93.123.109.105
IP Risk Score: 87 / 100
This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.
What is this IP address?
Andorra (AD)
Conf. level: 100 / 100
Properties
Observed Client Profile
- OS: Windows (100%)
- Device Type: Desktop (100%)
- Browser Family: Firefox (100%)
- Rendering Engine: Gecko (100%)
Behavioral Indicators
The IP shows signs of malicious intent with a honeypot hit and access to sensitive paths resulting in a 403 status. The lack of RDNS and use of a proxy further indicate suspicious behavior. The user-agent appears to be spoofed, raising concerns about automation.
The supernet (93.123.0.0/16), which this IP belongs to, exhibits suspicious behavior characterized by a high volume of repetitive requests targeting sensitive files, such as '.git/config' and '.env', across multiple IPs. The presence of various user agents, including known bot signatures and a significant number of honeypot hits, suggests coordinated scraping activity, likely aimed at data extraction or reconnaissance.
JavaScript Support
⚠️ NoUser-Agent Samples
- Mozilla/5.0 (Windows NT 10.0; rv:128.0) Gecko/20100101 Firefox/128.0
IP Location
Region: Andorra la Vella, Andorra
City: Andorra la Vella
Local time: 2026-06-22 15:15:32