JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 217.181.95.94

217.181.95.94 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 18%: ?

18%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 217.181.95.94

Whois 217.181.95.94

IP Abuse Reports for 217.181.95.94:

This IP address has been reported a total of 10 times from 8 distinct sources. 217.181.95.94 was first reported on March 14th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-09-28 11:48:02 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12	Exploited Host Web App Attack
🇫🇷 Omar Martínez	2026-09-28 11:20:00 (2 days ago)	217.181.95.94 - - [28/Sep/2026:05:19:59 -0600] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 7569 "-" " ... show more 217.181.95.94 - - [28/Sep/2026:05:19:59 -0600] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 7569 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" ... show less	Phishing Email Spam Blog Spam
🇩🇪 LRob	2026-08-17 00:56:12 (1 month ago)	WordPress REST-API user enumeration (probing CVE-2017-5487 to harvest usernames) \| req: /wp-json/wp/ ... show more WordPress REST-API user enumeration (probing CVE-2017-5487 to harvest usernames) \| req: /wp-json/wp/v2/users/ \| UA: Go-http-client/1.1 show less	Hacking Web App Attack
🇮🇩 bps-statistics	2026-06-16 23:00:57 (3 months ago)	WP Login Scan Activities: "2026-06-17T06:00:57.979+07:00" "/wp-login.php" "217.181.95.94" "Mozilla/5 ... show more WP Login Scan Activities: "2026-06-17T06:00:57.979+07:00" "/wp-login.php" "217.181.95.94" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" show less	Web App Attack
🇮🇩 bps-statistics	2026-06-16 17:35:24 (3 months ago)	WP Login Scan Activities: "2026-06-17T00:35:24.101+07:00" "/wp-login.php" "217.181.95.94" "Mozilla/5 ... show more WP Login Scan Activities: "2026-06-17T00:35:24.101+07:00" "/wp-login.php" "217.181.95.94" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" show less	Web App Attack
🇮🇩 bps-statistics	2026-06-16 13:37:02 (3 months ago)	WP Login Scan Activities: "2026-06-16T20:37:02.005+07:00" "/wp-login.php" "217.181.95.94" "Mozilla/5 ... show more WP Login Scan Activities: "2026-06-16T20:37:02.005+07:00" "/wp-login.php" "217.181.95.94" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" show less	Web App Attack
Anonymous	2026-06-15 18:13:01 (3 months ago)	2026-06-15T20:13:00.689655+02:00 zanati wp(sahpa.co.za)[2045750]: Blocked authentication attempt for ... show more 2026-06-15T20:13:00.689655+02:00 zanati wp(sahpa.co.za)[2045750]: Blocked authentication attempt for admin from 217.181.95.94 ... show less	Web App Attack
Anonymous	2026-05-08 19:16:07 (4 months ago)	Web attack blocked by Wordfence on www.museumvalkenburg.nl (1 hit). Reported by CRMON.	Web App Attack
🇦🇺 [email protected]	2026-05-08 02:36:52 (4 months ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-login.php	Web App Attack
🇺🇸 TPI-Abuse	2026-03-14 17:23:05 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 217.181.95.94 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 217.181.95.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 13:23:00.037727 2026] [security2:error] [pid 4517:tid 4517] [client 217.181.95.94:41236] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|digdesign.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "digdesign.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abWZdHCwY4obUgkgoveETwAAABE"], referer: https://digdesign.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 45.85.36.40

🇲🇽 187.216.224.85

🇺🇦 176.102.222.101

🇦🇿 82.194.22.180

🇱🇹 77.90.185.121

🇷🇴 77.81.21.130

🇺🇸 50.6.2.155

🇦🇹 185.224.3.192

🇺🇸 172.236.228.227

🇵🇰 160.250.114.93

🇳🇱 34.91.179.195

🇨🇳 223.109.252.177

🇳🇱 195.178.110.228

🇬🇧 172.71.241.116

🇮🇩 163.7.13.17

🇯🇵 153.126.165.228

🇷🇴 92.118.39.49

🇺🇸 64.62.156.112

🇧🇷 16.5.0.170

🇰🇷 211.254.212.59