JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 147.93.171.223

147.93.171.223 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS141995
Hostname(s)	vmi3446832.contaboserver.net
Domain Name	contabo.com
Country	🇮🇳 India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 147.93.171.223

Whois 147.93.171.223

IP Abuse Reports for 147.93.171.223:

This IP address has been reported a total of 25 times from 18 distinct sources. 147.93.171.223 was first reported on August 12th 2026, and the most recent report was 18 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 robotstxt	2026-10-17 02:49:09 (18 minutes ago)	147.93.171.223 - - [17/Oct/2026:02:48:04 +0000] "GET /wp-includes/php-compat/ HTTP/2.0" 403 12542 "h ... show more 147.93.171.223 - - [17/Oct/2026:02:48:04 +0000] "GET /wp-includes/php-compat/ HTTP/2.0" 403 12542 "https://hotelmasiabellver.com/wp-includes/php-compat/" "Go-http-client/2.0" "-" edge="147.93.171.223" 147.93.171.223 - - [17/Oct/2026:02:48:07 +0000] "GET /wp-includes/js/codemirror/config.php HTTP/2.0" 403 12546 "https://hotelmasiabellver.com/wp-includes/js/codemirror/config.php" "Go-http-client/2.0" "-" edge="147.93.171.223" 147.93.171.223 - - [17/Oct/2026:02:48:16 +0000] "GET /wp-includes/php-compat/ HTTP/2.0" 403 12578 "http://hotelmasiabellver.es/wp-includes/php-compat/" "Go-http-client/2.0" "-" edge="147.93.171.223" 147.93.171.223 - - [17/Oct/2026:02:48:18 +0000] "GET /wp-includes/js/codemirror/config.php HTTP/2.0" 403 12581 "http://hotelmasiabellver.es/wp-includes/js/codemirror/config.php" "Go-http-client/2.0" "-" edge="147.93.171.223" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-10-17 02:18:49 (48 minutes ago)	(mod_security) mod_security (id:234930) triggered by 147.93.171.223 (vmi3446832.contaboserver.net): ... show more (mod_security) mod_security (id:234930) triggered by 147.93.171.223 (vmi3446832.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 22:18:44.654539 2026] [security2:error] [pid 11854:tid 11854] [client 147.93.171.223:53474] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|hotelkona.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "hotelkona.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "atLbBCyfpnyRuEsolR090AAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-10-17 01:34:15 (1 hour ago)	Excessive multi-domain requests	Brute-Force
🇦🇹 penguin-solutions.at	2026-10-17 00:37:33 (2 hours ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇸🇪 vaia.cloud	2026-10-17 00:20:03 (2 hours ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 23:22:48 (3 hours ago)	(mod_security) mod_security (id:234930) triggered by 147.93.171.223 (vmi3446832.contaboserver.net): ... show more (mod_security) mod_security (id:234930) triggered by 147.93.171.223 (vmi3446832.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 19:22:44.672651 2026] [security2:error] [pid 15045:tid 15045] [client 147.93.171.223:62488] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|hotelausland.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "hotelausland.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "atKxxI83IitV40ariFZEWgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-16 22:58:02 (4 hours ago)	Bot / scanning and/or hacking attempts: GET /wp-admin/ HTTP/2.0, GET /wp-login.php?redirect_to=https ... show more Bot / scanning and/or hacking attempts: GET /wp-admin/ HTTP/2.0, GET /wp-login.php?redirect_to=https%3A%2F%2Fheerlijkfijn.nl%2Fw, GET / HTTP/1.1, GET /3PJcpMFsD8B.php HTTP/1.1, GET /wp-includes/speculative8.php HTTP/1.1, GET /wp-content/wp-activate.php HTTP/1.1, GET /wp-content/users.php HTTP/1.1, GET /rip.php HTTP/1.1, GET /admin/ HTTP/1.1, GET /assets/images/selam.php HTTP/1.1, GET /wp-content/test.php HTTP/1.1, GET /item.php HTTP/1.1, GET /system_core.php HTTP/1.1, GET /filemanager.php HTTP/1.1 show less	Hacking Web App Attack
Anonymous	2026-10-16 22:52:58 (4 hours ago)	Web probing (175 hits in 24h) on default-vhost,heemkundesjin.nl: sensitive-path scans and/or 404 bur ... show more Web probing (175 hits in 24h) on default-vhost,heemkundesjin.nl: sensitive-path scans and/or 404 bursts. Reported by CRMON. show less	Web App Attack
🇩🇪 Marc	2026-10-16 21:15:10 (5 hours ago)	147.93.171.223 - - [16/Oct/2026:23:11:49 +0200] "GET /wp-login.php?redirect_to=http%3A%2F%2Fwww.heck ... show more 147.93.171.223 - - [16/Oct/2026:23:11:49 +0200] "GET /wp-login.php?redirect_to=http%3A%2F%2Fwww.heckmann-elektro.de%2Fwp-admin%2F&reauth=1 HTTP/1.1" 200 5750 "http://www.heckmann-elektro.de/wp-admin/" "Go-http-client/1.1" 147.93.171.223 - - [16/Oct/2026:23:12:08 +0200] "GET /wp-login.php?redirect_to=http%3A%2F%2Fheckmann-elektro.de%2Fwp-admin%2F&reauth=1 HTTP/1.1" 200 5752 "http://heckmann-elektro.de/wp-admin/" "Go-http-client/1.1" 147.93.171.223 - - [16/Oct/2026:23:12:49 +0200] "GET /wp-login.php?redirect_to=http%3A%2F%2Fheckmann-elektro.de%2Fwp-admin%2Fnetwork%2F&reauth=1 HTTP/1.1" 200 5758 "http://heckmann-elektro.de/wp-admin/network/" "Go-http-client/1.1" 147.93.171.223 - - [16/Oct/2026:23:13:52 +0200] "GET /wp-login.php?redirect_to=http%3A%2F%2Fheckmann-elektro.de%2Fwp-admin%2Fabout.php&reauth=1 HTTP/1.1" 200 5758 "http://heckmann-elektro.de/wp-admin/about.php" "Go-http-client/1.1" 147.93.171.223 - - [16/Oct/2026:23:15:10 +0200] "GET /wp-login.php?redirect_to=http%3A%2F%2Fheckmann-elektro.de%2Fwp-admin%2 show less	Brute-Force Web App Attack
🇬🇧 cg-design.co.uk	2026-10-16 17:59:33 (9 hours ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 147.93.171.223 (IN/India ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 147.93.171.223 (IN/India/vmi3446832.contaboserver.net) show less	Port Scan
🇳🇱 Savvii	2026-10-16 17:30:18 (9 hours ago)	20 attempts against mh-misbehave-ban on burne	Brute-Force Bad Web Bot Web App Attack
🇧🇪 madeit	2026-10-16 17:12:14 (9 hours ago)		Web App Attack
Anonymous	2026-10-16 16:41:26 (10 hours ago)	Banned by Fail2Ban on server	Web App Attack
🇪🇸 robotstxt	2026-10-16 15:12:13 (11 hours ago)	147.93.171.223 - - [16/Oct/2026:15:10:48 +0000] "GET /wp-includes/js/codemirror/config.php HTTP/2.0" ... show more 147.93.171.223 - - [16/Oct/2026:15:10:48 +0000] "GET /wp-includes/js/codemirror/config.php HTTP/2.0" 403 22699 "http://im365.io/wp-includes/js/codemirror/config.php" "Go-http-client/2.0" "-" edge="147.93.171.223" 147.93.171.223 - - [16/Oct/2026:15:11:11 +0000] "GET /wp-config-sample.php HTTP/2.0" 403 22673 "http://im365.io/wp-config-sample.php" "Go-http-client/2.0" "-" edge="147.93.171.223" 147.93.171.223 - - [16/Oct/2026:15:11:22 +0000] "GET /wp-admin/css/ HTTP/2.0" 403 22672 "http://im365.io/wp-admin/css/" "Go-http-client/2.0" "-" edge="147.93.171.223" 147.93.171.223 - - [16/Oct/2026:15:11:26 +0000] "GET /wp-admin/js/ HTTP/2.0" 403 22669 "http://im365.io/wp-admin/js/" "Go-http-client/2.0" "-" edge="147.93.171.223" 147.93.171.223 - - [16/Oct/2026:15:11:28 +0000] "GET /wp-admin/css/colors/modern/ HTTP/2.0" 403 22683 "http://im365.io/wp-admin/css/colors/modern/" "Go-http-client/2.0" "-" edge="147.93.171.223" ... show less	Web App Attack
🇫🇮 paissangroup	2026-10-16 13:39:07 (13 hours ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇫 149.54.62.134

🇨🇳 59.50.184.51

🇰🇷 211.51.132.104

🇺🇸 195.184.76.128

🇧🇷 177.158.32.53

🇺🇦 176.39.105.167

🇮🇳 152.59.152.97

🇧🇷 136.248.127.194

🇭🇰 134.122.133.160

🇫🇷 92.205.27.174

🇫🇷 91.196.152.233

🇺🇸 82.24.210.21

🇯🇵 43.163.234.99

🇬🇧 35.203.210.56

🇺🇸 17.166.151.11

🇧🇪 207.175.220.59

🇺🇸 184.186.76.217

🇳🇱 176.65.149.230

🇬🇧 165.154.129.130

🇺🇸 162.141.20.249