JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

93.152.221.72

Recent Activity

Abuse Confidence Score

100% Critical

71 reports

58 reporters · latest 6 hours ago

ISP: TechTies Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS197170
Domain Name: tech-ties.net
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

71 from 58 distinct reporters

First reported

October 14th 2026

Most recent report

6 hours ago

Last 60 days

Top reporter locations 🇩🇪 Germany 17 🇫🇷 France 13 🇺🇸 United States of America 9

Most common categories Web App Attack 50 Bad Web Bot 23 Brute-Force 21 Hacking 17 Port Scan 5

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-13 17:40:29 UTC · (6 hours ago)	93.152.221.72 - - [13/Nov/2026:17:40:28 +0000] "GET /images/..%2f..%2f..%2f..%2f.env HTTP/1.1" 400 166 "-" "-" 93.152.221.72 - - [13/Nov/2026:17:40:29 +0000] "GET /assets/..%2f..%2f..%2f..%2f.env HTTP/1.1" 400 166 "-" "-" 93.152.221.72 - - [13/Nov/20 ... show more 93.152.221.72 - - [13/Nov/2026:17:40:28 +0000] "GET /images/..%2f..%2f..%2f..%2f.env HTTP/1.1" 400 166 "-" "-" 93.152.221.72 - - [13/Nov/2026:17:40:29 +0000] "GET /assets/..%2f..%2f..%2f..%2f.env HTTP/1.1" 400 166 "-" "-" 93.152.221.72 - - [13/Nov/2026:17:40:29 +0000] "GET /public/..%2f..%2f..%2f..%2f.env HTTP/1.1" 400 166 "-" "-" ... show less	Brute-Force
Anonymous	2026-11-13 02:28:26 UTC · (21 hours ago)	Hacking Attempt	Hacking Web App Attack
🇫🇷 dragonv	2026-11-12 19:58:36 UTC · (1 day ago)	fail2ban nginx-botsearch: brute-force	Bad Web Bot Web App Attack
🇫🇮 mnazibo	2026-11-12 10:30:19 UTC · (1 day ago)	Date: Nov 12 12:45:06 2026 EAT \| Reported IP: 93.152.221.72 mod_security \| id: 920350 953100 959100 \| DE/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Host header is a numeric IP address; Host header is a n ... show more Date: Nov 12 12:45:06 2026 EAT \| Reported IP: 93.152.221.72 mod_security \| id: 920350 953100 959100 \| DE/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Host header is a numeric IP address; Host header is a numeric IP address; PHP Information Leakage; Outbound Anomaly Score Exceeded (Total Score: 4); Host header is a numeric IP address; Host header is a numeric IP address; PHP Information Leakage; Outbound Anomaly Score Exceeded (Total Score: 4) show less	SQL Injection Brute-Force Bad Web Bot
🇫🇮 mnazibo	2026-11-12 10:00:26 UTC · (1 day ago)	Date: Nov 12 12:45:06 2026 EAT \| Reported IP: 93.152.221.72 mod_security \| id: 920350 953100 959100 \| DE/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Host header is a numeric IP address; Host header is a n ... show more Date: Nov 12 12:45:06 2026 EAT \| Reported IP: 93.152.221.72 mod_security \| id: 920350 953100 959100 \| DE/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Host header is a numeric IP address; Host header is a numeric IP address; Host header is a numeric IP address; PHP Information Leakage; Outbound Anomaly Score Exceeded (Total Score: 4); Host header is a numeric IP address; Host header is a numeric IP address; PHP Information Leakage; Outbound Anomaly Score Exceeded (Total Score: 4) show less	SQL Injection Brute-Force Bad Web Bot
🇸🇬 simpeg-adm.bandung.go.id	2026-11-12 09:36:36 UTC · (1 day ago)	12/Nov/2026:09:36:34 +0000;93.152.221.72;"/.git/HEAD" 12/Nov/2026:09:36:34 +0000;93.152.221.72;"/" 12/Nov/2026:09:36:35 +0000;93.152.221.72;"/phpinfo" 12/Nov/2026:09:36:35 +0000;93.152.221.72;"/wp-admin/admin-ajax.php?action=revslider_show_image&img= ... show more 12/Nov/2026:09:36:34 +0000;93.152.221.72;"/.git/HEAD" 12/Nov/2026:09:36:34 +0000;93.152.221.72;"/" 12/Nov/2026:09:36:35 +0000;93.152.221.72;"/phpinfo" 12/Nov/2026:09:36:35 +0000;93.152.221.72;"/wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php" 12/Nov/2026:09:36:35 +0000;93.152.221.72;"/.env" 12/Nov/2026:09:36:35 +0000;93.152.221.72;"/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" 12/Nov/2026:09:36:35 +0000;93.152.221.72;"/phpinfo.php" ... show less	Web Spam Brute-Force Web App Attack
🇫🇮 mnazibo	2026-11-12 09:30:19 UTC · (1 day ago)	Date: Nov 12 12:03:54 2026 EAT \| Reported IP: 93.152.221.72 mod_security \| id: 920350 \| DE/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Host header is a numeric IP address	SQL Injection Brute-Force Bad Web Bot
🇫🇮 mnazibo	2026-11-12 08:30:16 UTC · (1 day ago)	Date: Nov 12 11:18:51 2026 EAT \| Reported IP: 93.152.221.72 mod_security \| id: 920350 930130 949110 953100 959100 930110 930120 920440 930100 932160 933140 \| DE/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; ... show more Date: Nov 12 11:18:51 2026 EAT \| Reported IP: 93.152.221.72 mod_security \| id: 920350 930130 949110 953100 959100 930110 930120 920440 930100 932160 933140 \| DE/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Host header is a numeric IP address; Host header is a numeric IP address; Host header is a numeric IP address; Host header is a numeric IP address; Host header is a numeric IP address; Host header is a numeric IP address; Host header is a numeric IP address; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 8); PHP Information Leakage; PHP Information Leakage; PHP Information Leakage; Outbound Anomaly Score Exceeded (Total Score: 4); Outbound Anomaly Score Exceeded (Total Score: 4); Outbound Anomaly Score Exceeded (Total Score: 4); Host header is a numeric IP address; Host header is a numeric IP address; Host header is a numeric IP address; Host header is a numeri show less	SQL Injection Brute-Force Bad Web Bot
🇫🇷 security.rdmc.fr	2026-11-11 21:36:04 UTC · (2 days ago)	Activity from blacklisted IP	Hacking
🇫🇷 Kejult	2026-11-10 19:38:41 UTC · (3 days ago)	Honeypot Finding: verified TCP multi-port scan/probing; 483 application-level events across 2 target ports and 13 source port(s). Ports: 80/HTTP, 443/HTTPS. Sensors: Tanner, H0neytr4p.	Port Scan
🇨🇳 PrivateLiu	2026-11-10 19:26:04 UTC · (3 days ago)	[AbuseIPDB auto-report] Rules: Rule1, Rule5. Region: non-CN. Config/sensitive path probing: accessed .env/.config/admin/.git paths returning 4xx/444; Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, ... show more [AbuseIPDB auto-report] Rules: Rule1, Rule5. Region: non-CN. Config/sensitive path probing: accessed .env/.config/admin/.git paths returning 4xx/444; Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /.env.stage, /.env, /.env.bak, /.env.dev, /.env.backup, /.env.local, /.env.development, /.env.test, /.env.old, /.env.save, /index.php, /.env.staging. Statuses: 403, 404, 444. Methods: GET, POST. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18. show less	Bad Web Bot Web App Attack
🇩🇪 D3vNu11	2026-11-10 01:40:20 UTC · (3 days ago)	Level: (LOW): Reputation Unknown via CitrixHoneypot IOC Country: Germany 6x -> Target Country: Germany HTTPS	Hacking Web App Attack
🇲🇳 Public CSIRT/CC of Mongolia	2026-11-08 21:39:13 UTC · (5 days ago)	Honeypot hit: HTTP/1.1 request on 2087 POST /login/?login_only=1 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:133.0) Gecko/20100101 Firefox/133.0 POST Data: user=root&pass=wrong; 2087 [1] TCP	Web App Attack
🇫🇷 LoneRider	2026-11-08 20:45:43 UTC · (5 days ago)	[08/Nov/2026:21:45:42.282066 +0100] avDfdrgjFQOH1rrEq_VdMQAAAAA 93.152.221.72 47060 127.0.0.1 7081 [08/Nov/2026:21:45:42.293486 +0100] avDfdlvuE9VuUFCKHRgoVgAAAAM 93.152.221.72 47074 127.0.0.1 7081 [08/Nov/2026:21:45:42.294222 +0100] avDfdlXEgIbvSaTE ... show more [08/Nov/2026:21:45:42.282066 +0100] avDfdrgjFQOH1rrEq_VdMQAAAAA 93.152.221.72 47060 127.0.0.1 7081 [08/Nov/2026:21:45:42.293486 +0100] avDfdlvuE9VuUFCKHRgoVgAAAAM 93.152.221.72 47074 127.0.0.1 7081 [08/Nov/2026:21:45:42.294222 +0100] avDfdlXEgIbvSaTEJKe6yQAAAAo 93.152.221.72 47066 127.0.0.1 7081 ... show less	Hacking
🇫🇷 Kejult	2026-11-08 20:24:21 UTC · (5 days ago)	Honeypot Finding: verified TCP multi-port scan/probing; 483 application-level events across 2 target ports and 19 source port(s). Ports: 80/HTTP, 443/HTTPS. Sensors: Tanner, H0neytr4p.	Port Scan

Showing 1 to 15 of 71 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 183.251.230.98

🇺🇸 147.185.132.171

🇩🇪 94.26.106.145

🇨🇳 180.76.114.151

🇺🇸 143.42.1.44

🇨🇳 101.96.202.87

🇫🇷 92.183.30.15

🇺🇸 72.205.170.19

🇺🇸 66.132.224.235

🇺🇸 20.80.109.52

🇨🇭 179.43.153.2

🇺🇸 66.132.159.71

🇳🇱 45.148.10.152

🇺🇸 40.124.180.6

🇰🇷 211.185.81.26

🇳🇱 193.47.62.69

🇰🇷 175.213.53.114

🇹🇭 165.154.120.29

🇺🇸 162.216.150.234

🇺🇸 162.158.186.91