JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 93.185.162.136

93.185.162.136 was found in our database!

This IP was reported 119 times. Confidence of Abuse is 40%: ?

40%

ISP	Cyberzone S.A.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS209854
Domain Name	cyberzonehub.com
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 93.185.162.136

Whois 93.185.162.136

IP Abuse Reports for 93.185.162.136:

This IP address has been reported a total of 119 times from 71 distinct sources. 93.185.162.136 was first reported on September 22nd 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-06-09 14:04:35 (1 week ago)	[Tue Jun 09 21:04:34.762134 2026] [security2:error] [pid 43722:tid 139736447358656] [client 93.185.1 ... show more [Tue Jun 09 21:04:34.762134 2026] [security2:error] [pid 43722:tid 139736447358656] [client 93.185.162.136:43658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa"] [unique_id "aigdcQTKrHa1hET0Rw53vAABhBc"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[43800] [OfhGm9KaBAo] [aigdcQTKrHa1hET0Rw53vAABhBc] keep_alive=[1] [2026-06-09 21:04:34.762143] [R:aigdcQTKrHa1hET0Rw53vAABhBc] UA:'Mozilla/5.0 (Linux; Android 6 ... show less	Email Spam Hacking
🇮🇩 sockominfo	2026-05-28 00:00:39 (3 weeks ago)	Zimbra: Login failures from malicious IP: 93.185.162.136. Threat Score: 6.4/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 93.185.162.136. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-27 23:00:20 (3 weeks ago)	Zimbra: Login failures from malicious IP: 93.185.162.136. Threat Score: 4.9/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 93.185.162.136. Threat Score: 4.9/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇳🇱 Site.eu	2026-05-10 18:14:35 (1 month ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 antlac1	2026-05-10 16:44:09 (1 month ago)	crowdsecurity/http-bf-wordpress_bf	Brute-Force Web App Attack
Anonymous	2026-05-10 14:59:54 (1 month ago)	Login scan: 93.185.162.136 - - [10/May/2026:15:59:54 +0100] "GET /Account/Login HTTP/1.1" 200 234 " ... show more Login scan: 93.185.162.136 - - [10/May/2026:15:59:54 +0100] "GET /Account/Login HTTP/1.1" 200 234 "https://richardgoodwin.net/Account/Login" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:133.0) Gecko/20100101 Firefox/133.0" show less	Hacking Web App Attack
🇫🇷 masterguru	2026-05-10 11:29:41 (1 month ago)	(wordpress) Apache: Failed WordPress login from 93.185.162.136 (ID/Indonesia/-): 10 in the last 3600 ... show more (wordpress) Apache: Failed WordPress login from 93.185.162.136 (ID/Indonesia/-): 10 in the last 3600 secs (0-196) show less	Hacking
🇩🇪 4server	2026-05-10 10:19:26 (1 month ago)	[SunMay1012:19:22.7085272026][security2:error][pid789955:tid790007][client93.185.162.136:0]ModSecuri ... show more [SunMay1012:19:22.7085272026][security2:error][pid789955:tid790007][client93.185.162.136:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"gustotondo.ch\"][uri\"/Account/Login\"][unique_id\"agBbqoB0aqQVo2Jc6L8ZVgAAAEs\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-05-10 09:57:50 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇬🇧 consul.to	2026-05-10 09:10:25 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 jkhorvath.com	2026-05-06 15:25:50 (1 month ago)	Request for URL azenv.net:80	Phishing Brute-Force Web App Attack
🇯🇵 demonsword	2026-05-06 12:07:36 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: azenv.net:80 show less	Open Proxy Port Scan
🇺🇸 nyt	2026-04-30 22:24:37 (1 month ago)	404 flood (16/60s), 404 flood (17/60s)	Bad Web Bot Web App Attack
🇺🇸 mawan	2026-04-27 06:47:55 (1 month ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇮🇳 Genhost	2026-04-26 19:01:38 (1 month ago)	SCANNING OF PHP SHELL FILES	Brute-Force SSH

Showing 1 to 15 of 119 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇴🇲 212.146.165.4

🇺🇸 150.107.38.99

🇨🇳 115.190.155.149

🇳🇵 103.10.28.176

🇺🇸 91.230.168.239

🇺🇸 2604:a940:301:225:0:6::

🇩🇪 194.88.98.119

🇨🇱 186.172.175.31

🇲🇽 177.230.118.188

🇺🇸 162.216.150.107

🇰🇷 121.66.124.149

🇮🇳 117.226.48.35

🇫🇮 74.125.74.30

🇳🇱 45.148.10.147

🇮🇷 2.187.33.197

🇺🇸 2607:f8b0:4001:c12::126

🇮🇶 185.187.78.46

🇧🇷 177.45.23.47

🇷🇺 109.95.120.166

🇳🇱 89.21.67.173