This IP address has been reported a total of
6
times from
5 distinct
sources.
147.93.114.70 was first reported on
May 28th 2026 , and the most recent report was
1 day ago France
with 3
reports;
Australia
with 1
report;
Ukraine
with 1
report.
The most common categories in these recent reports were:
Web App Attack
3
times;
Brute-Force
2
times;
Bad Web Bot
1
time;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
SpaceHost-Server
2026-10-14 22:16:46
(1 day ago)
Brute-Force
Web App Attack
🇫🇷
SpaceHost-Server
2026-10-13 22:15:58
(2 days ago)
Brute-Force
Web App Attack
2026-10-13 03:51:59
(2 days ago)
Fail2Ban triggered
Web App Attack
🇫🇷
masterguru
2026-10-08 14:13:38
(1 week ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 147.93.114.70 (US/United States/srv720435.hstg ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 147.93.114.70 (US/United States/srv720435.hstgr.cloud): 1 in the last 3600 secs (0-196)
show less
Hacking
🇦🇺
aranguren.org
2026-10-07 23:01:46
(1 week ago)
147.93.114.70 - - [08/Oct/2026:10:01:40 +1100] "GET /access/api/v1/system/ping HTTP/1.1" 404 16 "htt ...
show more
147.93.114.70 - - [08/Oct/2026:10:01:40 +1100] "GET /access/api/v1/system/ping HTTP/1.1" 404 16 "https://203.132.94.196:443/access/api/v1/system/ping" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
147.93.114.70 - - [08/Oct/2026:10:01:44 +1100] "GET /wp-content/plugins/backup-backup/readme.txt HTTP/1.1" 404 1210 "https://203.132.94.196:443/wp-content/plugins/backup-backup/readme.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
147.93.114.70 - - [08/Oct/2026:10:01:46 +1100] "GET /wp-content/plugins/backup-migration/readme.txt HTTP/1.1" 404 1216 "https://203.132.94.196:443/wp-content/plugins/backup-migration/readme.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
🇺🇸
itsnixk
2026-05-28 04:28:19
(4 months ago)
(mod_security) mod_security (id:932130) triggered by 147.93.114.70 (US/United States/srv720435.hstgr ...
show more
(mod_security) mod_security (id:932130) triggered by 147.93.114.70 (US/United States/srv720435.hstgr.cloud): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu May 28 00:28:17.644435 2026] [security2:error] [pid 944381:tid 944835] [client 147.93.114.70:32838] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\$(?:\\\\((?:[^\\\\)]+|\\\\([^\\\\)]+\\\\))\\\\)|\\\\{[^\\\\}]+\\\\}|\\\\[[^\\\\]]*\\\\])|[<>]\\\\([^\\\\)]+\\\\)|/[0-9A-Z_a-z]*\\\\[[^\\\\]]+\\\\]" at ARGS:0. [file "/etc/modsecurity.d/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "316"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.25.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "paranoia-level/1"] [ta [redacted] [uri "/"] [unique_id "ahfEYTkvcHqBE4PvUIcP_QAAASE"]
show less
Port Scan
Showing 1 to
6
of 6 reports
