JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 93.152.221.13

93.152.221.13 was found in our database!

This IP was reported 1,646 times. Confidence of Abuse is 100%: ?

100%

ISP	TechTies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197170
Domain Name	tech-ties.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 93.152.221.13

Whois 93.152.221.13

IP Abuse Reports for 93.152.221.13:

This IP address has been reported a total of 1,646 times from 523 distinct sources. 93.152.221.13 was first reported on June 30th 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 arnisolutions	2026-08-19 11:54:21 (12 hours ago)	Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production s ... show more Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production server. Observed on 6 day(s) between 2026-08-14 and 2026-08-18 (UTC). 5 further address(es) from the same network showed abusive behaviour. show less	Web App Attack Hacking
🇹🇷 neron	2026-08-18 21:00:45 (1 day ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇮🇳 evicky2002	2026-08-13 17:02:52 (6 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇧🇬 alnaasd	2026-08-10 13:14:53 (1 week ago)	WAF block action triggered by rule set "Information Disclosure - Common Files" (40 occurrences obser ... show more WAF block action triggered by rule set "Information Disclosure - Common Files" (40 occurrences observed). show less	Web App Attack
🇫🇷 mail.avx.gr	2026-08-05 20:50:58 (2 weeks ago)	Plesk Fail2Ban jail: recidive-unknown. Evidence: 2026-07-11 04:17:08,892 fail2ban.actions [2205465]: ... show more Plesk Fail2Ban jail: recidive-unknown. Evidence: 2026-07-11 04:17:08,892 fail2ban.actions [2205465]: NOTICE [Plesk-WebScanners] Ban 93.152.221.13 2026-07-12 07:35:55,387 fail2ban.actions [2205465]: NOTICE [Plesk-WebScanners] Ban 93.152.221.13 2026-07-13 08:22:00,404 fail2ban.actions [2205465]: NOTICE [Plesk-WebScanners] Ban 93.152.221.13 show less	Hacking
🇩🇪 ghostwarriors	2026-08-03 12:50:52 (2 weeks ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-07-30 18:51:45 (2 weeks ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 wpadm3	2026-07-29 09:47:06 (3 weeks ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 4server	2026-07-29 09:09:45 (3 weeks ago)	[WedJul2911:09:43.4787642026][security2:error][pid1358807:tid1358902][client93.152.221.13:0]ModSecur ... show more [WedJul2911:09:43.4787642026][security2:error][pid1358807:tid1358902][client93.152.221.13:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"chryptofarm.ch\"][uri\"/.aws/credentials\"][unique_id\"amnDV4S3-RxhHVlTWQga-AAAAME\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-07-29 07:00:00 (3 weeks ago)	Automated Apache web application probing in selected 24h window; attempts=20, unique_paths=5, error_ ... show more Automated Apache web application probing in selected 24h window; attempts=20, unique_paths=5, error_responses=15; targets include WordPress, .env/.git, phpMyAdmin, autodiscover, wpad.dat and related probe paths. show less	Web App Attack
Anonymous	2026-07-29 07:00:00 (3 weeks ago)	Apache probe; attempts=118; exact paths: /.env \| /.env.backup \| /.env.example \| /.env.local \| /confi ... show more Apache probe; attempts=118; exact paths: /.env \| /.env.backup \| /.env.example \| /.env.local \| /config/.env show less	Web App Attack
🇩🇪 v1nc	2026-07-29 06:57:41 (3 weeks ago)	93.152.221.13 - - [29/Jul/2026:06:57:40 +0000] "GET /phpinfo HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Mac ... show more 93.152.221.13 - - [29/Jul/2026:06:57:40 +0000] "GET /phpinfo HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" ... show less	Hacking
Anonymous	2026-07-29 04:52:39 (3 weeks ago)	Automated vulnerability scanning and sensitive file probing against a secured web server. Attempted ... show more Automated vulnerability scanning and sensitive file probing against a secured web server. Attempted access to sensitive configuration files and common vulnerability paths. show less	Brute-Force Web App Attack
🇳🇱 Lentini	2026-07-29 01:50:19 (3 weeks ago)	visuitslagen.nl: malicious request:/phpinfo.php	Web App Attack
🇳🇱 e.fierstra	2026-07-29 01:30:41 (3 weeks ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack

Showing 1 to 15 of 1646 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a12:f540:321c:c964:47d0:9a4e:f7b2:255c

🇺🇸 192.3.251.33

🇨🇳 180.100.217.164

🇺🇸 172.202.118.22

🇨🇳 120.48.29.51

🇺🇸 2a12:f540:2fd0:2d80:bf69:2bf:7f60:c683

🇺🇸 2001:470:1:fb5::153

🇺🇸 209.46.13.191

🇧🇷 205.210.31.175

🇺🇦 194.88.152.21

🇬🇧 185.247.137.12

🇫🇷 169.58.33.185

🇺🇸 104.23.160.233

🇺🇸 104.23.160.32

🇭🇰 101.36.107.243

🇺🇸 95.163.151.91

🇷🇺 94.181.28.49

🇳🇱 89.21.67.167

🇺🇸 74.109.238.197

🇸🇬 52.237.80.79