JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 217.181.90.133

217.181.90.133 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 65%: ?

65%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 217.181.90.133

Whois 217.181.90.133

IP Abuse Reports for 217.181.90.133:

This IP address has been reported a total of 13 times from 12 distinct sources. 217.181.90.133 was first reported on May 2nd 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-18 21:59:31 (3 days ago)	Auto-ban: >3000 req/min op 2026-06-18	Web App Attack SSH Hacking
🇨🇭 YF	2026-06-18 05:05:11 (3 days ago)	Git config exposure probe	Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 04:34:00 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 217.181.90.133 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 217.181.90.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 00:33:56.968396 2026] [security2:error] [pid 19265:tid 19265] [client 217.181.90.133:9819] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "now-app.space"] [uri "/.git/config"] [unique_id "ajN1NHwkV6luiEIaG98rdwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-06-18 03:09:09 (3 days ago)	Try to access /.git/config	Web App Attack
Anonymous	2026-06-18 02:15:02 (3 days ago)	suspicious request in access.log	Web App Attack
🇩🇪 4server	2026-06-18 02:10:57 (3 days ago)	[ThuJun1804:10:50.9107112026][security2:error][pid106164:tid106185][client217.181.90.133:0]ModSecuri ... show more [ThuJun1804:10:50.9107112026][security2:error][pid106164:tid106185][client217.181.90.133:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"hdcadvisory.ch\"][uri\"/.git/config\"][unique_id\"ajNTqkTMQGv-cDdtoKU6vAAAAJI\"] show less	Port Scan Brute-Force Web App Attack
🇳🇱 wlt-blocker	2026-06-18 01:46:05 (3 days ago)	Unauthorized access to webpage admin	Web App Attack
Anonymous	2026-06-18 01:42:29 (3 days ago)	Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy ... show more Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy — zero tolerance for exploit scanning. Banned Jun 18, 01:42 UTC. Origin: Germany, Berlin. show less	Hacking Bad Web Bot Web App Attack
🇺🇸 Mundo Bueno	2026-06-18 01:27:49 (3 days ago)	[ISILIA Protection v2.1] Tentative d'accès: /.git/config \| Pays: DE \| UA: Mozilla/5.0 (Windows NT 6. ... show more [ISILIA Protection v2.1] Tentative d'accès: /.git/config \| Pays: DE \| UA: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36 show less	Hacking Web App Attack
🇫🇮 inlink.ltd	2026-06-18 01:23:58 (4 days ago)	dot file probe	Web App Attack
🇺🇸 mnsf	2026-06-18 01:12:38 (4 days ago)	Abuse Detected (2)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 00:51:13 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 217.181.90.133 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 217.181.90.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 20:51:07.254193 2026] [security2:error] [pid 28478:tid 28478] [client 217.181.90.133:58479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ditchthediaper.com"] [uri "/.git/config"] [unique_id "ajNA-3_Fh7ZDZ5yadnpq8wAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TRoden	2026-05-02 19:59:42 (1 month ago)	Geo Block Plugin: Escalation flag(s): rce_attempt	Hacking

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.239.251.12

🇧🇪 198.235.24.211

🇸🇬 103.187.146.90

🇺🇸 67.207.84.8

🇺🇸 66.94.116.236

🇨🇳 27.128.171.39

🇧🇪 198.235.24.201

🇺🇸 196.51.251.9

🇬🇧 193.163.125.233

🇩🇪 118.193.59.142

🇨🇳 116.179.32.149

🇨🇳 113.125.165.132

🇮🇳 103.160.153.158

🇮🇷 85.198.19.253

🇱🇹 81.30.98.158

🇺🇸 45.156.129.112

🇺🇸 45.79.225.32

🇺🇸 216.180.246.32

🇳🇱 195.178.110.30

🇭🇰 194.187.178.143