JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

9.141.30.218

Recent Activity

Abuse Confidence Score

100% Critical

753 reports

501 reporters · latest 57 seconds ago

ISP: Microsoft Limited
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

753 from 501 distinct reporters

First reported

November 13th 2026

Most recent report

57 seconds ago

Last 60 days

Top reporter locations 🇩🇪 Germany 189 🇺🇸 United States of America 158 🇫🇷 France 75

Most common categories Web App Attack 597 Bad Web Bot 204 Brute-Force 180 Hacking 169 Port Scan 49

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 chrisj	2026-11-14 15:56:10 UTC · (58 seconds ago)	[Sat Nov 14 15:56:09.415952 2026] [proxy_fcgi:error] [pid 12732:tid 12822] [client 9.141.30.218:27398] AH01071: Got error 'Primary script unknown' [Sat Nov 14 15:56:09.633874 2026] [proxy_fcgi:error] [pid 12732:tid 12791] [client 9.141.30.218:27398] ... show more [Sat Nov 14 15:56:09.415952 2026] [proxy_fcgi:error] [pid 12732:tid 12822] [client 9.141.30.218:27398] AH01071: Got error 'Primary script unknown' [Sat Nov 14 15:56:09.633874 2026] [proxy_fcgi:error] [pid 12732:tid 12791] [client 9.141.30.218:27398] AH01071: Got error 'Primary script unknown' [Sat Nov 14 15:56:09.828757 2026] [proxy_fcgi:error] [pid 12732:tid 12832] [client 9.141.30.218:27398] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇪🇸 Francisco Vallejo	2026-11-14 15:51:32 UTC · (5 minutes ago)	[Sat Nov 14 16:51:31.294228 2026] [authz_core:error] [pid 750402:tid 750417] [client 9.141.30.218:14099] AH01630: client denied by server configuration: proxy:http://giedi:3000/wp-content/plugins/hellopress/wp_filemanager.php [Sat Nov 14 16:51:31.373 ... show more [Sat Nov 14 16:51:31.294228 2026] [authz_core:error] [pid 750402:tid 750417] [client 9.141.30.218:14099] AH01630: client denied by server configuration: proxy:http://giedi:3000/wp-content/plugins/hellopress/wp_filemanager.php [Sat Nov 14 16:51:31.373702 2026] [authz_core:error] [pid 750402:tid 750407] [client 9.141.30.218:14099] AH01630: client denied by server configuration: proxy:http://giedi:3000/this_is_a_new_hello_world.php [Sat Nov 14 16:51:31.450309 2026] [authz_core:error] [pid 750402:tid 750409] [client 9.141.30.218:14099] AH01630: client denied by server configuration: proxy:http://giedi:3000/admin.php/testc.php [Sat Nov 14 16:51:31.546107 2026] [authz_core:error] [pid 750402:tid 750421] [client 9.141.30.218:14099] AH01630: client denied by server configuration: proxy:http://giedi:3000/admin.php/ass.php [Sat Nov 14 16:51:31.665203 2026] [authz_core:error] [pid 750402:tid 750414] [client 9.141.30.218:14099] AH01630: client denied by server configuration: proxy:http://giedi:300 ... show less	Brute-Force SSH
🇱🇹 NotACaptcha	2026-11-14 15:42:32 UTC · (14 minutes ago)	webserver:80 [14/Nov/2026] "GET /hosty.php HTTP/1.1" 404 381 webserver:80 [14/Nov/2026] "GET /admin.php/fff.php HTTP/1.1" 404 381 webserver:80 [14/Nov/2026] "GET /765.php HTTP/1.1" 404 381 webserver:80 [14/Nov/2026] "GET /admin.php/wp-css.php HTT ... show more webserver:80 [14/Nov/2026] "GET /hosty.php HTTP/1.1" 404 381 webserver:80 [14/Nov/2026] "GET /admin.php/fff.php HTTP/1.1" 404 381 webserver:80 [14/Nov/2026] "GET /765.php HTTP/1.1" 404 381 webserver:80 [14/Nov/2026] "GET /admin.php/wp-css.php HTTP/1.1" 404 381 webserver:80 [14/Nov/2026] "GET /ggwgu.php HTTP/1.1" 404 381 webserver:80 [14/Nov/2026] "GET /eazy.php HTTP/1.1" 404 381 webserver:80 [14/Nov/2026] "GET /ssilver.php HTTP/1.1" 404 381 webserver:80 [14/Nov/2026] "GET /shellerr.php HTTP/1.1" 404 381 webserver:80 [14/Nov/2026] "GET /1x.php HTTP/1.1" 404 381 webserver:80 [14/Nov/2026] "GET /afodf.php HTTP/1.1" 404 381 webserver:80 [14/Nov/2026] "GET /xghggdgtehg.php HTTP/1.1" 404 381 webserver:80 [14/Nov/2026] "GET /mp4.php HTTP/1.1" 404 381 webserver:80 [14/Nov/2026] "GET /domvf.php HTTP/1.1" 404 381 webserver:80 [14/Nov/2026] "GET /reviall.php HTTP/1.1" 404 381 webserver:80 [14/Nov/2026] "GET /wocii.php HTTP/1.1" 404 381 webserver:80 [14/Nov/2026] "GET /wint.php HTT... show less	Web App Attack
🇧🇪 Ivo Vynckier	2026-11-14 15:39:00 UTC · (18 minutes ago)	9.141.30.218 - - [13/Nov/2026:21:53:48 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 334 "-" "-" 9.141.30.218 - - [13/Nov/2026:21:53:49 +0100] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 315 "-" "-" 9.141.30.218 ... show more 9.141.30.218 - - [13/Nov/2026:21:53:48 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 334 "-" "-" 9.141.30.218 - - [13/Nov/2026:21:53:49 +0100] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 315 "-" "-" 9.141.30.218 - - [13/Nov/2026:21:53:49 +0100] "GET /xzrex.php HTTP/1.1" 301 295 "-" "-" 9.141.30.218 - - [13/Nov/2026:21:53:49 +0100] "GET /an.php HTTP/1.1" 301 292 "-" "-" 9.141.30.218 - - [13/Nov/2026:21:53:49 +0100] "GET /mp4.php HTTP/1.1" 301 293 "-" "-" 9.141.30.218 - - [13/Nov/2026:21:53:49 +0100] "GET /llw.php HTTP/1.1" 301 293 "-" "-" 9.141.30.218 - - [13/Nov/2026:21:53:50 +0100] "GET /300_n.php HTTP/1.1" 301 295 "-" "-" 9.141.30.218 - - [13/Nov/2026:21:53:50 +0100] "GET /sm.php HTTP/1.1" 301 292 "-" "-" 9.141.30.218 - - [13/Nov/2026:21:53:50 +0100] "GET /motu.php HTTP/1.1" 301 294 "-" "-" 9.141.30.218 - - [13/Nov/2026:21:53:50 +0100] "GET /wp_.php HTTP/1.1" 301 293 "-" "-" show less	Web App Attack
🇩🇪 bescared	2026-11-14 15:37:51 UTC · (19 minutes ago)	F2B - Malicious activity detected. URL Probing. -8ff06ede-	Hacking Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-11-14 15:37:04 UTC · (20 minutes ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇳🇱 Savvii	2026-11-14 15:36:55 UTC · (20 minutes ago)	15 attempts against mh-mag-login-ban on ceres	Web App Attack
🇩🇪 AetherFox	2026-11-14 15:34:45 UTC · (22 minutes ago)	AetherFox VoidGuard detected: [Sat Nov 14 15:34:38.229425 2026] [security2:error] [pid 3506540:tid 3506583] [client 9.141.30.218:44564] [client 9.141.30.218] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 23.88.112.221" against ... show more AetherFox VoidGuard detected: [Sat Nov 14 15:34:38.229425 2026] [security2:error] [pid 3506540:tid 3506583] [client 9.141.30.218:44564] [client 9.141.30.218] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 23.88.112.221" against "REMOTE_ADDR" required. [file "/etc/modsecurity/AetherFox.conf"] [line "28"] [id "100051"] [msg "wp-content access blocked by AetherFox VoidGuard"] [hostname "ikosa-dragons.de"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "avh_joo3EYuEolSMkU4zqwAAAE4"] [Sat Nov 14 15:34:39.377252 2026] [security2:error] [pid 3506539:tid 3506554] [client 9.141.30.218:44176] [client 9.141.30.218] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/AetherFox.conf"] [line "235"] [id "100082"] [msg "missing User-Agent blocked by AetherFox VoidGuard"] [tag "custom-blocklist"] [tag "bot-block"] [hostname "ikosa-dragons.de"] [uri "/this_is_a_new_hello_wor ... show less	Hacking Bad Web Bot
Anonymous	2026-11-14 15:32:17 UTC · (24 minutes ago)	fail2ban jail apache-scanner: 9.141.30.218 - - [13/Nov/2026:09:27:53 -0800] "GET /xda.php HTTP/1.1" 404 58458 "-" "-" 9.141.30.218 - - [13/Nov/2026:09:27:54 -0800] "GET /reviall.php HTTP/1.1" 404 58458 "-" "-" 9.141.30.218 - - [13/Nov/2026:09:27:55 - ... show more fail2ban jail apache-scanner: 9.141.30.218 - - [13/Nov/2026:09:27:53 -0800] "GET /xda.php HTTP/1.1" 404 58458 "-" "-" 9.141.30.218 - - [13/Nov/2026:09:27:54 -0800] "GET /reviall.php HTTP/1.1" 404 58458 "-" "-" 9.141.30.218 - - [13/Nov/2026:09:27:55 -0800] "GET /1010.php HTTP/1.1" 404 58458 "-" "-" 9.141.30.218 - - [13/Nov/2026:09:27:56 -0800] "GET /tpg-contato.php HTTP/1.1" 404 58458 "-" "-" 9.141.30.218 - - [13/Nov/2026:09:27:57 -0800] "GET /wp-ainefgskk.php HTTP/1.1" 404 58458 "-" "-" 9.141.30.218 - - [13/Nov/2026:09:27:58 -0800] "GET /opsh.php HTTP/1.1" 404 58458 "-" "-" 9.141.30.218 - - [13/Nov/2026:09:27:59 -0800] "GET /wp-devirot.php HTTP/1.1" 404 58458 "-" "-" 9.141.30.218 - - [13/Nov/2026:09:28:01 -0800] "GET /red.php HTTP/1.1" 404 58458 "-" "-" 9.141.30.218 - - [13/Nov/2026:09:28:02 -0800] "GET /byp8.php HTTP/1.1" 404 58458 "-" "-" 9.141.30.218 - - [13/Nov/2026:09:28:03 -0800] "GET /xmini4.php HTTP/1.1" 404 show less	Web App Attack Port Scan
🇩🇪 Stefan Dreher	2026-11-14 15:31:41 UTC · (25 minutes ago)	9.141.30.218 - - [14/Nov/2026:16:31:40 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 153 "-" "-" 9.141.30.218 - - [14/Nov/2026:16:31:40 +0100] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 153 "-" "-" 9.141.30.218 - ... show more 9.141.30.218 - - [14/Nov/2026:16:31:40 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 153 "-" "-" 9.141.30.218 - - [14/Nov/2026:16:31:40 +0100] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 153 "-" "-" 9.141.30.218 - - [14/Nov/2026:16:31:40 +0100] "GET /admin.php/testc.php HTTP/1.1" 404 153 "-" "-" 9.141.30.218 - - [14/Nov/2026:16:31:40 +0100] "GET /admin.php/ass.php HTTP/1.1" 404 153 "-" "-" 9.141.30.218 - - [14/Nov/2026:16:31:40 +0100] "GET /kerang.php HTTP/1.1" 404 153 "-" "-" ... show less	Hacking Brute-Force
🇩🇪 Klompenzijncool	2026-11-14 15:28:46 UTC · (28 minutes ago)	Web scanning/probing blocked by Fail2Ban.	Port Scan Bad Web Bot
🇳🇱 Joop	2026-11-14 15:23:09 UTC · (33 minutes ago)	2026-11-14 16:23:07 +0200 s14 /admin.php/testc.php	Web App Attack
🇫🇷 Thibault Millant	2026-11-14 15:21:59 UTC · (35 minutes ago)	9.141.30.218 - - [14/Nov/2026:15:21:38 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" ...	Brute-Force Exploited Host SSH
Anonymous	2026-11-14 15:21:11 UTC · (35 minutes ago)	Unauthorized SSH login attempts	Brute-Force SSH
🇪🇸 pipeline.es	2026-11-14 15:20:57 UTC · (36 minutes ago)	Web scanning / probing for vulnerable paths \| URL: /098.php \| Evidence: landingow.aavv.com 9.141.30.218 - - [14/Nov/2026:16:20:01 +0100] \"GET /098.php HTTP/1.1\" 404 205 \"-\" \"-\" GEOIP_COUNTRY_CODE=DE \| ASN: MICROSOFT-CORP-MSN-AS-BLOCK \| Country: ... show more Web scanning / probing for vulnerable paths \| URL: /098.php \| Evidence: landingow.aavv.com 9.141.30.218 - - [14/Nov/2026:16:20:01 +0100] \"GET /098.php HTTP/1.1\" 404 205 \"-\" \"-\" GEOIP_COUNTRY_CODE=DE \| ASN: MICROSOFT-CORP-MSN-AS-BLOCK \| Country: DE show less	Port Scan Web App Attack

Showing 1 to 15 of 753 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇬 193.24.211.206

🇫🇷 185.207.250.74

🇮🇳 103.192.199.245

🇷🇴 2.57.122.209

🇨🇦 2607:fa49:9242:d000:9436:a8be:74e2:852e

🇪🇹 213.55.79.195

🇺🇸 195.63.13.14

🇺🇸 172.234.199.190

🇺🇸 100.29.192.38

🇧🇪 34.77.140.104

🇧🇪 34.76.27.30

🇧🇪 34.38.248.210

🇺🇸 195.63.12.248

🇨🇴 190.242.188.130

🇮🇩 180.247.45.197

🇺🇸 162.216.149.250

🇷🇺 93.159.230.28

🇫🇷 85.217.140.38

🇧🇪 34.53.147.106

🇻🇳 14.187.249.43