213.254.1.17

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
75% Critical
16 reports
16 reporters · latest 1 week ago
ISP
ITGate.Net - Server Farm Colocation -
Usage Type
Data Center/Web Hosting/Transit
ASN
AS12779
Hostname(s)
blues.itgate.net
Domain Name
itgate.net
Country
🇮🇹 Italy
City
Turin, Piedmont
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
16 from 16 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 4 🇫🇮 Finland 2 🇨🇿 Czechia 1
Most common categories Web App Attack 15 Brute-Force 4 Hacking 3 Port Scan 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇿🇦 conure.sh
csagent: score 21.7: php in uploads x2, php 404 x1, 404 noise floor x1; 1 domain(s) in 11s
Web App Attack
🇩🇪 4server
Port Scan Brute-Force Web App Attack
🇫🇮 6kilowatti
Web App Attack
Anonymous
[ns41.kdns.gr] httpd-suspicious-path: sites=www.koukas-machines.com; logs=/var/log/httpd/domains/koukas-machines.com.log; samples=/wp-content/uploads/sad.php | /wp-content/sad.php | /wp-content/uploads/wp-wlx.php
Hacking Web App Attack
🇩🇪 todix
"GET /wp-content/uploads/ax.php HTTP/1.1" 403 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
Web App Attack
🇺🇸 mnsf
Too many Status 40X (14)
Brute-Force Web App Attack
🇫🇮 paissangroup
Multiple WAF Violations
Web App Attack
🇳🇱 Mangelot Hosting
(upload_shell) srv101 PHP execution in uploads 213.254.1.17 (IT/Italy/blues.itgate.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇨🇿 plzenskypruvodce.cz
Web App Attack
🇩🇪 LRob
Hacking Web App Attack
🇮🇹 VHosting
Detected WordPress attack from different servers
Brute-Force Web App Attack
🇹🇷 Jova
Requests for webshells on a web server: 2 requests.
Hacking Web App Attack
🇸🇪 vaia.cloud
crowdsecurity/http-wordpress-scan
Brute-Force Web App Attack
🇬🇧 consul.to
Web attack/malicious scanning detected
Web App Attack
🇫🇷 dynamix
Multiple WAF Violations
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 192.34.128.202
🇨🇦 207.219.222.29
🇧🇷 181.174.244.65
🇨🇱 170.150.157.22
🇵🇰 103.179.240.146
🇨🇳 101.91.126.150
🇬🇧 87.236.176.80
🇨🇳 47.116.118.29
🇰🇷 43.133.235.178
🇨🇳 36.99.46.101
🇧🇪 35.210.204.115
🇧🇪 35.210.1.5
🇨🇦 216.232.226.203
🇨🇳 182.242.168.80
🇫🇷 173.249.63.116
🇻🇳 171.255.184.141
🇨🇳 116.179.32.146
🇸🇾 109.224.242.108
🇧🇩 103.168.225.3
🇸🇮 102.220.160.67
feedback