail/ HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 jkhorvath.com	2026-08-24 06:32:51 (7 hours ago)	Request for URL /webmail/	Phishing Brute-Force Web App Attack
🇹🇷 eryilmaz	2026-08-24 06:32:00 (7 hours ago)	Automated attack blocked by eryilmaz WAF/defense engine (level 1, source: auto, path: /webmail)	Web App Attack Hacking
🇸🇰 iplusv	2026-08-24 06:00:26 (8 hours ago)	Automatic report from IV firewall log.	Port Scan Hacking Brute-Force
🇺🇸 MaxSmartCode	2026-08-24 05:32:21 (8 hours ago)	Credential brute-force attacks on webpage.	Brute-Force SSH
🇸🇰 HILKA	2026-08-24 05:30:09 (8 hours ago)	Automatic report from HLK firewall log.	Port Scan Hacking Brute-Force
🇩🇪 pigro	2026-08-24 05:15:52 (8 hours ago)	93.115.26.112 - - [24/Aug/2026:07:15:51 +0200] "HEAD /webmail/ HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Win ... show more 93.115.26.112 - - [24/Aug/2026:07:15:51 +0200] "HEAD /webmail/ HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 93.115.26.112 - - [24/Aug/2026:07:15:51 +0200] "HEAD /roundcube/ HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 sandra361	2026-08-24 05:10:02 (8 hours ago)	Cloudflare WAF: 11 request(s) from AS16125/LT \| Action: link_maze_injected \| GET,HEAD HTTP/1.1 \| Pat ... show more Cloudflare WAF: 11 request(s) from AS16125/LT \| Action: link_maze_injected \| GET,HEAD HTTP/1.1 \| Paths: /mail/,/rc/,/roundcube/,/webmail/ \| User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 conseilgouz	2026-08-24 05:09:46 (8 hours ago)	mae- 404 : Too many 404 errors	Brute-Force

Showing 1 to 15 of 214 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 69.5.169.204

🇺🇸 23.172.217.77

🇺🇸 20.102.98.53

🇬🇪 2a0b:6204:a84d:dd00:e858:fc70:ca87:55a4

🇱🇹 213.176.26.114

🇩🇪 209.38.237.29

🇺🇸 195.184.76.118

🇷🇺 176.53.197.186

🇫🇷 149.202.60.221

🇹🇼 128.14.236.41

🇧🇬 91.191.209.46

🇲🇦 81.192.46.32

🇧🇬 78.128.114.46

🇺🇸 72.167.43.61

🇩🇪 69.5.169.53

🇨🇳 27.23.59.87

🇩🇪 213.209.159.19

🇦🇷 181.46.9.173

🇺🇸 172.212.194.58

🇨🇦 172.105.23.187