JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 205.147.16.91

205.147.16.91 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 5%: ?

ISP	PV-SL-HOSTED-Amsterdam-Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS208172
Domain Name	ip.me
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 205.147.16.91

Whois 205.147.16.91

IP Abuse Reports for 205.147.16.91:

This IP address has been reported a total of 27 times from 13 distinct sources. 205.147.16.91 was first reported on November 24th 2025, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-07-30 02:45:57 (11 hours ago)	Blocked by UFW (TCP on 13587) Source port: 57711 TTL: 49 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 13587) Source port: 57711 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 205.147.16.91) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-29 13:05:37 (1 day ago)	Blocked by UFW (TCP on 13587) Source port: 65393 TTL: 49 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 13587) Source port: 65393 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 205.147.16.91) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-04-29 06:16:48 (3 months ago)	Blocked by UFW (TCP on 55756) Source port: 47642 TTL: 49 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 55756) Source port: 47642 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 205.147.16.91) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-04-08 07:57:08 (3 months ago)	Blocked by UFW (TCP on 6881) Source port: 4282 TTL: 50 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 6881) Source port: 4282 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 205.147.16.91) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-01-20 08:33:03 (6 months ago)	Bot / scanning and/or hacking attempts: GET /wp-config.phpo HTTP/1.1, GET /wp-content/plugins/member ... show more Bot / scanning and/or hacking attempts: GET /wp-config.phpo HTTP/1.1, GET /wp-content/plugins/membership-simplified-for-oap-members-o, GET /wp-config.1 HTTP/1.1, GET /wp-config. HTTP/1.1, GET /wp-config HTTP/1.1, GET /wp-config.php.temp HTTP/1.1, GET /wp-admin/admin-ajax.php?action=kbslider_show_image&img=..%, GET /wordpress/wp-config.php~ HTTP/1.1, GET /wp-admin/admin-ajax.php?action=showbiz_show_image&img=..%2, GET /blog/wp-config.php~ HTTP/1.1, GET /wp-config_copy HTTP/1.1, GET /blog/wp-config.php.bak HTTP/1.1, GET /wp-content/plugins/pica-photo-gallery/picadownload.php?img, GET /wp-content/plugins/contus-video-gallery/hdflvplayer/downlo, GET /wp-config.php-o HTTP/1.1, GET /wp-admin/admin.php?page=supsystic-backup&tab=bupLog&downlo, GET /wp-content/plugins/jsmol2wp/php/jsmol.php?isform=true&call show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-01-20 07:38:18 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 205.147.16.91 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 205.147.16.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 02:38:11.865238 2026] [security2:error] [pid 4988:tid 4988] [client 205.147.16.91:57940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bearssd.org"] [uri "/wp-content/plugins/codecanyon-5293356-ajax-store-locator-wordpress/sl_file_download.php"] [unique_id "aW8w404CnesOLkESa3L1jQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-01-20 06:36:27 (6 months ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 octageeks.com	2026-01-20 05:06:16 (6 months ago)	Wordpress malicious attack:[octascan]	Web App Attack
🇺🇸 TPI-Abuse	2026-01-19 17:21:29 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 205.147.16.91 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 205.147.16.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 19 12:21:25.056173 2026] [security2:error] [pid 2993168:tid 2993168] [client 205.147.16.91:16144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.edmestonfd.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aW5oFdnwZgyKfoLFL_J9OgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-19 16:04:28 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 205.147.16.91 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 205.147.16.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 19 11:04:23.719578 2026] [security2:error] [pid 1018:tid 1018] [client 205.147.16.91:3097] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.theseventhcongregationofladderdayvixens.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aW5WB5G22Nx6-f0nMs4pmQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-01-19 14:48:33 (6 months ago)	Triggered Cloudflare WAF (firewallManaged) from NL. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from NL. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-content/themes/linenity/functions/download.php UA: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-01-19 13:41:12 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 205.147.16.91 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 205.147.16.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 19 08:41:06.102970 2026] [security2:error] [pid 13786:tid 13786] [client 205.147.16.91:15861] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thorndikestudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aW40cg1jiT9xcedWeU7KyAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-01-19 10:44:23 (6 months ago)	Multiple WAF Violations	Web App Attack
🇩🇪 voemedia	2026-01-19 09:16:59 (6 months ago)	(mod_security) mod_security triggered on hostname [redacted] 205.147.16.91 (NL/The Netherlands/-)	SQL Injection
🇳🇱 Site.eu	2026-01-19 09:10:47 (6 months ago)	Excessive 404/403 errors	Brute-Force

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇷 194.5.176.86

🇷🇴 193.46.255.86

🇷🇴 193.32.162.27

🇪🇸 172.253.5.220

🇸🇬 47.84.115.39

🇰🇷 47.80.13.176

🇸🇬 5.223.69.5

🇺🇸 195.184.76.244

🇨🇴 191.156.157.166

🇺🇸 144.172.91.236

🇺🇸 107.0.200.227

🇧🇩 103.213.238.91

🇻🇳 103.61.44.43

🇯🇴 46.248.201.249

🇭🇰 43.100.102.196

🇹🇼 35.221.198.96

🇺🇸 34.58.122.91

🇺🇸 34.20.225.61

🇷🇺 31.44.244.162

🇨🇳 27.38.248.151