JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 147.93.157.252

147.93.157.252 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS141995
Hostname(s)	vmi2716341.contaboserver.net
Domain Name	contabo.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 147.93.157.252

Whois 147.93.157.252

IP Abuse Reports for 147.93.157.252:

This IP address has been reported a total of 51 times from 38 distinct sources. 147.93.157.252 was first reported on December 22nd 2025, and the most recent report was 41 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Savvii	2026-06-16 06:18:33 (41 minutes ago)	15 attempts against mh-modsecurity-ban on cmdb	Brute-Force Web App Attack
🇮🇩 sockominfo	2026-06-16 06:00:52 (59 minutes ago)	Critical LFI with PHP code injection detected - Basic 2, Unicode bypass detection. Threat Score: 8.8 ... show more Critical LFI with PHP code injection detected - Basic 2, Unicode bypass detection. Threat Score: 8.8/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 10/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 93%. MITRE ATT&CK: T1190 (Exploit Public-Facing Application). Tactic: TA0001. Freshness: Moderate. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Brute-Force
🇫🇷 security.rdmc.fr	2026-06-16 05:41:50 (1 hour ago)	Port Scan Attack proto:TCP src:60727 dst:23	Port Scan
Anonymous	2026-06-16 05:11:39 (1 hour ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇮🇩 sockominfo	2026-06-16 05:00:56 (1 hour ago)	Critical LFI with PHP code injection detected - Basic 2, Unicode bypass detection. Threat Score: 8.8 ... show more Critical LFI with PHP code injection detected - Basic 2, Unicode bypass detection. Threat Score: 8.8/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 10/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 93%. MITRE ATT&CK: T1190 (Exploit Public-Facing Application). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Brute-Force
🇺🇸 RAP	2026-06-16 04:49:53 (2 hours ago)	2026-06-16 04:49:53 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 MPL	2026-06-16 04:47:22 (2 hours ago)	tcp/443 (2 or more attempts)	Port Scan
🇵🇱 nfsec.pl	2026-06-16 04:24:26 (2 hours ago)	Detected: TCP scan on port: 23 with flags: SYN	Port Scan
Anonymous	2026-06-16 04:10:17 (2 hours ago)	Attempt to scan vulnerabilities	Hacking
🇫🇷 zazou1998	2026-06-16 04:01:19 (2 hours ago)	Jun 16 06:00:39 mail sshd[270551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Jun 16 06:00:39 mail sshd[270551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.93.157.252 Jun 16 06:00:41 mail sshd[270551]: Failed password for invalid user admin from 147.93.157.252 port 52548 ssh2 Jun 16 06:01:18 mail sshd[270670]: Invalid user orangepi from 147.93.157.252 port 36188 ... show less	Brute-Force SSH
🇮🇩 sockominfo	2026-06-16 04:00:53 (2 hours ago)	Critical LFI with PHP code injection detected - Basic 2, Unicode bypass detection. Threat Score: 8.9 ... show more Critical LFI with PHP code injection detected - Basic 2, Unicode bypass detection. Threat Score: 8.9/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 10/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 93%. MITRE ATT&CK: T1190 (Exploit Public-Facing Application). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Brute-Force
🇺🇸 bigscoots.com	2026-06-16 03:22:08 (3 hours ago)	(sshd) Failed SSH login from 147.93.157.252 (SG/Singapore/vmi2716341.contaboserver.net): 5 in the la ... show more (sshd) Failed SSH login from 147.93.157.252 (SG/Singapore/vmi2716341.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 16 03:20:48 23306 sshd[22215]: Invalid user admin from 147.93.157.252 port 46166 Jun 16 03:20:51 23306 sshd[22215]: Failed password for invalid user admin from 147.93.157.252 port 46166 ssh2 Jun 16 03:21:23 23306 sshd[22692]: Invalid user orangepi from 147.93.157.252 port 33364 Jun 16 03:21:25 23306 sshd[22692]: Failed password for invalid user orangepi from 147.93.157.252 port 33364 ssh2 Jun 16 03:21:57 23306 sshd[22924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.93.157.252 user=root show less	Brute-Force SSH
🇵🇱 Nevex	2026-06-16 03:17:55 (3 hours ago)	Failed 10 attempts using usernames: admin, orangepi, test, user, cirros, rpc, user1 and kali	Brute-Force SSH
🇩🇪 NetWatch	2026-06-16 03:16:17 (3 hours ago)	The IP 147.93.157.252 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇫🇷 Coco Bongo	2026-06-16 03:16:02 (3 hours ago)	147.93.157.252 - (--- Germany -) - - [16/Jun/2026:05:15:46 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e ... show more 147.93.157.252 - (--- Germany -) - - [16/Jun/2026:05:15:46 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇺 2406:da1c:dd:1702:8f30:6a28:814b:8182

🇹🇷 2400:cb00:604:1000:bafc:6d0d:964e:2071

🇨🇳 121.18.220.74

🇵🇰 103.26.82.163

🇫🇷 86.228.133.51

🇮🇶 65.20.131.63

🇺🇸 45.33.96.41

🇬🇧 34.39.0.241

🇸🇬 194.5.82.36

🇺🇸 104.28.233.73

🇷🇴 92.118.39.62

🇨🇦 85.217.149.30

🇨🇳 58.242.190.39

🇧🇪 35.195.106.9

🇧🇪 34.62.213.130

🇺🇸 216.25.89.122

🇲🇴 182.93.50.90

🇭🇰 156.226.177.243

🇨🇳 116.149.206.83

🇷🇺 46.158.19.130