This IP address has been reported a total of
11
times from
8 distinct
sources.
93.157.28.23 was first reported on
June 16th 2022 , and the most recent report was
43 minutes ago United States of America
with 2
reports;
Poland
with 1
report.
The most common categories in these recent reports were:
Bad Web Bot
3
times;
Web App Attack
3
times;
Brute-Force
2
times;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇵🇱
Budyn
2026-10-12 00:39:48
(43 minutes ago)
Budyn SOC Canary Trap: AWS Key Compromised! | Memo: AWS_Token_1 | Action: AWS API Call | Token: jjbm ...
show more
Budyn SOC Canary Trap: AWS Key Compromised! | Memo: AWS_Token_1 | Action: AWS API Call | Token: jjbmqxvagp71pskep78twdp5w | Client Tool: aws-cli/2.33.12 md/awscrt#0.31.1 ua/2.1 os/linux#5.15.0-191-generic md/arch#x86_64 lang/python#3.13.11 md/pyimpl#CPython m/E,Z,b,g cfg/retry-mode#standard md...
show less
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-04 14:30:31
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 93.157.28.23 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 93.157.28.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 10:30:23.417049 2026] [security2:error] [pid 18549:tid 18549] [client 93.157.28.23:48163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grancanariaholidays.com"] [uri "/.git/HEAD"] [unique_id "asJi_8yxyHX0CzsO5cVpSgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 18:58:04
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 93.157.28.23 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 93.157.28.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 14:57:54.932748 2026] [security2:error] [pid 6817:tid 6817] [client 93.157.28.23:56993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "centrosteckerl.com"] [uri "/.git/HEAD"] [unique_id "arAssg5xjICB2DyKcckwCgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-04 10:54:18
(2 months ago)
FortiWeb WAF: 24 attacks detected. Threat Score: 10929805. Types: Client Management(12), Signature D ...
show more
FortiWeb WAF: 24 attacks detected. Threat Score: 10929805. Types: Client Management(12), Signature Detection(12). Origin: United States.
show less
Web App Attack
🇨🇭
backslash
2026-02-20 09:51:29
(7 months ago)
SQL Injection
🇦🇺
MAGIC
2025-05-13 05:14:19
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇮🇩
BPS-StatisticsIndonesia
2025-04-04 07:42:37
(1 year ago)
WP Login Scan Activities
Web App Attack
2025-02-24 03:09:35
(1 year ago)
wordpress-trap
Web App Attack
🇨🇭
backslash
2024-11-10 10:05:06
(1 year ago)
block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68
Bad Web Bot
🇨🇭
backslash
2024-08-14 08:18:59
(2 years ago)
Bad Web Bot
🇹🇼
kk_it_man
2022-06-16 17:06:01
(4 years ago)
hack
Hacking
Showing 1 to
11
of 11 reports
