JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 93.185.104.80

93.185.104.80 was found in our database!

This IP was reported 147 times. Confidence of Abuse is 100%: ?

100%

ISP	PIPNI s.r.o.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS43541
Domain Name	pipni.cz
Country	🇨🇿 Czechia
City	Prague, Prague

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 93.185.104.80

Whois 93.185.104.80

IP Abuse Reports for 93.185.104.80:

This IP address has been reported a total of 147 times from 112 distinct sources. 93.185.104.80 was first reported on July 4th 2026, and the most recent report was 42 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-05 04:01:34 (42 seconds ago)	93.185.104.80 - - [05/Jul/2026:04:01:34 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2 ... show more 93.185.104.80 - - [05/Jul/2026:04:01:34 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 4332 "-" "libredtail-http" ... show less	Bad Web Bot Web App Attack
🇺🇸 jhuisi	2026-07-05 03:59:56 (2 minutes ago)	Mod Security Hit	Web App Attack
🇸🇪 SkyDancer	2026-07-05 03:40:54 (21 minutes ago)	Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ... show more Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx show less	Hacking Brute-Force SSH
Anonymous	2026-07-05 03:19:50 (42 minutes ago)	93.185.104.80 - - [05/Jul/2026:03:19:50 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2 ... show more 93.185.104.80 - - [05/Jul/2026:03:19:50 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 3002 "-" "libredtail-http" ... show less	Bad Web Bot Web App Attack
🇫🇷 Version Net	2026-07-05 03:18:44 (43 minutes ago)	IPS Detection: Apache.HTTP.Server.cgi-bin.Path.Traversal	Hacking
🇩🇪 Selckie	2026-07-05 03:12:38 (49 minutes ago)	fail2ban: NGINX unusual impact	Web App Attack
🇺🇸 i553041	2026-07-05 03:09:25 (52 minutes ago)	93.185.104.80 - - [05/Jul/2026:03:09:21 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2 ... show more 93.185.104.80 - - [05/Jul/2026:03:09:21 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" 93.185.104.80 - - [05/Jul/2026:03:09:21 +0000] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 150 "-" "-" 93.185.104.80 - - [05/Jul/2026:03:09:21 +0000] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 146 "-" "libredtail-http" 93.185.104.80 - - [05/Jul/2026:03:09:21 +0000] "POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 405 150 "-" "libredtail-http" 93.185.104.80 - - [05/Jul/2026:03:09:22 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 146 "-" "libredtail-http" 93.185.104.80 - - [05/Jul/2026:03:09:22 +0000] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 146 "-" "libredtail-http" 93.185.104.80 - - [05/Jul/2026:03:09:22 +0 ... show less	Brute-Force SSH
🇮🇩 PENJAGA.AUM	2026-07-05 02:43:54 (1 hour ago)	93.185.104.80 - Attack: ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt	Web App Attack SQL Injection Spoofing
🇩🇪 mailsmart.de	2026-07-05 02:20:57 (1 hour ago)	Jul 5 04:17:02 mail7 sshd[2041842]: Invalid user ftp from 93.185.104.80 port 33428 Jul 5 04:18:20 ... show more Jul 5 04:17:02 mail7 sshd[2041842]: Invalid user ftp from 93.185.104.80 port 33428 Jul 5 04:18:20 mail7 sshd[2042066]: Connection from 93.185.104.80 port 43870 on 62.141.38.215 port 22 rdomain "" Jul 5 04:18:20 mail7 sshd[2042066]: Invalid user elasticsearch from 93.185.104.80 port 43870 Jul 5 04:19:36 mail7 sshd[2042326]: Connection from 93.185.104.80 port 59010 on 62.141.38.215 port 22 rdomain "" Jul 5 04:19:36 mail7 sshd[2042326]: Invalid user deploy from 93.185.104.80 port 59010 Jul 5 04:20:56 mail7 sshd[2043351]: Connection from 93.185.104.80 port 45008 on 62.141.38.215 port 22 rdomain "" Jul 5 04:20:56 mail7 sshd[2043351]: Invalid user dan from 93.185.104.80 port 45008 ... show less	Brute-Force
🇸🇬 nayumi	2026-07-05 02:18:20 (1 hour ago)	CrowdSec detection: crowdsecurity/http-cve-2021-41773 \| Service: http	Web App Attack
🇩🇪 pscriptos	2026-07-05 02:12:41 (1 hour ago)	This IP was detected by CrowdSec triggering crowdsecurity/CVE-2017-9841	Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 02:12:07 (1 hour ago)	(mod_security) mod_security (id:218420) triggered by 93.185.104.80 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:218420) triggered by 93.185.104.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 22:12:02.845613 2026] [security2:error] [pid 30995:tid 30995] [client 93.185.104.80:40522] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.34:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.34"] [uri "/hello.world"] [unique_id "akm9cuVofQhIWRR8bu92UwAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-07-05 01:51:29 (2 hours ago)	Blocked by UFW (TCP on 2375) Source port: 33452 TTL: 57 Packet length: 44 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2375) Source port: 33452 TTL: 57 Packet length: 44 TOS: 0x00 This report (for 93.185.104.80) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-07-05 01:26:33 (2 hours ago)	(mod_security) mod_security (id:218420) triggered by 93.185.104.80 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:218420) triggered by 93.185.104.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 21:26:30.139108 2026] [security2:error] [pid 25742:tid 25742] [client 93.185.104.80:55308] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.39:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.39"] [uri "/hello.world"] [unique_id "akmyxiglG6rK4yO8VMp8PgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 Detmach	2026-07-05 01:25:23 (2 hours ago)	Security attack detected. Multiple failed attempts from 93.185.104.80. IP banned for 1440 minutes at ... show more Security attack detected. Multiple failed attempts from 93.185.104.80. IP banned for 1440 minutes at 05.07.2026 04:25:23. Failed attempts: 1 show less	Brute-Force

Showing 1 to 15 of 147 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.156

🇦🇷 186.56.11.2

🇳🇱 185.165.242.225

🇦🇺 170.64.167.72

🇺🇸 100.28.153.226

🇩🇪 64.89.163.165

🇵🇱 45.138.16.158

🇭🇰 42.200.66.164

🇺🇸 37.140.223.230

🇬🇧 37.10.113.221

🇺🇸 20.64.105.206

🇨🇳 14.103.115.181

🇬🇧 5.252.83.4

🇨🇳 223.241.214.127

🇨🇳 223.68.163.132

🇨🇳 218.92.251.198

🇱🇻 217.60.3.128

🇺🇸 172.110.223.207

🇷🇺 154.83.196.237

🇺🇸 136.144.33.12