AbuseIPDB » 185.220.100.241

Check an IP Address, Domain Name, or Subnet

e.g. 34.239.148.127, microsoft.com, or 5.188.10.0/24

185.220.100.241 was found in our database!

This IP was reported 14,929 times. Confidence of Abuse is 100%: ?

100%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	F3 Netze E.V.
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	tor-exit-14.zbau.f3netze.de
Domain Name	f3netze.de
Country	Germany
City	Hassfurt, Bayern

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 185.220.100.241

Whois 185.220.100.241

IP Abuse Reports for 185.220.100.241:

This IP address has been reported a total of 14,929 times from 581 distinct sources. 185.220.100.241 was first reported on November 22nd 2020, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
tc-hawkes.icu	1 hour ago	SSH Bruteforce ...	Brute-Force SSH
Rizzy	6 hours ago	Multiple WAF Violations	Brute-Force Web App Attack
expandmade.com	8 hours ago	unauthorized rest api call [28/Sep/2023:02:36:05 "GET /wp-json/wp/v2/users/3"]	Web App Attack
Circuit3	26 Sep 2023		DDoS Attack Email Spam Brute-Force
ThreatBook.io	26 Sep 2023	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/185.220.100.241 ... show moreThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/185.220.100.241 2023-09-25 02:35:30 /robots.txt show less	Web App Attack
oncord	25 Sep 2023	Form spam	Web Spam
Hirte	24 Sep 2023	C1: Web Attack GET /humor/wp-login.php	Web Spam Hacking Bad Web Bot Web App Attack
Olivia Davis	24 Sep 2023		Web Spam
nationaleventpros.com	24 Sep 2023	web form spam (Nilsimsa: ACIGAQICgAAAAEQAVAABAQICAiACBAAwgAACAAEAAAA)	Open Proxy Web Spam
cusezar.com	24 Sep 2023	185.220.100.241 /xmlrpc.php	Brute-Force
forhosting	24 Sep 2023	(XMLRPC) WP XMLPRC Attack 185.220.100.241 (DE/Germany/tor-exit-14.zbau.f3netze.de): 5 in the last 36 ... show more(XMLRPC) WP XMLPRC Attack 185.220.100.241 (DE/Germany/tor-exit-14.zbau.f3netze.de): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 185.220.100.241 - - [24/Sep/2023:19:01:56 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3894 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:65.0) Gecko/20100101 Firefox/65.0" 185.220.100.241 - - [24/Sep/2023:19:01:58 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3895 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:65.0) Gecko/20100101 Firefox/65.0" 185.220.100.241 - - [24/Sep/2023:19:01:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3895 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:65.0) Gecko/20100101 Firefox/65.0" 185.220.100.241 - - [24/Sep/2023:19:02:01 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3895 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:65.0) Gecko/20100101 Firefox/65.0" 185.220.100.241 - - [24/Sep/2023:19:02:03 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3895 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:65.0) Gecko/20100101 Firefox/65.0" show less	Port Scan
Anonymous	24 Sep 2023		Web Spam Bad Web Bot
Kenshin869	24 Sep 2023	Wordpress unauthorized access attempt	Brute-Force
ozisp.com.au	24 Sep 2023	DE_F3 Netze e.V._<33>1695548697 [1:2522031:5292] ET TOR Known Tor Relay/Router (Not Exit) Node TCP T ... show moreDE_F3 Netze e.V._<33>1695548697 [1:2522031:5292] ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic group 32 [Classification: Misc Attack] [Priority: 2] {TCP} 185.220.100.241:35233 show less	Open Proxy
MrBister	24 Sep 2023	185.220.100.241 - - [24/Sep/2023:07:40:45 +0200] "GET /wp-login.php HTTP/1.1"	Port Scan