JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.141.130.251

213.141.130.251 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 100%: ?

100%

ISP	Meridian-net Network
Usage Type	Fixed Line ISP
ASN	AS12714
Domain Name	megafon.ru
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.141.130.251

Whois 213.141.130.251

IP Abuse Reports for 213.141.130.251:

This IP address has been reported a total of 28 times from 20 distinct sources. 213.141.130.251 was first reported on July 3rd 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-07-04 19:58:28 (1 hour ago)	tcp/80 (2 or more attempts)	Port Scan
🇫🇮 mnazibo	2026-07-04 19:00:09 (2 hours ago)	Date: 04/Jul/2026 21:38:23 \| Reported IP: 213.141.130.251 mod_security \| id: 933100 933120 933140 93 ... show more Date: 04/Jul/2026 21:38:23 \| Reported IP: 213.141.130.251 mod_security \| id: 933100 933120 933140 933150 933160 942151 \| RU/group.my_domain/- \| Connections: 12 \| Blocked: Permanent Block: [LF_MODSEC] \| URIs: /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input; /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input \| Logs: PHP Injection Attack: Configuration Directive Found; PHP Injection Attack: High-Risk PHP Function Call Found; PHP Injection Attack: High-Risk PHP Function Name Found; PHP Injection Attack: I/O Stream Found; PHP Injection Attack: PHP Open Tag Found; SQL Injection Attack: SQL function name detected show less	SQL Injection Brute-Force Bad Web Bot
🇩🇪 Da_tschek	2026-07-04 18:49:19 (2 hours ago)	Port scanning	Port Scan Hacking
🇳🇱 DrLex0	2026-07-04 17:16:27 (3 hours ago)	Stupid attempts at going above server root and other libredtail garbage 213.141.130.251 80 - [04/Ju ... show more Stupid attempts at going above server root and other libredtail garbage 213.141.130.251 80 - [04/Jul/2026:17:16:27 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 528 "-" "libredtail-http" show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2026-07-04 12:18:51 (8 hours ago)	SSH Brute force: 72 attempts were recorded from 213.141.130.251 2026-07-04T12:49:00+02:00 Invalid us ... show more SSH Brute force: 72 attempts were recorded from 213.141.130.251 2026-07-04T12:49:00+02:00 Invalid user oracle from 213.141.130.251 port 21666 2026-07-04T12:50:14+02:00 Invalid user nginx from 213.141.130.251 port 20228 2026-07-04T12:51:26+02:00 Invalid user manager from 213.141.130.251 port 61842 2026-07-04T12:52:36+02:00 Invalid user jan from 213.141.130.251 port 25400 2026-07-04T12:53:49+02:00 Invalid user hacluster from 213.141.130.251 port 13144 2026-07-04T12:55:05+02:00 User git from 213.141.130.251 not allowed because none of user's groups are listed in AllowGroups 2026-07-04T12:56:16+02:00 Invalid user frappe from 213.141.130.251 port 24426 2026-07-04T12:57:21+02:00 Invalid user es from 213.141.130.251 port 55884 2026-07-04T12:58:30+02:00 Invalid user cloud from 213.141.130.251 port 27356 2026-07-04T12:59:40+02:00 Invalid user client from 213.141.130.251 port 44034 2026-07-04T13:0 show less	Brute-Force SSH
🇺🇸 NXTwoThou	2026-07-04 12:03:23 (9 hours ago)	/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh	Web App Attack
Anonymous	2026-07-04 11:32:10 (9 hours ago)	213.141.130.251 - - [04/Jul/2026:13:32:09 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/. ... show more 213.141.130.251 - - [04/Jul/2026:13:32:09 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" ... show less	Brute-Force Web App Attack
🇮🇩 demonsword	2026-07-04 10:59:26 (10 hours ago)	SSH brute-force detected: 49 failed login attempts in the last 1 hour.	Brute-Force SSH
🇨🇭 altux	2026-07-04 08:13:44 (12 hours ago)	2026-07-04T10:12:40.467152firelutry sshd[810375]: pam_unix(sshd:auth): authentication failure; logna ... show more 2026-07-04T10:12:40.467152firelutry sshd[810375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.141.130.251 2026-07-04T10:12:42.828844firelutry sshd[810375]: Failed password for invalid user admin from 213.141.130.251 port 50934 ssh2 2026-07-04T10:13:43.313968firelutry sshd[810380]: Invalid user orangepi from 213.141.130.251 port 12756 ... show less	Brute-Force SSH
🇩🇪 Hazzard	2026-07-04 08:08:14 (12 hours ago)	(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)	SQL Injection
🇮🇩 demonsword	2026-07-04 07:59:24 (13 hours ago)	SSH brute-force detected: 54 failed login attempts in the last 1 hour.	Brute-Force SSH
🇺🇸 xmission.com	2026-07-04 07:02:51 (14 hours ago)	Blocked by UFW (TCP on 2375) Source port: 64790 TTL: 237 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 2375) Source port: 64790 TTL: 237 Packet length: 40 TOS: 0x08 This report (for 213.141.130.251) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇿 lp	2026-07-04 06:18:49 (14 hours ago)	SSH Brute force: 92 attempts were recorded from 213.141.130.251 2026-07-04T06:48:42+02:00 Connection ... show more SSH Brute force: 92 attempts were recorded from 213.141.130.251 2026-07-04T06:48:42+02:00 Connection closed by authenticating user root 213.141.130.251 port 18822 [preauth] 2026-07-04T06:49:32+02:00 Connection closed by authenticating user root 213.141.130.251 port 20624 [preauth] 2026-07-04T06:50:20+02:00 Connection closed by authenticating user root 213.141.130.251 port 31608 [preauth] 2026-07-04T06:51:13+02:00 Connection closed by authenticating user root 213.141.130.251 port 15852 [preauth] 2026-07-04T06:52:08+02:00 Connection closed by authenticating user root 213.141.130.251 port 10468 [preauth] 2026-07-04T06:53:01+02:00 Connection closed by authenticating user root 213.141.130.251 port 38734 [preauth] 2026-07-04T06:53:53+02:00 Connection closed by authenticating user root 213.141.130.251 port 39428 [preauth] 2026-07-04T06:54:45+02:00 Connection closed by authenticating user root 2 show less	Brute-Force SSH
🇮🇩 SentinalX by uzumaru	2026-07-04 05:59:30 (15 hours ago)	SSH brute-force detected: 59 failed login attempts in the last 1 hour.	Brute-Force SSH
🇩🇰 castipo	2026-07-04 05:35:19 (15 hours ago)	nginx-rce :: 213.141.130.251 - - [04/Jul/2026:12:35:19 +0700] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2 ... show more nginx-rce :: 213.141.130.251 - - [04/Jul/2026:12:35:19 +0700] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" host="api.[user].[host]" cfip="-" cfray="-" show less	IoT Targeted Web App Attack Exploited Host Port Scan Hacking

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 143.202.96.250

🇱🇺 46.151.182.201

🇷🇺 37.205.80.235

🇺🇸 216.25.89.122

🇺🇸 162.216.149.70

🇰🇷 121.132.27.238

🇺🇸 96.8.116.34

🇷🇴 80.94.92.152

🇯🇵 47.245.9.88

🇺🇦 176.113.167.188

🇺🇸 172.86.122.53

🇸🇬 161.118.251.181

🇺🇸 147.185.132.119

🇺🇸 147.185.132.88

🇨🇳 113.141.171.139

🇹🇷 93.114.98.170

🇱🇹 62.60.130.233

🇺🇸 20.127.155.221

🇨🇦 178.249.214.12

🇯🇵 124.155.125.131