Total reports
8 from
7 distinct
reporters
First reported
March 11th 2026
Most recent report
11 minutes ago
Last 60 days
Top reporter locations
🇦🇺
Australia
1
🇩🇪
Germany
1
🇫🇷
France
1
Most common categories
Brute-Force
2
Web App Attack
2
Bad Web Bot
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇦🇺
electronico
2026-11-15 08:35:44
UTC ·
(11 minutes ago)
217.181.93.149 - - [15/Nov/2026:19:35:42 +1100] "POST /xmlrpc.php HTTP/1.1" 200 5777 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0"
...
Brute-Force
Web App Attack
🇫🇷
ELYAZ
2026-11-13 06:59:46
UTC ·
(2 days ago)
(wordpress) Failed wordpress login from 217.181.93.149 (GB/United Kingdom/-): (CF_ENABLE)
Brute-Force
🇺🇸
dot.mg
2026-11-01 12:52:17
UTC ·
(1 week ago)
Impersonating Good bots
Bad Web Bot
🇩🇪
ManagedStack
2026-10-06 12:23:01
UTC ·
(1 month ago)
Wordpress Attack
Web App Attack
🇮🇹
[email protected]
2026-07-04 10:03:34
UTC ·
(4 months ago)
2026-07-04 12:03:33,231 fail2ban.actions [4115713]: NOTICE [wordpress] Ban 217.181.93.1492026-07-04 12:03:33,327 fail2ban.actions [4115713]: NOTICE [apache-auth] Ban 217.181.93.149
Brute-Force
🇵🇹
Subnet Shadow Specter
2026-06-13 09:17:11
UTC ·
(5 months ago)
[Security Alert] Unauthorized malicious activity detected; IP address has been automatically blocked and banned. [Method]: GET. [Request]: => /docs/swagger.json [User-Agent]: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chro ...
show more
[Security Alert] Unauthorized malicious activity detected; IP address has been automatically blocked and banned. [Method]: GET. [Request]: => /docs/swagger.json [User-Agent]: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36. [OS]: Linux. [IP Address]: 217.181.93.149. [RPS] High overshoot requests per second (RPS). [Date]: 2026-06-13 03:56:18 UTC.
show less
Bad Web Bot
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-04-22 03:11:53
UTC ·
(6 months ago)
(mod_security) mod_security (id:210350) triggered by 217.181.93.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 23:11:49.889507 2026] [security2:error] [pid 6324:tid 6324] [client 217.181.93.149:54276] M ...
show more
(mod_security) mod_security (id:210350) triggered by 217.181.93.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 23:11:49.889507 2026] [security2:error] [pid 6324:tid 6324] [client 217.181.93.149:54276] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.humbliaslaw.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.humbliaslaw.com"] [uri "/wp-login.php"] [unique_id "aeg8dYpp43q4OI31rMOVNQAAAAI"], referer: http://humbliaslaw.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-11 14:53:02
UTC ·
(8 months ago)
(mod_security) mod_security (id:210350) triggered by 217.181.93.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 10:52:56.913445 2026] [security2:error] [pid 16230:tid 16230] [client 217.181.93.149:20158] ...
show more
(mod_security) mod_security (id:210350) triggered by 217.181.93.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 10:52:56.913445 2026] [security2:error] [pid 16230:tid 16230] [client 217.181.93.149:20158] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.maffiniandbearce.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.maffiniandbearce.com"] [uri "/wp-login.php"] [unique_id "abGByEgqMIF4VFqXvDq7rwAAAB8"], referer: https://www.maffiniandbearce.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack