JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.13.171.11

49.13.171.11 was found in our database!

This IP was reported 502 times. Confidence of Abuse is 100%: ?

100%

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	srv1.denm.online
Domain Name	hetzner.com
Country	🇩🇪 Germany
City	Nurnberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.13.171.11

Whois 49.13.171.11

IP Abuse Reports for 49.13.171.11:

This IP address has been reported a total of 502 times from 151 distinct sources. 49.13.171.11 was first reported on March 29th 2025, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 tmiland	2026-05-20 08:26:23 (2 weeks ago)	(wordpress_login) WordPress Login Attack 49.13.171.11 (DE/Germany/srv1.denm.online): 3 in the last 3 ... show more (wordpress_login) WordPress Login Attack 49.13.171.11 (DE/Germany/srv1.denm.online): 3 in the last 3600 secs; IP: 49.13.171.11; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 49.13.171.11 - - [20/May/2026:10:26:21 +0200] "GET /wp-login.php HTTP/1.1" 200 1911 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 49.13.171.11 - - [20/May/2026:10:26:21 +0200] "GET /wp-login.php HTTP/1.1" 200 1911 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 49.13.171.11 - - [20/May/2026:10:26:22 +0200] "POST /wp-login.php HTTP/1.1" 200 2042 "https://.*/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Brute-Force
🇨🇿 huginet	2026-05-20 08:23:15 (2 weeks ago)	49.13.171.11 - - [20/May/2026:10:23:14 +0200] "GET /wp-login.php HTTP/1.1" 200 9771 "-" "Mozilla/5.0 ... show more 49.13.171.11 - - [20/May/2026:10:23:14 +0200] "GET /wp-login.php HTTP/1.1" 200 9771 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 49.13.171.11 - - [20/May/2026:10:23:15 +0200] "POST /wp-login.php HTTP/1.1" 200 10257 "https://centrum-eko-likvidace.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web Spam Blog Spam Hacking Bad Web Bot Web App Attack
Anonymous	2026-05-20 05:54:44 (2 weeks ago)	2026-05-20T07:54:43.782923+02:00 zanati wp(www.serviceflow.co.za)[3865360]: Blocked authentication a ... show more 2026-05-20T07:54:43.782923+02:00 zanati wp(www.serviceflow.co.za)[3865360]: Blocked authentication attempt for louis-stanford from 49.13.171.11 ... show less	Web App Attack
🇩🇪 LRob.fr	2026-05-20 05:30:17 (2 weeks ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇨🇦 KIsmay	2026-05-20 05:04:50 (2 weeks ago)	May 19 22:11:47 www4 WPAudit[1310143]: 49.13.171.11 www.servicesfyi.ca "Mozilla/5.0 (Macintosh; Inte ... show more May 19 22:11:47 www4 WPAudit[1310143]: 49.13.171.11 www.servicesfyi.ca "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0" ronancs:ronancs98 FAIL May 19 22:12:03 www4 WPAudit[1313836]: 49.13.171.11 dev.siscobc.com "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" sbd-admin:sbd-admin98 FAIL May 20 00:33:04 www4 WPAudit[1324622]: 49.13.171.11 hvrhaulers.com "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" sbd-admin:sbd-admin2002 FAIL May 20 01:04:44 www4 WPAudit[1326863]: 49.13.171.11 www.vhsport.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0" vhsport:vhsport26 FAIL May 20 01:04:50 www4 WPAudit[1327042]: 49.13.171.11 dev.siscobc.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko ... show less	Brute-Force Web App Attack
🇪🇸 masterguru	2026-05-20 03:54:25 (2 weeks ago)	(wplogin) Failed WordPress login from 49.13.171.11 (DE/Germany/srv1.denm.online): 5 in the last 3600 ... show more (wplogin) Failed WordPress login from 49.13.171.11 (DE/Germany/srv1.denm.online): 5 in the last 3600 secs (0-122) show less	Hacking
🇺🇸 Mundo Bueno	2026-05-20 03:44:40 (2 weeks ago)	[ISILIA Protection v2.1] Tentative d'accès: /wp-json/wp/v2/users/me \| Pays: DE \| UA: Mozilla/5.0 (X1 ... show more [ISILIA Protection v2.1] Tentative d'accès: /wp-json/wp/v2/users/me \| Pays: DE \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.3 show less	Hacking Web App Attack
🇬🇧 consul.to	2026-05-20 03:38:46 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 Mundo Bueno	2026-05-20 00:58:48 (2 weeks ago)	[ISILIA Protection v2.1] Tentative d'accès: /wp-json/wp/v2/users/me \| Pays: DE \| UA: Mozilla/5.0 (Wi ... show more [ISILIA Protection v2.1] Tentative d'accès: /wp-json/wp/v2/users/me \| Pays: DE \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Sa show less	Hacking Web App Attack
🇷🇺 DZBOT	2026-05-20 00:30:54 (2 weeks ago)	DZBOT: Brute-force users IMAP/POP3	Brute-Force
🇬🇧 killian7603	2026-05-19 22:45:27 (2 weeks ago)	Logon Policy Violation	Email Spam Spoofing Brute-Force
🇫🇷 Yepngo	2026-05-19 22:42:12 (2 weeks ago)	49.13.171.11 - - [20/May/2026:00:42:12 +0200] "POST /wp-login.php HTTP/2.0" 200 12101 "https://blog. ... show more 49.13.171.11 - - [20/May/2026:00:42:12 +0200] "POST /wp-login.php HTTP/2.0" 200 12101 "https://blog.yepngo.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
Anonymous	2026-05-19 22:10:11 (2 weeks ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇫🇷 tecnicorioja	2026-05-19 22:01:39 (2 weeks ago)	wp-login attack [19/May/2026:03:23:42	Brute-Force Web App Attack
🇺🇸 ambor	2026-05-19 21:33:01 (2 weeks ago)	L0ss Honeypot: WordPress login access attempt. Path: /wp-login.php	Brute-Force Web App Attack

Showing 196 to 210 of 502 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 173.249.52.138

🇸🇪 171.25.158.80

🇹🇭 125.24.198.96

🇨🇳 116.230.168.213

🇿🇦 2620:171:1f:f003:9999::170

🇭🇰 220.246.42.217

🇩🇪 213.209.159.225

🇧🇩 59.152.12.212

🇹🇳 41.227.24.196

🇩🇪 36.255.97.63

🇺🇸 23.134.88.61

🇺🇸 20.127.185.37

🇬🇧 2a06:4880:4000::6c

🇺🇸 195.184.76.21

🇧🇷 170.80.65.140

🇺🇸 137.184.36.185

🇸🇬 103.167.151.157

🇳🇱 89.21.67.153

🇰🇷 58.229.141.26

🇱🇹 45.227.254.170