93.152.221.3

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
115 reports
55 reporters · latest 56 minutes ago
ISP
TechTies Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS197170
Domain Name
tech-ties.net
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
115 from 55 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 44 🇩🇪 Germany 14 🇫🇷 France 11
Most common categories Web App Attack 91 Hacking 51 Bad Web Bot 40 Brute-Force 14 Exploited Host 7
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host Web App Attack
🇺🇸 ipblock.com
IPBlock protected site ID [3192-af][s=06]. Exploit request, vulnerability scanner.
Hacking Bad Web Bot Web App Attack
🇩🇪 Séfora Srl
crowdsecurity/http-cve-probing detected by CrowdSec
Web App Attack
🇺🇸 SX Communications
Web vulnerability scanning / probing from 93.152.221.3: automated requests for CMS admin paths, login endpoints, xmlrpc, and common scanner fingerprints over HTTPS. 1 hits; paths: /wp-json/batch/v1.
Port Scan Hacking Web App Attack
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇺🇦 URAN Publishing Service
[08/Nov/2026:04:32:16 +0200] -- 93.152.221.3 Ban reason: Scanner [CMS_GENERIC] | Request: POST /wp-json/batch/v1 HTTP/1.1
Bad Web Bot Web App Attack
🇨🇦 1gz
Triggered Cloudflare WAF (firewallManaged) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-json/batch/v1 UA: Mozilla/5.0 (compatible) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
Bad Web Bot
🇫🇷 Tilellit.PRO
Malicious web traffic detected by CrowdSec
Hacking
🇺🇸 SX Communications
Blocked abusive HTTP application-layer DoS / botnet traffic from 93.152.221.3: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
DDoS Attack Bad Web Bot Exploited Host
🇺🇸 antlac1
crowdsecurity/http-cve-probing
Brute-Force Web App Attack
🇮🇩 securejdprop
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 17).
Hacking Web App Attack
🇮🇩 origrata
[OGWAF] bad_reputation attack blocked | severity: high | POST /wp-json/batch/v1 | UA: Mozilla/5.0 (compatible)
Web App Attack
🇺🇸 entangled_mongoose
Probed /wp-json/batch/v1.
Web App Attack
🇺🇸 ipblock.com
IPBlock protected site ID [955-wdo][s=02]. Exploit request, vulnerability scanner.
Hacking Bad Web Bot Web App Attack
Anonymous
WordPress login / xmlrpc probing across multiple sites
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 185.216.145.171
🇺🇸 172.237.137.146
🇳🇱 200.138.46.182
🇬🇧 193.163.125.235
🇧🇹 119.2.106.157
🇫🇷 91.231.89.27
🇳🇱 64.205.72.178
🇧🇪 34.77.175.43
🇸🇪 2.70.48.45
🇧🇷 190.115.84.25
🇨🇿 185.216.35.150
🇫🇮 147.185.133.56
🇮🇹 95.230.249.134
🇺🇸 64.67.50.217
🇮🇳 61.12.84.172
🇪🇸 31.24.154.31
🇺🇸 13.140.45.164
🇯🇵 180.196.58.117
🇰🇷 175.209.156.146
🇺🇸 152.39.155.157
feedback