JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 93.157.102.230

93.157.102.230 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 24%: ?

24%

ISP	Cyber_Folks S.A.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS34360
Hostname(s)	www-cl-3.cyberadmin.cyber-folks.pl
Domain Name	cyberfolks.pl
Country	🇵🇱 Poland
City	Poznan, Greater Poland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 93.157.102.230

Whois 93.157.102.230

IP Abuse Reports for 93.157.102.230:

This IP address has been reported a total of 17 times from 13 distinct sources. 93.157.102.230 was first reported on March 27th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-09-04 08:35:25 (1 month ago)	172 requests with url.path debug.log 167 requests with url.path /debug.log	Brute-Force Bad Web Bot
🇺🇸 TAY	2026-09-04 03:40:59 (1 month ago)	93.157.102.230 - - [04/Sep/2026:11:40:50 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 34906 "-" "Moz ... show more 93.157.102.230 - - [04/Sep/2026:11:40:50 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 34906 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 93.157.102.230 - - [04/Sep/2026:11:40:51 +0800] "GET /wp-config.php~ HTTP/1.1" 404 34906 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 93.157.102.230 - - [04/Sep/2026:11:40:52 +0800] "GET /wp-config.php.save HTTP/1.1" 404 34938 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 93.157.102.230 - - [04/Sep/2026:11:40:53 +0800] "GET /wp-config.php.old HTTP/1.1" 404 34922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 93.157.102.230 - - [04/Sep/2026:11:40:54 +0800] "GET /wp-config.php.orig HTTP/1.1" 404 34938 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH ... show less	Brute-Force
🇺🇸 dot.mg	2026-09-03 23:11:01 (1 month ago)	Bad behaviour	Web Spam
🇺🇸 TPI-Abuse	2026-09-03 22:16:49 (1 month ago)	(mod_security) mod_security (id:949110) triggered by 93.157.102.230 (www-cl-3.cyberadmin.cyber-folks ... show more (mod_security) mod_security (id:949110) triggered by 93.157.102.230 (www-cl-3.cyberadmin.cyber-folks.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 18:16:43.026065 2026] [security2:error] [pid 17538:tid 17538] [client 93.157.102.230:35786] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ugandaconnection.com"] [uri "/wp-config.php.bak"] [unique_id "apnxy0AjnMTQIIrx3BgV_gAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-03 21:41:25 (1 month ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TAY	2026-09-03 06:50:33 (1 month ago)	93.157.102.230 - - [03/Sep/2026:14:50:28 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 91822 "-" "Moz ... show more 93.157.102.230 - - [03/Sep/2026:14:50:28 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 91822 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 93.157.102.230 - - [03/Sep/2026:14:50:29 +0800] "GET /wp-config.php~ HTTP/1.1" 404 91822 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 93.157.102.230 - - [03/Sep/2026:14:50:30 +0800] "GET /wp-config.php.save HTTP/1.1" 404 91822 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 93.157.102.230 - - [03/Sep/2026:14:50:31 +0800] "GET /wp-config.php.old HTTP/1.1" 404 91822 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 93.157.102.230 - - [03/Sep/2026:14:50:32 +0800] "GET /wp-config.php.orig HTTP/1.1" 404 91822 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH ... show less	Brute-Force
🇫🇷 Octopuce	2026-09-02 21:50:33 (1 month ago)	Aggressive web search of vulnerable pages: /.env /phpinfo.php /info.php /test.php /backup.sql /backu ... show more Aggressive web search of vulnerable pages: /.env /phpinfo.php /info.php /test.php /backup.sql /backup.sql.gz /backup.zip ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 07:13:28 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 93.157.102.230 (www-cl-3.cyberadmin.cyber-folks ... show more (mod_security) mod_security (id:210492) triggered by 93.157.102.230 (www-cl-3.cyberadmin.cyber-folks.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 03:13:22.035199 2026] [security2:error] [pid 22049:tid 22049] [client 93.157.102.230:41216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nyctrademarklawyerscom.karenbernsteinlaw.net"] [uri "/wp-config.php.bak"] [unique_id "apfMkhzfF14z79QGs14aggAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-02 06:29:16 (1 month ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇺🇸 TAY	2026-09-01 09:38:25 (1 month ago)	93.157.102.230 - - [01/Sep/2026:17:38:20 +0800] "GET /wp-config.php.bak HTTP/1.1" 301 486 "-" "Mozil ... show more 93.157.102.230 - - [01/Sep/2026:17:38:20 +0800] "GET /wp-config.php.bak HTTP/1.1" 301 486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 93.157.102.230 - - [01/Sep/2026:17:38:22 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 48441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 93.157.102.230 - - [01/Sep/2026:17:38:23 +0800] "GET /wp-config.php~ HTTP/1.1" 301 480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 93.157.102.230 - - [01/Sep/2026:17:38:23 +0800] "GET /wp-config.php~ HTTP/1.1" 404 48441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 93.157.102.230 - - [01/Sep/2026:17:38:24 +0800] "GET /wp-config.php.save HTTP/1.1" 301 488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like ... show less	Brute-Force
🇪🇸 alferez	2026-08-30 17:12:48 (1 month ago)	wp2shell bug exploit	Hacking Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 13:43:28 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 93.157.102.230 (www-cl-3.cyberadmin.cyber-folks ... show more (mod_security) mod_security (id:210492) triggered by 93.157.102.230 (www-cl-3.cyberadmin.cyber-folks.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 09:43:21.514080 2026] [security2:error] [pid 7637:tid 7637] [client 93.157.102.230:36402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thenewplantation.org"] [uri "/wp-config.php.txt"] [unique_id "apQzeRoJE4VrWjbjrI0FgAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-27 01:14:20 (1 month ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vault.teddypot.pro \| URI: /wp-json/batch/v1 \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
Anonymous	2026-08-25 06:07:06 (1 month ago)	ModSecurity rejected a query	Bad Web Bot Web App Attack
🇳🇱 Teoman SEO	2026-08-01 11:01:45 (2 months ago)	Phishing site on 93.157.102.230. URL: https://tophostess.pl/ Brand: pusulabet	Phishing Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇴🇲 154.41.126.47

🇮🇹 151.33.39.15

🇭🇰 114.111.53.214

🇩🇪 109.160.32.170

🇺🇸 20.169.84.230

🇧🇷 177.8.134.180

🇺🇸 173.255.214.62

🇳🇱 77.239.124.49

🇮🇳 45.79.123.180

🇨🇴 38.191.211.75

🇺🇸 23.95.186.183

🇰🇷 218.149.157.240

🇳🇱 195.178.110.227

🇺🇸 185.118.133.8

🇯🇵 172.104.83.195

🇬🇧 165.154.128.199

🇿🇦 156.155.17.12

🇸🇬 152.42.220.29

🇨🇳 150.139.201.247

🇹🇭 118.194.251.144