JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 93.91.197.130

93.91.197.130 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 49%: ?

49%

ISP	AVA Group
Usage Type	Mobile ISP
ASN	AS21277
Domain Name	avagroup.com
Country	🇮🇶 Iraq
City	Sinah, Duhok

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 93.91.197.130

Whois 93.91.197.130

IP Abuse Reports for 93.91.197.130:

This IP address has been reported a total of 38 times from 30 distinct sources. 93.91.197.130 was first reported on June 18th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-08-25 21:36:56 (3 hours ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-08-25 19:15:31 (5 hours ago)	Large-scale coordinated botnet (2M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (2M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]) employed by Angara Technologies Group \| Attack Signature Blocked: /catalog/product_compare/add/product/11204/uenc/aHR0cHM6Ly93d3cuZDJvZmZpY2UucnUvY2F0YWxvZ3NlYXJjaC9yZXN1bHQvP2NhdD0zMDAmYW1wO21vZGU9bGlzdCZhbXA7cT1BQytVU0IrMjEyK0VV/form_key/Tv6odiIrOjh8VFry/ \| UA: Mozilla/5.0 (iPod; U; CPU iPhone OS 4_3 like Mac OS X; bn-IN) AppleWebKit/531.42.6 (KHTML, like Gecko) Version/3.0.5 Mobile/8B115 Safari/6531.42.6 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-08-24 09:06:08 (1 day ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 pixelmemory.us	2026-08-07 05:24:26 (2 weeks ago)	2026-08-07T05:23:22 93.91.197.130 GET /Photos/Vacation/2012-08%20Japan-Kauai/raw/IMG_9149.CR2.xmp Mo ... show more 2026-08-07T05:23:22 93.91.197.130 GET /Photos/Vacation/2012-08%20Japan-Kauai/raw/IMG_9149.CR2.xmp Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 ... show less	Bad Web Bot
🇩🇪 LRob	2026-08-04 12:23:22 (3 weeks ago)	CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_forma ... show more CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS \| req: /calendrier-2/action~agenda/cat_ids~549,289,172,649/tag_ids~727,538,453,475,609/request_format~json/ \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 show less	DDoS Attack Web App Attack
🇺🇸 LARL-Stompro-2024	2026-08-01 14:55:22 (3 weeks ago)	Evergreen ILS - Mylist Bot Abuse - HTTP Port 443 - Fake UserAgent. Requests:1	Bad Web Bot
🇺🇸 kosada.com	2026-07-31 05:33:48 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 Petre 21_ip	2026-07-28 18:07:09 (4 weeks ago)	2026-07-28T20:07:08.925981+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-07-28T20:07:08.925981+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=93.91.197.130 DST=155.133.26.57 LEN=41 TOS=0x00 PREC=0x00 TTL=245 ID=1434 PROTO=TCP SPT=24234 DPT=36160 WINDOW=39935 RES=0x00 ACK URGP=0 ... show less	Port Scan
Anonymous	2026-07-23 10:19:01 (1 month ago)	denied traffic to a honeypot network. destination port 32505.	Port Scan Hacking
🇺🇸 Cyber Crusader	2026-07-23 04:11:15 (1 month ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇺🇸 anon333	2026-07-22 13:34:31 (1 month ago)	Hacker syslog review 1784727271	Hacking
🇩🇪 polido	2026-07-22 11:54:42 (1 month ago)	[debian-4gb-nbg1-1] Unauthorized connection attempt to port 46461 from 93.91.197.130	Port Scan
🇮🇹 A000Z	2026-07-01 00:32:32 (1 month ago)	Fail2Ban: 93.91.197.130 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 93.91.197.130 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 pltcldvlpr	2026-06-05 06:55:11 (2 months ago)	Bogus Useragent: 93.91.197.130 - - [05/Jun/2026:08:55:10 +0200] "GET /protocol?id=rp_14_58&offset=80 ... show more Bogus Useragent: 93.91.197.130 - - [05/Jun/2026:08:55:10 +0200] "GET /protocol?id=rp_14_58&offset=800&seq=809 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; MSIE 5.0; Windows NT 5.2; Trident/5.1)" asn=21277 org="Allay Nawroz Telecom Company for Communication/Ltd." country=IQ ... show less	Bad Web Bot
🇳🇱 trivox.sh	2026-05-14 14:34:03 (3 months ago)	2026-05-14T14:32:04.566971+00:00 ws1.trivox.sh sshd-session[1780699]: banner exchange: Connection fr ... show more 2026-05-14T14:32:04.566971+00:00 ws1.trivox.sh sshd-session[1780699]: banner exchange: Connection from 93.91.197.130 port 39738: invalid format 2026-05-14T14:32:21.780883+00:00 ws1.trivox.sh sshd-session[1781518]: banner exchange: Connection from 93.91.197.130 port 42626: invalid format 2026-05-14T14:32:42.805458+00:00 ws1.trivox.sh sshd-session[1782159]: banner exchange: Connection from 93.91.197.130 port 45568: invalid format 2026-05-14T14:33:16.049429+00:00 ws1.trivox.sh sshd-session[1783546]: banner exchange: Connection from 93.91.197.130 port 50818: invalid format ... show less	Brute-Force SSH

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2606:4700::6810:1708

🇧🇷 205.210.31.246

🇹🇹 201.238.125.31

🇹🇼 198.235.24.5

🇺🇦 193.26.13.210

🇻🇪 190.89.31.60

🇺🇸 172.178.119.32

🇩🇪 167.94.146.43

🇨🇳 116.171.27.248

🇨🇳 112.248.191.227

🇮🇷 94.182.52.92

🇷🇺 82.208.115.40

🇺🇸 47.254.94.232

🇺🇸 209.87.169.178

🇪🇸 207.188.158.216

🇺🇸 198.74.58.148

🇨🇴 190.90.242.194

🇦🇷 186.158.26.22

🇺🇸 107.172.252.155

🇨🇦 104.36.180.114