JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 93.152.24.39

93.152.24.39 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 82%: ?

82%

ISP	Code200 UAB
Usage Type	Fixed Line ISP
ASN	AS9009
Hostname(s)	93-152-24-39.xln.managedbroadband.co.uk
Domain Name	code200.global
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 93.152.24.39

Whois 93.152.24.39

IP Abuse Reports for 93.152.24.39:

This IP address has been reported a total of 30 times from 19 distinct sources. 93.152.24.39 was first reported on June 10th 2026, and the most recent report was 59 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 findlab	2026-07-16 01:05:01 (59 minutes ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇸🇪 SkyDancer	2026-07-15 15:02:27 (11 hours ago)	Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ... show more Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx show less	Hacking Brute-Force SSH
🇮🇩 origrata	2026-07-15 09:37:12 (16 hours ago)	[OGWAF] path_traversal attack blocked \| severity: high \| GET /.vscode/sftp.json \| UA: Mozilla/5.0 (W ... show more [OGWAF] path_traversal attack blocked \| severity: high \| GET /.vscode/sftp.json \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Sa show less	Hacking Web App Attack
🇨🇭 4server	2026-07-14 15:08:07 (1 day ago)	[TueJul1417:08:00.3899632026][security2:error][pid3414096:tid3414176][client93.152.24.39:0]ModSecuri ... show more [TueJul1417:08:00.3899632026][security2:error][pid3414096:tid3414176][client93.152.24.39:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"inserzioniticino.ch\"][uri\"/sftp-config.json\"][unique_id\"alZQ0BGdTre2hFvLT8lCpwAAAVE\"] show less	Hacking Web App Attack
🇨🇿 akac	2026-07-11 05:01:27 (4 days ago)	Web vulnerability scanning: HTTP/1.1 GET /.vscode/sftp.json	Hacking Brute-Force Bad Web Bot Web App Attack
🇪🇸 pipeline.es	2026-07-09 15:21:01 (6 days ago)	Web scanning / probing for vulnerable paths \| URL: /sftp-config.json \| Evidence: primeiraclasse.pt 9 ... show more Web scanning / probing for vulnerable paths \| URL: /sftp-config.json \| Evidence: primeiraclasse.pt 93.152.24.39 - - [09/Jul/2026:17:18:06 +0200] \"GET /sftp-config.json HTTP/1.1\" 404 20519 \"-\" \"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=FR \| ASN: M247 Europe SRL \| Country: FR show less	Port Scan Web App Attack
🇺🇸 mnsf	2026-07-09 12:05:10 (6 days ago)	Too many Status 40X (14)	Brute-Force Web App Attack
🇧🇪 cmbplf	2026-07-08 03:42:04 (1 week ago)	248 requests with url.path *config.json	Brute-Force Bad Web Bot
🇫🇷 masterguru	2026-07-08 01:12:31 (1 week ago)	Restricted File Access Attempt. Matched phrase "config.json" at REQUEST_FILENAME. (930130-195)	Hacking Web App Attack
🇫🇷 Baking333	2026-07-08 01:06:01 (1 week ago)	[redacted] 93.152.24.39 - - [08/Jul/2026:02:05:58 +0100] "GET /[redacted] HTTP/1.1" 302 1613 0/45372 ... show more [redacted] 93.152.24.39 - - [08/Jul/2026:02:05:58 +0100] "GET /[redacted] HTTP/1.1" 302 1613 0/45372 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" [redacted] 93.152.24.39 - - [08/Jul/2026:02:05:58 +0100] "GET /[redacted] HTTP/1.1" 302 1528 0/44511 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
Anonymous	2026-07-07 20:13:27 (1 week ago)	(caddyscan) Scanner path probe from 93.152.24.39 (FR/France/93-152-24-39.xln.managedbroadband.co.uk) ... show more (caddyscan) Scanner path probe from 93.152.24.39 (FR/France/93-152-24-39.xln.managedbroadband.co.uk): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 404 227 93.152.24.39 - - [07/Jul/2026:20:13:22 +0000] "GET /.vscode/sftp.json HTTP/1.1" [REDACTED] 200 2627 93.152.24.39 - - [07/Jul/2026:20:13:22 +0000] "GET /.vscode/sftp.json HTTP/1.1" [REDACTED] 404 226 93.152.24.39 - - [07/Jul/2026:20:13:22 +0000] "GET /.vscode/sftp.json HTTP/1.1" [REDACTED] 200 2627 93.152.24.39 - - [07/Jul/2026:20:13:22 +0000] "GET /.vscode/sftp.json HTTP/1.1" [REDACTED] 200 2627 93.152.24.39 - - [07/Jul/2026:20:13:23 +0000] "GET /.vscode/sftp.json HTTP/1.1" show less	Port Scan
🇺🇸 WizardsToolkit	2026-07-07 13:12:41 (1 week ago)	tried to access server backup files	Web App Attack
🇳🇱 oisecnet	2026-07-05 21:01:49 (1 week ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-07-05. 2 requests from this I ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-07-05. 2 requests from this IP. show less	Brute-Force Web App Attack SSH
🇺🇸 TPI-Abuse	2026-07-05 02:36:20 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 93.152.24.39 (93-152-24-39.xln.managedbroadband ... show more (mod_security) mod_security (id:210492) triggered by 93.152.24.39 (93-152-24-39.xln.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 22:36:13.304249 2026] [security2:error] [pid 4576:tid 4576] [client 93.152.24.39:65454] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oglesbyproductions.com"] [uri "/sftp-config.json"] [unique_id "aknDHavU317Ytfqur1Nl-wAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 22:27:21 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 93.152.24.39 (93-152-24-39.xln.managedbroadband ... show more (mod_security) mod_security (id:210492) triggered by 93.152.24.39 (93-152-24-39.xln.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 18:27:15.036483 2026] [security2:error] [pid 450:tid 464] [client 93.152.24.39:6400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ceresfund.com"] [uri "/sftp-config.json"] [unique_id "akmIw5V_JDQDWWNr-cM57QAAAMw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.126

🇷🇴 80.94.92.179

🇬🇧 35.203.211.243

🇹🇭 1.2.190.36

🇩🇪 209.38.198.228

🇳🇱 195.178.110.30

🇦🇷 190.49.88.195

🇦🇷 181.93.166.156

🇦🇺 173.239.250.89

🇮🇳 143.110.181.226

🇧🇬 93.94.141.115

🇺🇸 65.49.1.108

🇺🇸 65.49.1.74

🇺🇸 65.49.1.69

🇳🇱 64.89.162.15

🇩🇪 46.101.121.172

🇳🇱 45.148.10.200

🇺🇸 44.166.86.109

🇬🇧 35.203.210.19

🇲🇩 217.156.66.34