AbuseIPDB » 93.123.109.141

93.123.109.141 was found in our database!

This IP was reported 162 times. Confidence of Abuse is 44%: ?

44%

ISP	Nybula LLC
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	93-123-109-141.sarnica.net
Domain Name	nybula.com
Country	Netherlands
City	Amsterdam, North Holland

Report 93.123.109.141

Whois 93.123.109.141

IP Abuse Reports for 93.123.109.141:

This IP address has been reported a total of 162 times from 63 distinct sources. 93.123.109.141 was first reported on October 2nd 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
bigorre.org	2024-10-04 06:34:29 (2 months ago)	suspicious query, Sniffing for wordpress plugins log:/wp-content/plugins/dzs-zoomsounds/savepng.php? ... show moresuspicious query, Sniffing for wordpress plugins log:/wp-content/plugins/dzs-zoomsounds/savepng.php?location=1877.php show less	Web App Attack
clapper	2024-10-04 04:38:51 (2 months ago)	(mod_security) mod_security (id:980001) triggered by 93.123.109.141 (BG/Bulgaria/93-123-109-141.sarn ... show more(mod_security) mod_security (id:980001) triggered by 93.123.109.141 (BG/Bulgaria/93-123-109-141.sarnica.net): 5 in the last 3600 secs; ID: rub show less	Brute-Force Bad Web Bot
syokadmin	2024-10-03 22:29:40 (2 months ago)	(PERMBLOCK) 93.123.109.141 (DE/Germany/93-123-109-141.sarnica.net) has had more than 2 temp blocks i ... show more(PERMBLOCK) 93.123.109.141 (DE/Germany/93-123-109-141.sarnica.net) has had more than 2 temp blocks in the last 86400 secs show less	Brute-Force
Cloudkul Cloudkul	2024-10-03 22:12:05 (2 months ago)	Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ... show moreAttempted Not Found (404 status code) requests on our application, more than 30% of their total requests. show less	Brute-Force Web App Attack
TPI-Abuse	2024-10-03 21:58:17 (2 months ago)	(mod_security) mod_security (id:210350) triggered by 93.123.109.141 (93-123-109-141.sarnica.net): 1 ... show more(mod_security) mod_security (id:210350) triggered by 93.123.109.141 (93-123-109-141.sarnica.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 03 17:58:12.114015 2024] [security2:error] [pid 11516:tid 11516] [client 93.123.109.141:60897] [client 93.123.109.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.saadeh.ws\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.saadeh.ws"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "Zv8TdHjVBT_iHGm0WuQMbQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
syokadmin	2024-10-03 21:11:35 (2 months ago)	(mod_security) mod_security (id:77350295) triggered by 93.123.109.141 (DE/Germany/93-123-109-141.sar ... show more(mod_security) mod_security (id:77350295) triggered by 93.123.109.141 (DE/Germany/93-123-109-141.sarnica.net): 1 in the last 3600 secs show less	Brute-Force
polycoda	2024-10-03 13:07:24 (2 months ago)	📄 Probes for tons of inexistent files and PHP scripts	Hacking Web App Attack
el-brujo	2024-10-03 12:31:02 (2 months ago)	Cloudflare WAF: Request Path: /ALFA_DATA/alfacgiapi/perl.alfa Request Query: Host: foro.elhacker.ne ... show moreCloudflare WAF: Request Path: /ALFA_DATA/alfacgiapi/perl.alfa Request Query: Host: foro.elhacker.net userAgent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 Action: block Source: firewallManaged ASN Description: NYBULA Country: BG Method: POST Timestamp: 2024-10-03T12:31:02Z ruleId: 0242110ae62e44028a13bf4834780914. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
fmWAF	2024-10-03 11:45:11 (2 months ago)	Automated report, Hacker, patterns used: wp-content - User Agent: Mozilla/5.0 (Windows NT 10.0; Wi ... show moreAutomated report, Hacker, patterns used: wp-content - User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36 show less	Web App Attack
Anonymous	2024-10-03 11:24:00 (2 months ago)	ALFA.TEaM.Web.Shell	Hacking
penjaga BRIN	2024-10-03 11:14:20 (2 months ago)	nginx-alfa-95	Web App Attack
Abuse Reporting	2024-10-03 11:08:24 (2 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-content/themes/seotheme/db. ... show moreDetected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-content/themes/seotheme/db.php?u - User Agent: N/A - Timestamp: 10/3/2024 11:08 am (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
i-turnradio.nl	2024-10-03 10:39:20 (2 months ago)	2024-10-03 @ 12:39:20 (CET) ~ Blocked for trying to access: /simple.php	Web App Attack
Anonymous	2024-10-03 10:21:55 (2 months ago)	wordpress-trap	Web App Attack
Burayot	2024-10-03 10:12:25 (2 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 93.123.109.141 (BG/Bulgaria/93-123- ... show moreLF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 93.123.109.141 (BG/Bulgaria/93-123-109-141.sarnica.net): 2 in the last 3600 secs show less	Web App Attack