JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.63.30.133

195.63.30.133 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 16%: ?

16%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.63.30.133

Whois 195.63.30.133

IP Abuse Reports for 195.63.30.133:

This IP address has been reported a total of 11 times from 7 distinct sources. 195.63.30.133 was first reported on March 7th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇪 AutosOnShow	2026-10-13 19:33:05 (3 days ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-10-13 19:32:11.013 \|	Web App Attack
🇮🇪 AutosOnShow	2026-10-13 14:37:04 (3 days ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-10-13 14:36:35.443 \|	Web App Attack
🇮🇪 AutosOnShow	2026-09-30 01:57:05 (2 weeks ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-09-30 01:56:14.938 \|	Web App Attack
🇮🇪 AutosOnShow	2026-09-24 19:43:05 (3 weeks ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-09-24 19:42:38.846 \|	Web App Attack
🇦🇺 Bay13	2026-09-24 03:17:21 (3 weeks ago)	CrowdSec:custom/http-sensitive-files	Web App Attack
🇮🇪 AutosOnShow	2026-09-23 00:10:07 (3 weeks ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-09-23 00:09:37.139 \|	Web App Attack
🇮🇹 CoreTech srl	2026-08-25 02:48:57 (1 month ago)	cloudlinux2 fail2ban: 2026-08-25 04:44:46,923 fail2ban.filter [1464]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-08-25 04:44:46,923 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 217.181.73.85 - 2026-08-25 04:44:46cloudlinux2 fail2ban: 2026-08-25 04:44:50,976 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 217.181.73.109 - 2026-08-25 04:44:50cloudlinux2 fail2ban: 2026-08-25 04:44:49,609 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.18.32 - 2026-08-25 04:44:49cloudlinux2 fail2ban: 2026-08-25 04:44:52,361 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 217.181.72.76 - 2026-08-25 04:44:52cloudlinux2 fail2ban: 2026-08-25 04:44:48,230 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 217.181.76.246 - 2026-08-25 04:44:47cloudlinux2 fail2ban: 2026-08-25 04:44:54,056 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.15.89 - 2026-08-25 04:44:53cloudlinux2 fail2ban: 2026-08-25 04:48:13,940 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 217.181.67.232 - 2026-08-25 04:48:13cloudl show less	Web App Attack
🇩🇪 LRob	2026-08-13 23:25:49 (2 months ago)	Credential and secrets file probing \| req: http://www.ab-geometre.com/.git/config \| UA: Mozilla/5.0 ... show more Credential and secrets file probing \| req: http://www.ab-geometre.com/.git/config \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Hacking Web App Attack
🇩🇪 iGroupware	2026-08-12 16:36:08 (2 months ago)	{"req/ip"=>{:discriminator=>"195.63.30.133", :count=>1, :period=>180, :limit=>500, :epoch_time=>1786 ... show more {"req/ip"=>{:discriminator=>"195.63.30.133", :count=>1, :period=>180, :limit=>500, :epoch_time=>1786552567}, "signups/ip"=>{:discriminator=>"195.63.30.133", :count=>1, :period=>3600, :limit=>5, :epoch_time=>1786552568}, "signups/email"=>{:discriminator=>"[email protected]", :count=>3, :period=>86400, :limit=>2, :epoch_time=>1786552568}} show less	Web App Attack
Anonymous	2026-06-03 23:22:01 (4 months ago)	195.63.30.133 - - [04/Jun/2026:01:21:49 +0200] "GET /wp-login.php HTTP/1.1" 404 27 "http://alliance. ... show more 195.63.30.133 - - [04/Jun/2026:01:21:49 +0200] "GET /wp-login.php HTTP/1.1" 404 27 "http://alliance.fm/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-03-07 06:32:46 (7 months ago)	(mod_security) mod_security (id:210350) triggered by 195.63.30.133 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 195.63.30.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 07 01:32:42.068330 2026] [security2:error] [pid 17742:tid 17742] [client 195.63.30.133:57168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|iconconstructors.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "iconconstructors.com"] [uri "/wp-login.php"] [unique_id "aavGii_2-FPfDl3C8Re7LQAAAAQ"], referer: http://iconconstructors.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 109.160.32.149

🇰🇷 211.253.37.225

🇧🇷 200.174.115.18

🇻🇳 125.212.244.35

🇦🇺 124.149.252.254

🇧🇬 78.128.114.46

🇺🇸 64.62.156.188

🇨🇱 45.173.123.51

🇨🇳 44.30.169.107

🇬🇧 35.203.211.185

🇸🇮 185.41.177.67

🇹🇭 159.192.137.133

🇳🇱 109.160.32.117

🇳🇱 109.160.32.49

🇿🇲 102.23.122.235

🇺🇸 69.164.217.74

🇩🇪 195.182.16.23

🇵🇱 188.212.135.188

🇵🇱 188.212.135.181

🇺🇸 176.20.211.164