JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 93.180.222.91

93.180.222.91 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 24%: ?

24%

ISP	Horizon Scope Mobile Telecom WLL
Usage Type	Fixed Line ISP
ASN	AS211908
Domain Name	horizonscope.com
Country	🇮🇶 Iraq
City	Nasiriyah, Dhi Qar

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 93.180.222.91

Whois 93.180.222.91

IP Abuse Reports for 93.180.222.91:

This IP address has been reported a total of 32 times from 22 distinct sources. 93.180.222.91 was first reported on February 3rd 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-14 18:58:06 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 93.180.222.91 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 93.180.222.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 14:57:57.073221 2026] [security2:error] [pid 27313:tid 27313] [client 93.180.222.91:49926] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|brexitop.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "brexitop.com"] [uri "/"] [unique_id "aqhDtbTP2XSPaG_I8tbUiwAAABo"], referer: https://kamilkoch.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-09-05 19:02:56 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-09-04 12:03:29 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-30 12:12:37 (2 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-26 18:48:11 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-20 16:18:24 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-11 22:47:35 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-08-03 11:02:16 (1 month ago)	denied traffic to a non-approved destination port. destination port 35646.	Port Scan
🇺🇸 kosada.com	2026-07-31 17:14:38 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-07 18:17:21 (2 months ago)	Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (E ... show more Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Aggressive search filter manipulation / web scraper probe on port 443 \| URI: Excessive filters used: /catalogsearch/result/?cat=122&product_vc_type=99%2C100&q=Telepresence&stock=1 \| UA: Opera/8.73.(Windows NT 11.0; si-LK) Presto/2.9.190 Version/12.00 \| (Magento Site) show less	Hacking Bad Web Bot
🇺🇸 kosada.com	2026-07-06 18:12:39 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-26 11:20:27 (2 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-21 23:39:45 (3 months ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇺🇸 MPL	2026-05-21 19:36:13 (3 months ago)	tcp/23	Port Scan
🇮🇹 A000Z	2026-05-18 14:55:34 (3 months ago)	Fail2Ban: 93.180.222.91 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 93.180.222.91 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇩 178.168.51.106

🇻🇳 103.237.144.204

🇺🇸 69.49.246.176

🇺🇸 216.25.89.105

🇰🇷 211.46.188.16

🇨🇱 200.27.142.120

🇺🇸 144.225.6.182

🇰🇷 118.41.205.179

🇫🇷 85.217.140.11

🇸🇬 43.172.196.54

🇮🇪 20.13.164.162

🇺🇸 162.216.150.95

🇵🇭 115.85.61.229

🇧🇭 87.252.100.19

🇺🇸 45.3.37.234

🇩🇪 34.32.100.85

🇧🇷 16.5.0.211

🇫🇷 85.217.140.44

🇺🇸 85.208.96.197

🇨🇦 64.68.202.122