JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 93.123.118.20

93.123.118.20 was found in our database!

This IP was reported 62 times. Confidence of Abuse is 35%: ?

35%

ISP	Neterra Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS209630
Domain Name	neterra.net
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 93.123.118.20

Whois 93.123.118.20

IP Abuse Reports for 93.123.118.20:

This IP address has been reported a total of 62 times from 5 distinct sources. 93.123.118.20 was first reported on June 3rd 2026, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 anycast_ac	2026-07-21 14:07:32 (20 hours ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/1080 (socks). Family fingerprin ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/1080 (socks). Family fingerprint: proxy-scanner Commands captured: $ socks5 methods offered: ['no-auth'] $ socks5 CONNECT -> we-love-the.world:80 show less	DDoS Attack
🇩🇪 anycast_ac	2026-07-20 14:16:37 (1 day ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/1080 (socks). Family fingerprin ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/1080 (socks). Family fingerprint: proxy-scanner Commands captured: $ socks5 methods offered: ['no-auth'] $ socks5 CONNECT -> 51.195.40.238:443 show less	DDoS Attack
🇩🇪 anycast_ac	2026-07-20 13:58:58 (1 day ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/1080 (socks). Family fingerprin ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/1080 (socks). Family fingerprint: proxy-scanner Commands captured: $ socks5 methods offered: ['no-auth'] $ socks5 CONNECT -> we-love-the.world:443 show less	DDoS Attack
🇩🇪 anycast_ac	2026-07-19 13:58:10 (2 days ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/1080 (socks). Family fingerprin ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/1080 (socks). Family fingerprint: proxy-scanner Commands captured: $ socks5 methods offered: ['no-auth'] $ socks5 CONNECT -> we-love-the.world:443 show less	DDoS Attack
🇩🇪 anycast_ac	2026-07-18 13:46:12 (3 days ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/1080 (socks). Family fingerprin ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/1080 (socks). Family fingerprint: proxy-scanner Commands captured: $ socks5 methods offered: ['no-auth'] $ socks5 CONNECT -> make-internet-safer-for-the.world:443 show less	DDoS Attack
🇩🇪 anycast_ac	2026-07-17 13:36:21 (4 days ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/1080 (socks). Family fingerprin ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/1080 (socks). Family fingerprint: proxy-scanner Commands captured: $ socks5 methods offered: ['no-auth'] $ socks5 CONNECT -> we-love-the.world:80 show less	DDoS Attack
🇨🇿 Countryman	2026-07-17 12:15:25 (4 days ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
🇦🇺 aranguren.org	2026-07-16 01:36:49 (6 days ago)	93.123.118.20 - - [16/Jul/2026:11:36:37 +1000] "GET /check_3245a3518751c258 HTTP/1.1" 404 1005 "-" " ... show more 93.123.118.20 - - [16/Jul/2026:11:36:37 +1000] "GET /check_3245a3518751c258 HTTP/1.1" 404 1005 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 93.123.118.20 - - [16/Jul/2026:11:36:40 +1000] "GET /check_e2faec9600b41383 HTTP/1.1" 404 1005 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 93.123.118.20 - - [16/Jul/2026:11:36:42 +1000] "GET /check_f33c2ea338f5de69 HTTP/1.1" 404 1005 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 93.123.118.20 - - [16/Jul/2026:11:36:45 +1000] "GET /check_299f8093516ba0be HTTP/1.1" 404 1005 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 93.123.118.20 - - [16/Jul/2026:11:36:47 +1000] "GET /check_f87940dd3b58cc87 HTTP/1.1" 404 1005 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW ... show less	Bad Web Bot
🇦🇺 aranguren.org	2026-07-15 22:02:38 (6 days ago)	[Thu Jul 16 08:02:32.383583 2026] [authz_core:error] [pid 835337:tid 835387] [client 93.123.118.20:5 ... show more [Thu Jul 16 08:02:32.383583 2026] [authz_core:error] [pid 835337:tid 835387] [client 93.123.118.20:54476] AH01630: client denied by server configuration: /srv/http/ [Thu Jul 16 08:02:34.966624 2026] [authz_core:error] [pid 829216:tid 829248] [client 93.123.118.20:54536] AH01630: client denied by server configuration: /srv/http/ [Thu Jul 16 08:02:37.548853 2026] [authz_core:error] [pid 835337:tid 835397] [client 93.123.118.20:49420] AH01630: client denied by server configuration: /srv/http/ ... show less	Brute-Force Web App Attack
🇦🇺 aranguren.org	2026-07-15 15:59:34 (6 days ago)	[Thu Jul 16 01:59:28.026561 2026] [authz_core:error] [pid 700654:tid 700706] [client 93.123.118.20:3 ... show more [Thu Jul 16 01:59:28.026561 2026] [authz_core:error] [pid 700654:tid 700706] [client 93.123.118.20:33534] AH01630: client denied by server configuration: /srv/http/ [Thu Jul 16 01:59:30.578549 2026] [authz_core:error] [pid 700654:tid 700704] [client 93.123.118.20:33590] AH01630: client denied by server configuration: /srv/http/ [Thu Jul 16 01:59:33.124373 2026] [authz_core:error] [pid 719030:tid 719070] [client 93.123.118.20:33626] AH01630: client denied by server configuration: /srv/http/ ... show less	Brute-Force Web App Attack
🇨🇿 Countryman	2026-07-15 11:54:39 (6 days ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
🇨🇿 Countryman	2026-07-14 06:56:16 (1 week ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
🇯🇵 demonsword	2026-07-13 14:46:49 (1 week ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: tls.bunnyfeet.baby:443 show less	Open Proxy Port Scan
🇨🇿 Countryman	2026-07-12 21:48:57 (1 week ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
🇯🇵 demonsword	2026-07-12 09:51:04 (1 week ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: tls.bunnyfeet.baby:443 show less	Open Proxy Port Scan

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2409:40c1:10fd:d70c:58ea:2b93:ca3a:adf3

🇺🇸 216.244.66.201

🇩🇪 195.230.103.245

🇵🇱 176.53.159.198

🇻🇳 116.110.214.134

🇸🇬 101.47.26.176

🇧🇬 78.83.63.114

🇸🇬 47.245.126.205

🇱🇧 213.204.115.57

🇬🇧 193.163.125.158

🇧🇷 187.102.82.158

🇺🇸 168.100.149.226

🇮🇳 110.227.215.90

🇹🇷 94.154.43.56

🇸🇬 20.153.140.50

🇺🇸 20.121.139.67

🇮🇩 2.27.165.137

🇧🇷 205.210.31.208

🇲🇽 200.68.173.130

🇵🇪 181.65.37.19