JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

147.93.157.34

Neutral Activity

Abuse Confidence Score

0% Low Risk

14 reports

8 reporters · latest 1 year ago

ISP: Contabo GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS141995
Hostname(s): vmi2877360.contaboserver.net
Domain Name: contabo.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

147.93.157.34 has been reported 14 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

14 from 8 distinct reporters

First reported

September 12th 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 myagent.site	2025-10-01 01:39:12 UTC · (1 year ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇺🇸 TPI-Abuse	2025-10-01 00:13:31 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 147.93.157.34 (vmi2806049.contaboserver.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 30 20:13:25.193812 2025] [security2:error] [pid 31176:tid 31176] [cl ... show more (mod_security) mod_security (id:210492) triggered by 147.93.157.34 (vmi2806049.contaboserver.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 30 20:13:25.193812 2025] [security2:error] [pid 31176:tid 31176] [client 147.93.157.34:57236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "twccsolutions.com"] [uri "/.env"] [unique_id "aNxyJdrDhXDFVIWpH1TT_gAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-30 23:20:24 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 147.93.157.34 (vmi2806049.contaboserver.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 30 19:20:18.587956 2025] [security2:error] [pid 24732:tid 24732] [cl ... show more (mod_security) mod_security (id:210492) triggered by 147.93.157.34 (vmi2806049.contaboserver.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 30 19:20:18.587956 2025] [security2:error] [pid 24732:tid 24732] [client 147.93.157.34:63638] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.riccardiagency.com"] [uri "/.env"] [unique_id "aNxlsiU7qRJQxkr2zEv-ggAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-30 20:47:24 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 147.93.157.34 (vmi2806049.contaboserver.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 30 16:47:20.581129 2025] [security2:error] [pid 5544:tid 5544] [clie ... show more (mod_security) mod_security (id:210492) triggered by 147.93.157.34 (vmi2806049.contaboserver.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 30 16:47:20.581129 2025] [security2:error] [pid 5544:tid 5544] [client 147.93.157.34:50004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brainwavecenters.com"] [uri "/.env"] [unique_id "aNxB2Es3SIwaGL35-SI7yAAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-09-30 19:02:48 UTC · (1 year ago)	Aggressive web scan	Web App Attack
🇩🇪 dwmp	2025-09-30 17:37:16 UTC · (1 year ago)	[30/Sep/2025:19:36:07.989663 +0200] aNwVBzBxOR2SlavAgg1HhgAAAM8 147.93.157.34 57354 38.242.227.117 7081 [30/Sep/2025:19:37:07.557113 +0200] aNwVQzBxOR2SlavAgg1HiAAAAMY 147.93.157.34 57364 38.242.227.117 7081 [30/Sep/2025:19:37:16.055670 +0200] aNwVTD ... show more [30/Sep/2025:19:36:07.989663 +0200] aNwVBzBxOR2SlavAgg1HhgAAAM8 147.93.157.34 57354 38.242.227.117 7081 [30/Sep/2025:19:37:07.557113 +0200] aNwVQzBxOR2SlavAgg1HiAAAAMY 147.93.157.34 57364 38.242.227.117 7081 [30/Sep/2025:19:37:16.055670 +0200] aNwVTDBxOR2SlavAgg1HiQAAANM 147.93.157.34 57366 38.242.227.117 7081 ... show less	Brute-Force SSH
🇺🇸 juguemosalacarioca.com	2025-09-13 11:01:36 UTC · (1 year ago)	Multiple HTTP calls attempting to GET resources using common API calls or formats on port 8080	Web App Attack
🇳🇱 antikirra	2025-09-13 09:20:18 UTC · (1 year ago)	HTTP(S) Resource Vulnerability Probing	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-13 08:09:45 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 147.93.157.34 (vmi2806049.contaboserver.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 13 04:09:38.029738 2025] [security2:error] [pid 29726:tid 29726] [cl ... show more (mod_security) mod_security (id:210492) triggered by 147.93.157.34 (vmi2806049.contaboserver.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 13 04:09:38.029738 2025] [security2:error] [pid 29726:tid 29726] [client 147.93.157.34:62982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thevenicecafe.com"] [uri "/.env"] [unique_id "aMUmwsYhwVbIFaWIUlPCjQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-13 05:34:15 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 147.93.157.34 (vmi2806049.contaboserver.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 13 01:34:08.404606 2025] [security2:error] [pid 32441:tid 32441] [cl ... show more (mod_security) mod_security (id:210492) triggered by 147.93.157.34 (vmi2806049.contaboserver.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 13 01:34:08.404606 2025] [security2:error] [pid 32441:tid 32441] [client 147.93.157.34:54235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wethepeoplealliance.org"] [uri "/.env"] [unique_id "aMUCUMCICHinYW-Ywoz0BQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇺 conseilgouz	2025-09-13 02:45:04 UTC · (1 year ago)	are-17 : Block hidden directories=>/.env(/)	Hacking
🇧🇪 cmbplf	2025-09-13 01:27:09 UTC · (1 year ago)	171 requests with url.path *.env	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2025-09-12 22:26:27 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 147.93.157.34 (vmi2806049.contaboserver.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 12 18:26:24.068737 2025] [security2:error] [pid 3897:tid 3897] [clie ... show more (mod_security) mod_security (id:210492) triggered by 147.93.157.34 (vmi2806049.contaboserver.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 12 18:26:24.068737 2025] [security2:error] [pid 3897:tid 3897] [client 147.93.157.34:62649] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "joeordie.com"] [uri "/.env"] [unique_id "aMSeENgtXBXmUEZL6kfZPgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-12 19:21:25 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 147.93.157.34 (vmi2806049.contaboserver.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 12 15:21:20.757844 2025] [security2:error] [pid 1572:tid 1572] [clie ... show more (mod_security) mod_security (id:210492) triggered by 147.93.157.34 (vmi2806049.contaboserver.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 12 15:21:20.757844 2025] [security2:error] [pid 1572:tid 1572] [client 147.93.157.34:54792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ramabahama.net"] [uri "/.env"] [unique_id "aMRysOVAi-XxjCYFQJz9RwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 199.165.159.74

🇺🇸 72.63.227.60

🇦🇺 35.201.27.114

🇰🇷 218.238.5.110

🇲🇾 202.184.148.229

🇵🇱 194.116.155.1

🇵🇱 95.214.53.196

🇩🇪 64.89.163.9

🇱🇹 62.60.134.150

🇩🇪 45.80.201.5

🇷🇺 31.29.192.154

🇺🇸 3.89.112.207

🇷🇴 2.57.121.112

🇪🇹 196.188.37.32

🇫🇮 193.142.37.69

🇳🇱 193.47.62.69

🇨🇴 181.51.90.24

🇰🇷 175.209.156.146

🇨🇳 117.50.208.11

🇿🇦 102.64.39.178