JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 93.123.109.221

93.123.109.221 was found in our database!

This IP was reported 427 times. Confidence of Abuse is 100%: ?

100%

ISP	TECHOFF SRV LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS48090
Domain Name	dmzhost.co
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 93.123.109.221

Whois 93.123.109.221

IP Abuse Reports for 93.123.109.221:

This IP address has been reported a total of 427 times from 251 distinct sources. 93.123.109.221 was first reported on February 1st 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 dave	2026-06-03 01:52:28 (23 hours ago)	threat-feed-sync observed repeated abuse from this IP after local filtering. scenarios=crowdsecurity ... show more threat-feed-sync observed repeated abuse from this IP after local filtering. scenarios=crowdsecurity/vpatch-git-config targets=cloud hit_count=3 first_seen=2026-06-01T05:41:26Z last_seen=2026-06-03T01:52:28Z show less	Web App Attack
🇫🇷 dwmp	2026-06-03 01:51:29 (23 hours ago)	[02/Jun/2026:22:52:24.863901 +0200] ah9CiAGECL7xGIJsuzjJ8gAAAJg 93.123.109.221 55266 38.242.227.117 ... show more [02/Jun/2026:22:52:24.863901 +0200] ah9CiAGECL7xGIJsuzjJ8gAAAJg 93.123.109.221 55266 38.242.227.117 7081 [03/Jun/2026:03:51:27.723854 +0200] ah@In5mHxeShtZOWvvm9JAAAAEk 93.123.109.221 35824 38.242.227.117 7081 [03/Jun/2026:03:51:28.755218 +0200] ah@IoPp140VaJ9eL8xfY4QAAAAw 93.123.109.221 35826 38.242.227.117 7081 ... show less	Brute-Force SSH
🇩🇪 ut-addicted.com	2026-06-03 01:48:26 (23 hours ago)	\[Wed Jun 03 03:48:25.372522 2026\] \[:error\] \[pid 12340:tid 139785884661504\] \[client 93.123.109 ... show more \[Wed Jun 03 03:48:25.372522 2026\] \[:error\] \[pid 12340:tid 139785884661504\] \[client 93.123.109.221:9852\] \[client 93.123.109.221\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "ut-addicted.com"\] \[uri "/.git/config"\] \[unique_id "ah@H6VxY9DlaOrdFROdtZAAAAMI"\] show less	Brute-Force Web App Attack
🇬🇧 Mendip_Defender	2026-06-03 01:46:01 (23 hours ago)	[03/Jun/2026:02:36:29.482363 +0100] ah-FHWYr4hEto65TyVJ3sgAAAAI 93.123.109.221 44838 188.246.206.60 ... show more [03/Jun/2026:02:36:29.482363 +0100] ah-FHWYr4hEto65TyVJ3sgAAAAI 93.123.109.221 44838 188.246.206.60 7081 [03/Jun/2026:02:45:58.629386 +0100] ah-HVgsDawPXAGnoEIRD8AAAAEs 93.123.109.221 53376 188.246.206.60 7081 ... show less	Brute-Force
🇺🇸 TPI-Abuse	2026-06-03 01:44:25 (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 93.123.109.221 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 93.123.109.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 21:44:18.468616 2026] [security2:error] [pid 24719:tid 24719] [client 93.123.109.221:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.hcoahawaii.org"] [uri "/.git/config"] [unique_id "ah-G8rDTE5HXZWiPpHn2QAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 marcel-knorr.de	2026-06-03 01:41:15 (23 hours ago)	[MK-Root1] Blocked by UFW	Brute-Force Port Scan
🇫🇷 LRob.fr	2026-06-03 01:30:03 (23 hours ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 01:27:32 (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 93.123.109.221 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 93.123.109.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 21:27:27.787262 2026] [security2:error] [pid 7523:tid 7523] [client 93.123.109.221:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.poweribo.com"] [uri "/.git/config"] [unique_id "ah-C_3buFPcNis2L6Cl8ewAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 ✨	2026-06-03 01:15:14 (23 hours ago)	Domain : MailEnable WebMail Rule : WEB IP in black list	Port Scan
🇱🇻 garmtech.com	2026-06-03 00:54:09 (1 day ago)	Attempted access to sensitive endpoint (/.git/config) detected. Automated scan or unauthorized probi ... show more Attempted access to sensitive endpoint (/.git/config) detected. Automated scan or unauthorized probing. show less	Web App Attack
Anonymous	2026-06-03 00:53:32 (1 day ago)	93.123.109.221 - - [03/Jun/2026:00:53:31 +0000] "GET /.git/config HTTP/1.1" 404 2773 "-" "Mozilla/5. ... show more 93.123.109.221 - - [03/Jun/2026:00:53:31 +0000] "GET /.git/config HTTP/1.1" 404 2773 "-" "Mozilla/5.0 (Windows NT 6.1; rv:109.0) Gecko/20100101 Firefox/115.0" ... show less	Bad Web Bot Web App Attack
🇺🇸 Epimetheus	2026-06-03 00:50:32 (1 day ago)	Unauthorized access attempts: [GET] /.git/config UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_ ... show more Unauthorized access attempts: [GET] /.git/config UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.6 Mobile/15E148 Safari/604.1 show less	Web App Attack
🇻🇪 LUISE	2026-06-03 00:25:28 (1 day ago)	Vulnerability scanning for Web/phpMyAdmin files on ULA server 72-23.	Hacking Bad Web Bot
🇺🇸 Lezetho	2026-06-03 00:02:03 (1 day ago)	DDoS, WebSpam, Web Attack, and Brute-force blocked by Cloudflare	DDoS Attack Email Spam Hacking Brute-Force
🇷🇴 INTEQ	2026-06-02 23:27:50 (1 day ago)	Web attack from 93.123.109.221	Web App Attack

Showing 61 to 75 of 427 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 210.114.22.126

🇧🇷 200.36.133.42

🇩🇪 194.88.98.89

🇳🇱 192.142.24.66

🇲🇽 187.140.186.129

🇦🇷 179.0.183.182

🇺🇸 162.216.150.110

🇺🇸 147.185.132.234

🇨🇳 144.123.76.251

🇺🇸 135.237.127.177

🇨🇳 119.100.118.145

🇨🇳 118.145.104.105

🇺🇸 107.150.99.178

🇫🇷 92.103.134.183

🇧🇬 91.191.209.118

🇩🇪 87.106.29.151

🇩🇪 69.5.169.72

🇩🇪 69.5.169.29

🇩🇪 69.5.169.20

🇩🇪 64.89.163.86