JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 93.152.221.226

93.152.221.226 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 100%: ?

100%

ISP	TechTies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197170
Domain Name	tech-ties.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 93.152.221.226

Whois 93.152.221.226

IP Abuse Reports for 93.152.221.226:

This IP address has been reported a total of 27 times from 26 distinct sources. 93.152.221.226 was first reported on July 29th 2026, and the most recent report was 2 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 voormedia	2026-07-30 22:08:11 (2 minutes ago)	Accessed trap at '/.env'	Web App Attack
🇩🇪 netclix.gr	2026-07-30 21:59:13 (11 minutes ago)	(mod_security) mod_security triggered on hostname [redacted] 93.152.221.226 (DE/Germany/-): (CF_ENA ... show more (mod_security) mod_security triggered on hostname [redacted] 93.152.221.226 (DE/Germany/-): (CF_ENABLE) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-07-30 21:55:13 (15 minutes ago)	(mod_security) mod_security (id:210492) triggered by 93.152.221.226 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 93.152.221.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 17:55:04.805123 2026] [security2:error] [pid 2044712:tid 2044727] [client 93.152.221.226:57390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stonyp.com"] [uri "/.env.bak"] [unique_id "amvIOOTVgaO0GHlfwsgYaQAAAEs"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 nekopavel	2026-07-30 21:37:32 (33 minutes ago)	93.152.221.226 - - [30/Jul/2026:23:37:30 +0200]"GET /.git/config HTTP/1.1" 200 4153"https://www.goog ... show more 93.152.221.226 - - [30/Jul/2026:23:37:30 +0200]"GET /.git/config HTTP/1.1" 200 4153"https://www.google.com/" pavel.gg "Go-http-client/1.1""0.000" "-""Frankfurt am Main" "DE" 93.152.221.226 - - [30/Jul/2026:23:37:30 +0200]"GET /api/.env HTTP/1.1" 200 4153"https://www.google.com/" pavel.gg "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/124.0.0.0 Safari/537.36""0.000" "-""Frankfurt am Main" "DE" 93.152.221.226 - - [30/Jul/2026:23:37:30 +0200]"GET /storage/.env HTTP/1.1" 200 4153"https://www.google.com/" pavel.gg "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/124.0.0.0 Safari/537.36""0.000" "-""Frankfurt am Main" "DE" ... show less	Hacking Bad Web Bot Web App Attack
🇪🇸 alferez	2026-07-30 21:29:13 (41 minutes ago)	wp2shell bug exploit	Hacking Exploited Host Web App Attack
🇺🇸 kosada.com	2026-07-30 21:17:27 (53 minutes ago)	Web vulnerability probing: /.env.backup	Web App Attack
Anonymous	2026-07-30 21:06:33 (1 hour ago)	Blocked: Reason='Suspicious traffic score=90 (review-based detection)'; Requests=22	Hacking
Anonymous	2026-07-30 21:03:02 (1 hour ago)	Bot / scanning and/or hacking attempts: GET /index.php HTTP/1.1, GET /.env.production HTTP/1.1, GET ... show more Bot / scanning and/or hacking attempts: GET /index.php HTTP/1.1, GET /.env.production HTTP/1.1, GET /mnemonic.txt HTTP/1.1, GET /.env.prod HTTP/1.1, GET /keystore.json HTTP/1.1, GET /id.json HTTP/1.1, GET /.env.staging HTTP/1.1, GET /.git/config HTTP/1.1, GET /keys.json HTTP/1.1, GET /private_keys.txt HTTP/1.1, GET /.git/HEAD HTTP/1.1, GET /.env.old HTTP/1.1, GET /wallet.json HTTP/1.1 show less	Hacking Web App Attack
🇧🇪 voormedia	2026-07-30 20:53:53 (1 hour ago)	Accessed trap at '/.git/config'	Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-30 20:38:47 (1 hour ago)	Blocked by CSF 13 firewall - Rule: config-dotfile BG/Bulgaria/-	Web App Attack
🇧🇪 cmbplf	2026-07-30 19:30:26 (2 hours ago)	408 requests with url.path .env 197 requests with url.path .git/* 186 requests with url.path s ... show more 408 requests with url.path .env 197 requests with url.path .git/ 186 requests with url.path *secrets.json show less	Brute-Force Bad Web Bot
Anonymous	2026-07-30 18:02:13 (4 hours ago)	Web attack	Bad Web Bot Web App Attack
🇨🇭 zynex	2026-07-30 17:51:14 (4 hours ago)	URL Probing: /public/.env	Web App Attack
🇩🇪 raph	2026-07-30 17:46:04 (4 hours ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
Anonymous	2026-07-30 17:33:52 (4 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.234.199.190

🇿🇦 165.16.182.248

🇨🇳 139.170.73.118

🇳🇱 84.82.14.214

🇮🇩 36.92.186.59

🇳🇱 213.176.26.194

🇺🇸 172.234.25.150

🇨🇳 124.89.89.147

🇨🇳 116.172.248.100

🇺🇸 104.248.122.205

🇷🇴 92.118.39.49

🇫🇷 91.231.89.234

🇬🇧 35.203.211.49

🇬🇧 35.203.210.56

🇧🇪 34.62.220.141

🇺🇸 20.102.115.195

🇫🇷 2001:41d0:33d:9200::400

🇨🇳 221.181.210.98

🇰🇷 220.80.223.144

🇧🇷 205.210.31.200