JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

217.181.93.130

Recent Activity

Abuse Confidence Score

29% Elevated

11 reports

11 reporters · latest 2 days ago

ISP: 3xK Tech GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS200373
Domain Name: 3xktech.cloud
Country: 🇩🇪 Germany
City: Berlin, State of Berlin

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

11 from 11 distinct reporters

First reported

March 11th 2026

Most recent report

2 days ago

Last 60 days

Top reporter locations 🇦🇺 Australia 1 🇨🇦 Canada 1 🇫🇷 France 1

Most common categories Web App Attack 5 Brute-Force 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 paulshipley.com.au	2026-11-13 05:23:37 UTC · (2 days ago)	paulshipley.id.au:443 217.181.93.130 - - [13/Nov/2026:16:23:35 +1100] "GET /?author=2 HTTP/1.1" 404 178012 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" ...	Web App Attack
🇮🇹 CoreTech srl	2026-11-12 23:48:57 UTC · (2 days ago)	cloudlinux2 fail2ban: 2026-11-13 00:43:49,744 fail2ban.filter [1611]: INFO [plesk-wordpress] Found 217.181.94.22 - 2026-11-13 00:43:49cloudlinux2 fail2ban: 2026-11-13 00:43:46,535 fail2ban.filter [1611]: INFO [plesk-wordpress] F ... show more cloudlinux2 fail2ban: 2026-11-13 00:43:49,744 fail2ban.filter [1611]: INFO [plesk-wordpress] Found 217.181.94.22 - 2026-11-13 00:43:49cloudlinux2 fail2ban: 2026-11-13 00:43:46,535 fail2ban.filter [1611]: INFO [plesk-wordpress] Found 195.63.23.22 - 2026-11-13 00:43:46cloudlinux2 fail2ban: 2026-11-13 00:43:48,424 fail2ban.filter [1611]: INFO [plesk-wordpress] Found 217.181.94.100 - 2026-11-13 00:43:48cloudlinux2 fail2ban: 2026-11-13 00:43:50,447 fail2ban.filter [1611]: INFO [plesk-wordpress] Found 195.63.23.59 - 2026-11-13 00:43:50cloudlinux2 fail2ban: 2026-11-13 00:43:44,369 fail2ban.filter [1611]: INFO [plesk-wordpress] Found 195.63.23.82 - 2026-11-13 00:43:44cloudlinux2 fail2ban: 2026-11-13 00:43:53,122 fail2ban.filter [1611]: INFO [plesk-wordpress] Found 217.181.94.28 - 2026-11-13 00:43:52cloudlinux2 fail2ban: 2026-11-13 00:43:52,492 fail2ban.filter [1611]: INFO [plesk-wordpress] Found 195.63.25.211 - 2026-11-13 00:43:52cloudlinux2 show less	Web App Attack
🇨🇦 DRI	2026-11-08 12:52:57 UTC · (1 week ago)	Web attack/Malicious activity detected	Web App Attack
🇫🇷 tecnicorioja	2026-10-26 23:00:45 UTC · (2 weeks ago)	wp-login attack [26/Oct/2026:06:47:38	Brute-Force Web App Attack
🇮🇪 AutosOnShow	2026-10-09 10:52:05 UTC · (1 month ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-10-09 10:51:31.459 \|	Web App Attack
🇩🇪 FeG Deutschland	2026-08-25 15:45:25 UTC · (2 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27	Exploited Host Web App Attack
🇩🇪 iGroupware	2026-08-12 17:25:29 UTC · (3 months ago)	{"req/ip"=>{:discriminator=>"217.181.93.130", :count=>16, :period=>180, :limit=>500, :epoch_time=>1786555529}, "signups/ip"=>{:discriminator=>"217.181.93.130", :count=>1, :period=>3600, :limit=>5, :epoch_time=>1786555529}, "signups/email"=>{:discrimi ... show more {"req/ip"=>{:discriminator=>"217.181.93.130", :count=>16, :period=>180, :limit=>500, :epoch_time=>1786555529}, "signups/ip"=>{:discriminator=>"217.181.93.130", :count=>1, :period=>3600, :limit=>5, :epoch_time=>1786555529}, "signups/email"=>{:discriminator=>"[email protected]", :count=>5, :period=>86400, :limit=>2, :epoch_time=>1786555529}} show less	Web App Attack
🇩🇪 LRob	2026-08-12 09:45:24 UTC · (3 months ago)	WordPress probing \| req: /wp-login.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0	Brute-Force Web App Attack
Anonymous	2026-07-13 14:30:26 UTC · (4 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 17-30.217.181.93.130.web-spammers.v2.rbl.imunify.com._v4 succeeded.	Web App Attack
🇫🇮 JimArchon72	2026-04-26 21:55:02 UTC · (6 months ago)	2026/04/26 21:54:59 "GET /wp-login.php HTTP/1.1"	Web App Attack
🇺🇸 TPI-Abuse	2026-03-11 18:46:57 UTC · (8 months ago)	(mod_security) mod_security (id:225170) triggered by 217.181.93.130 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 14:46:51.974848 2026] [security2:error] [pid 13173:tid 13173] [client 217.181.93.130:51990] ... show more (mod_security) mod_security (id:225170) triggered by 217.181.93.130 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 14:46:51.974848 2026] [security2:error] [pid 13173:tid 13173] [client 217.181.93.130:51990] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|taacorp.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "taacorp.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abG4m5xwnSn8dH1DEH2ZvAAAAAs"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 223.83.131.241

🇬🇧 213.166.84.59

🇳🇱 204.76.203.44

🇳🇱 193.47.62.69

🇫🇷 188.165.250.124

🇺🇸 172.58.135.230

🇵🇰 139.135.40.177

🇧🇬 78.128.112.74

🇩🇿 41.111.227.10

🇨🇳 39.100.83.185

🇩🇪 69.5.169.66

🇳🇱 35.214.189.128

🇨🇴 181.52.129.227

🇮🇳 180.188.253.150

🇺🇸 147.185.132.245

🇫🇷 84.17.60.236

🇺🇸 45.148.232.191

🇨🇬 41.75.64.109

🇬🇧 35.203.211.221

🇺🇸 172.178.84.168