JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 93.158.91.12

93.158.91.12 was found in our database!

This IP was reported 295 times. Confidence of Abuse is 56%: ?

56%

ISP	GlobalConnect AB
Usage Type	Fixed Line ISP
ASN	AS12552
Domain Name	globalconnect.se
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 93.158.91.12

Whois 93.158.91.12

IP Abuse Reports for 93.158.91.12:

This IP address has been reported a total of 295 times from 74 distinct sources. 93.158.91.12 was first reported on October 18th 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇭 Sawasdee	2026-08-23 04:12:14 (1 day ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇺🇸 LSPCCU	2026-08-22 15:57:05 (1 day ago)	TSEC Honeypot Network report. Threat score: 62/100. Categories: Port Scan, Hacking, Brute-Force, Web ... show more TSEC Honeypot Network report. Threat score: 62/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Context: 93.158.91.12 classified as botnet node participating in coordinated attack campaigns (high confidence). show less	Port Scan Hacking Brute-Force Web App Attack SSH
Anonymous	2026-08-18 18:20:07 (5 days ago)	2026-08-18 18:20:06 warning[2610587]: host [93.158.91.12]: unauthorized access attempted: ... show more 2026-08-18 18:20:06 warning[2610587]: host [93.158.91.12]: unauthorized access attempted: / show less	Port Scan Brute-Force
🇦🇺 crispi	2026-08-15 02:42:28 (1 week ago)	Port scan from 93.158.91.12	Port Scan
🇩🇪 HandyTreff.de	2026-08-14 17:03:25 (1 week ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -82.652 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -82.652 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Sa show less	Web App Attack Bad Web Bot
🇺🇸 gerensat	2026-08-11 09:55:05 (1 week ago)	2026-08-11 06:55:05 \| / \| [] \| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, ... show more 2026-08-11 06:55:05 \| / \| [] \| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36 show less	Web App Attack
🇩🇪 Phenix Info	2026-08-01 10:57:23 (3 weeks ago)	SmallGuard.fr/Prestashop Massive 403	Web App Attack
🇩🇪 Jochen Pretli	2026-08-01 06:20:48 (3 weeks ago)	connection to honeypot	Email Spam Port Scan
🇭🇺 kranem	2026-08-01 06:00:22 (3 weeks ago)	Triggered Cloudflare WAF from SE. Action taken: LINK_MAZE_INJECTED ASN: 12552 (GlobalConnect AB) Pro ... show more Triggered Cloudflare WAF from SE. Action taken: LINK_MAZE_INJECTED ASN: 12552 (GlobalConnect AB) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-08-01T04:11:15Z User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 cityhunter_rhone	2026-07-29 23:45:57 (3 weeks ago)	Observed at (UTC): 2026-07-16T01:45:02+00:00 \| Mercurius Guide auto detection \| source=Fail2Ban \| sc ... show more Observed at (UTC): 2026-07-16T01:45:02+00:00 \| Mercurius Guide auto detection \| source=Fail2Ban \| scraper score=5 \| events=1 \| decision=residential \| actions=fail2ban failed plesk-permanent-ban \| last_seen=2026-07-16 01:45:02 show less	Brute-Force SSH Web App Attack
🇫🇮 as211431.net	2026-07-29 11:30:08 (3 weeks ago)	Triggered Cloudflare WAF (linkMaze) from SE. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GE ... show more Triggered Cloudflare WAF (linkMaze) from SE. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 HamSammich	2026-07-26 06:55:24 (4 weeks ago)	Automated sensor: 2 HTTPS connection/probe attempts over the last 24h (latest 2026-07-26T06:55Z).	Brute-Force Web App Attack
🇫🇷 cityhunter_rhone	2026-07-22 23:45:20 (1 month ago)	Observed at (UTC): 2026-07-16T01:45:02+00:00 \| Mercurius Guide auto detection \| source=Fail2Ban \| sc ... show more Observed at (UTC): 2026-07-16T01:45:02+00:00 \| Mercurius Guide auto detection \| source=Fail2Ban \| scraper score=5 \| events=1 \| decision=residential \| actions=fail2ban failed plesk-permanent-ban \| last_seen=2026-07-16 01:45:02 show less	Brute-Force SSH Web App Attack
🇬🇧 pinguin	2026-07-22 03:39:18 (1 month ago)	Triggered Cloudflare WAF (linkMaze) from SE. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GE ... show more Triggered Cloudflare WAF (linkMaze) from SE. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 FireGuard Server	2026-07-20 03:35:08 (1 month ago)	Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=443	Port Scan Hacking

Showing 1 to 15 of 295 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇷 94.182.157.184

🇱🇹 213.176.26.37

🇧🇴 200.87.92.79

🇺🇸 157.230.15.80

🇮🇳 152.59.183.171

🇺🇸 136.112.103.117

🇨🇳 123.13.95.79

🇬🇧 118.26.104.179

🇨🇳 112.94.252.13

🇧🇬 80.66.66.68

🇨🇦 74.59.171.55

🇦🇪 37.245.228.157

🇷🇺 195.161.62.230

🇮🇩 163.7.5.228

🇭🇰 154.83.15.101

🇻🇳 103.200.22.154

🇮🇩 103.172.20.218

🇷🇴 92.118.39.77

🇺🇸 91.230.168.3

🇫🇷 91.196.152.233