This IP address has been reported a total of
86
times from
63 distinct
sources.
147.93.135.163 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Attack detected by Fortinet - apache: Apache.HTTP.Server.cgi-bin.Path.Traversal - 2026-06-07 10:59:0 ...
show moreAttack detected by Fortinet - apache: Apache.HTTP.Server.cgi-bin.Path.Traversal - 2026-06-07 10:59:07 - Source Port 59852
show less
1 attack on shell probes:
POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTT ...
show more1 attack on shell probes:
POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
show less
(sshd) Failed SSH login from 147.93.135.163 (US/United States/vmi2967525.contaboserver.net): 5 in th ...
show more(sshd) Failed SSH login from 147.93.135.163 (US/United States/vmi2967525.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 7 14:13:25 14778 sshd[31643]: Invalid user admin from 147.93.135.163 port 39940
Jun 7 14:13:28 14778 sshd[31643]: Failed password for invalid user admin from 147.93.135.163 port 39940 ssh2
Jun 7 14:13:58 14778 sshd[31798]: Invalid user orangepi from 147.93.135.163 port 55162
Jun 7 14:14:00 14778 sshd[31798]: Failed password for invalid user orangepi from 147.93.135.163 port 55162 ssh2
Jun 7 14:14:31 14778 sshd[32146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.93.135.163 user=root
show less
2026-06-07T21:03:46.474403+02:00 towelie sshd-session[2583066]: pam_unix(sshd:auth): authentication ...
show more2026-06-07T21:03:46.474403+02:00 towelie sshd-session[2583066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.93.135.163
2026-06-07T21:03:48.668863+02:00 towelie sshd-session[2583066]: Failed password for invalid user admin from 147.93.135.163 port 33092 ssh2
2026-06-07T21:04:21.511637+02:00 towelie sshd-session[2583704]: Invalid user orangepi from 147.93.135.163 port 47086
...
show less
(sshd) Failed SSH login from 147.93.135.163 (US/United States/vmi2967525.contaboserver.net): 5 in th ...
show more(sshd) Failed SSH login from 147.93.135.163 (US/United States/vmi2967525.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 7 13:41:58 15002 sshd[10002]: Invalid user admin from 147.93.135.163 port 35894
Jun 7 13:42:00 15002 sshd[10002]: Failed password for invalid user admin from 147.93.135.163 port 35894 ssh2
Jun 7 13:42:31 15002 sshd[10343]: Invalid user orangepi from 147.93.135.163 port 37860
Jun 7 13:42:33 15002 sshd[10343]: Failed password for invalid user orangepi from 147.93.135.163 port 37860 ssh2
Jun 7 13:43:03 15002 sshd[10738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.93.135.163 user=root
show less
Honeypot detection: POST request on /cgi-bin/../../../../../../../../../../bin/sh | User-Agent: libr ...
show moreHoneypot detection: POST request on /cgi-bin/../../../../../../../../../../bin/sh | User-Agent: libredtail-http
show less
Hacking
Web App Attack
Anonymous
2026-06-07T18:28:15.536551+00:00 caddy caddy[63377]: {"level":"info","ts":1780856895.5364435,"logger ...
show more2026-06-07T18:28:15.536551+00:00 caddy caddy[63377]: {"level":"info","ts":1780856895.5364435,"logger":"http.log.access","msg":"handled request","request":{"remote_ip":"147.93.135.163","remote_port":"34442","client_ip":"147.93.135.163","proto":"HTTP/1.1","method":"POST","host":"142.132.232.19:80","uri":"/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh","headers":{"Content-Type":["text/plain"],"Content-Length":["117"],"Upgrade-Insecure-Requests":["1"],"Accept":["*/*"],"User-Agent":["libredtail-http"],"Connection":["keep-alive"]}},"bytes_read":0,"user_id":"","duration":0.000073602,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://142.132.232.19/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh"],"Content-Type":[]}}
...
show less