JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 93.171.157.249

93.171.157.249 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 26%: ?

26%

ISP	Vikscom Ltd.
Usage Type	Fixed Line ISP
ASN	AS51214
Domain Name	vikscom.net
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 93.171.157.249

Whois 93.171.157.249

IP Abuse Reports for 93.171.157.249:

This IP address has been reported a total of 35 times from 20 distinct sources. 93.171.157.249 was first reported on September 30th 2024, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 Progetto1	2026-06-12 21:30:03 (8 hours ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇸🇬 pusathosting.com	2026-06-05 08:24:03 (1 week ago)	24ds22 bruteforce	Brute-Force Web App Attack
🇱🇻 garmtech.com	2026-05-29 04:08:01 (2 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-08.93.171.157.249.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-08.93.171.157.249.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇲🇾 Rizzy	2026-04-22 03:54:53 (1 month ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇮🇹 Inartis	2026-04-21 17:30:57 (1 month ago)	93.171.157.249 - - [21/Apr/2026:17:30:56 +0000] "GET //wp-json/wp/v2/posts HTTP/1.0" 302 450 "-" "Mo ... show more 93.171.157.249 - - [21/Apr/2026:17:30:56 +0000] "GET //wp-json/wp/v2/posts HTTP/1.0" 302 450 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 cheatmaster.store	2026-02-26 06:15:08 (3 months ago)	Automated report: This IP address has been identified as an active public open proxy. Classification ... show more Automated report: This IP address has been identified as an active public open proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: Russia Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. Do not whitelist without manual verification. show less	Web Spam Port Scan Web App Attack
🇱🇻 garmtech.com	2026-02-25 12:25:06 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 14-25.93.171.157.249.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 14-25.93.171.157.249.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
Anonymous	2026-02-23 03:06:36 (3 months ago)	DirectAdmin Auto Report (hvdiscover.com.log)	Brute-Force SSH
🇸🇬 pusathosting.com	2026-02-10 19:54:02 (4 months ago)	24ds22 bruteforce	Brute-Force Web App Attack
🇵🇱 IROK	2026-01-22 18:45:42 (4 months ago)	Firewall Blocked - Unauthorized Port Scanning ...	Port Scan
🇳🇱 homeshowdomain.nl	2026-01-16 22:59:41 (4 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-01-15. show less	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2026-01-15 04:31:33 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 93.171.157.249 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 93.171.157.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 14 23:31:30.162109 2026] [security2:error] [pid 8583:tid 8583] [client 93.171.157.249:10641] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kruizekontrhl.com.darkalleyproductions.com"] [uri "/.git/config"] [unique_id "aWhtohpcGHpJ2PWTPLkdEAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-25 14:20:54 (5 months ago)	Forum/form spam	Web Spam
🇵🇱 sefinek.net	2025-12-12 21:49:06 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from UA. Action taken: BLOCK Protocol: HTTP/1.0 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from UA. Action taken: BLOCK Protocol: HTTP/1.0 (GET method) Endpoint: //genshin-stella-mod UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1264.71 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 RyoKN	2025-11-20 21:32:29 (6 months ago)	Blocked by UFW on s474 [54650/tcp] Source port: 8080 TTL: 57 Packet length: 60 TOS: 0x00 This repor ... show more Blocked by UFW on s474 [54650/tcp] Source port: 8080 TTL: 57 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 152.42.206.230

🇯🇵 152.32.201.247

🇺🇸 147.185.132.230

🇷🇺 95.167.225.76

🇫🇮 35.228.211.38

🇸🇪 9.223.176.221

🇯🇵 212.32.76.10

🇺🇸 205.210.31.44

🇨🇳 180.76.245.60

🇺🇸 85.208.96.207

🇺🇸 64.62.197.108

🇨🇳 223.167.169.127

🇺🇸 209.50.168.123

🇺🇬 196.0.33.74

🇸🇬 152.32.218.149

🇩🇪 138.124.99.219

🇮🇳 117.219.25.98

🇨🇦 104.207.61.124

🇮🇹 82.51.158.253

🇷🇴 80.94.95.242