JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.130.132.133

94.130.132.133 was found in our database!

This IP was reported 79 times. Confidence of Abuse is 28%: ?

28%

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	web1001.rohde-stark.de
Domain Name	hetzner.com
Country	🇩🇪 Germany
City	Falkenstein, Saxony

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.130.132.133

Whois 94.130.132.133

IP Abuse Reports for 94.130.132.133:

This IP address has been reported a total of 79 times from 5 distinct sources. 94.130.132.133 was first reported on November 22nd 2021, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-13 03:23:32 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 94.130.132.133 (web1001.rohde-stark.de): 1 in t ... show more (mod_security) mod_security (id:210492) triggered by 94.130.132.133 (web1001.rohde-stark.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 23:23:24.330216 2026] [security2:error] [pid 28269:tid 28288] [client 94.130.132.133:45074] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wpe.uk.com"] [uri "/wp-content/plugins/fs-poster/composer.json"] [unique_id "as2kLANZQmVG3uwLTu1kmAAAANA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-13 02:20:37 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 94.130.132.133 (web1001.rohde-stark.de): 1 in t ... show more (mod_security) mod_security (id:210492) triggered by 94.130.132.133 (web1001.rohde-stark.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 22:20:33.696375 2026] [security2:error] [pid 32594:tid 32594] [client 94.130.132.133:58178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "unified-dispatch.com"] [uri "/wp-content/plugins/fs-poster/composer.json"] [unique_id "as2VcZcWmRXFEXdxTIJ2FAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-09 10:59:02 (1 week ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-10-09 07:54:19 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 94.130.132.133 (web1001.rohde-stark.de): 1 in t ... show more (mod_security) mod_security (id:210492) triggered by 94.130.132.133 (web1001.rohde-stark.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 03:54:11.457601 2026] [security2:error] [pid 7969:tid 7969] [client 94.130.132.133:38722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carolinafootprints.com"] [uri "/wp-content/plugins/fs-poster/composer.json"] [unique_id "asido2UQIjhni9js-g3THAAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 sssrit	2026-10-08 06:07:58 (1 week ago)	94.130.132.133 - - [08/Oct/2026:08:07:56 +0200] "GET /wp-content/plugins/phppoet-checkout-fields/rea ... show more 94.130.132.133 - - [08/Oct/2026:08:07:56 +0200] "GET /wp-content/plugins/phppoet-checkout-fields/readme.txt HTTP/2.0" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.3" 94.130.132.133 - - [08/Oct/2026:08:07:57 +0200] "GET /wp-admin/admin-ajax.php?action=pcfme_checkout_file_upload HTTP/2.0" 400 1 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.3" 94.130.132.133 - - [08/Oct/2026:08:07:58 +0200] "POST /wp-admin/admin-ajax.php HTTP/2.0" 400 1 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.3" ... show less	Web App Attack
🇩🇪 FeG Deutschland	2026-10-08 05:59:14 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1248	Exploited Host Web App Attack
🇩🇪 ISPLtd	2021-12-15 09:47:33 (4 years ago)	Dec 15 10:39:18 SRC=94.130.132.133 PROTO=TCP SPT=48512 DPT=7333 Dec 15 10:39:19 SRC=94.130.132.133 ... show more Dec 15 10:39:18 SRC=94.130.132.133 PROTO=TCP SPT=48512 DPT=7333 Dec 15 10:39:19 SRC=94.130.132.133 PROTO=TCP SPT=48512 DPT=7333 Dec 15 10:39:21 SRC=94.130.132.133 PROTO=TCP SPT=48512 DPT=7333 ... show less	Port Scan
🇩🇪 ISPLtd	2021-12-15 03:48:22 (4 years ago)	Dec 15 04:47:52 SRC=94.130.132.133 PROTO=TCP SPT=45088 DPT=8698 Dec 15 04:47:53 SRC=94.130.132.133 ... show more Dec 15 04:47:52 SRC=94.130.132.133 PROTO=TCP SPT=45088 DPT=8698 Dec 15 04:47:53 SRC=94.130.132.133 PROTO=TCP SPT=45088 DPT=8698 Dec 15 04:47:55 SRC=94.130.132.133 PROTO=TCP SPT=45088 DPT=8698 ... show less	Port Scan
🇩🇪 ISPLtd	2021-12-14 21:52:28 (4 years ago)	Dec 14 22:42:32 SRC=94.130.132.133 PROTO=TCP SPT=48066 DPT=10598 Dec 14 22:42:33 SRC=94.130.132.133 ... show more Dec 14 22:42:32 SRC=94.130.132.133 PROTO=TCP SPT=48066 DPT=10598 Dec 14 22:42:33 SRC=94.130.132.133 PROTO=TCP SPT=48066 DPT=10598 Dec 14 22:42:35 SRC=94.130.132.133 PROTO=TCP SPT=48066 DPT=10598 WIND ... show less	Port Scan
🇩🇪 ISPLtd	2021-12-14 09:20:56 (4 years ago)	Dec 14 10:12:06 SRC=94.130.132.133 PROTO=TCP SPT=51572 DPT=8698 Dec 14 10:12:07 SRC=94.130.132.133 ... show more Dec 14 10:12:06 SRC=94.130.132.133 PROTO=TCP SPT=51572 DPT=8698 Dec 14 10:12:07 SRC=94.130.132.133 PROTO=TCP SPT=51572 DPT=8698 Dec 14 10:12:09 SRC=94.130.132.133 PROTO=TCP SPT=51572 DPT=8698 ... show less	Port Scan
🇩🇪 ISPLtd	2021-12-14 03:55:33 (4 years ago)	Dec 14 04:51:59 SRC=94.130.132.133 PROTO=TCP SPT=38734 DPT=10598 Dec 14 04:52:00 SRC=94.130.132.133 ... show more Dec 14 04:51:59 SRC=94.130.132.133 PROTO=TCP SPT=38734 DPT=10598 Dec 14 04:52:00 SRC=94.130.132.133 PROTO=TCP SPT=38734 DPT=10598 Dec 14 04:52:02 SRC=94.130.132.133 PROTO=TCP SPT=38734 DPT=10598 ... show less	Port Scan
🇩🇪 ISPLtd	2021-12-14 00:48:15 (4 years ago)	Dec 14 01:47:31 SRC=94.130.132.133 PROTO=TCP SPT=57014 DPT=10598 Dec 14 01:47:32 SRC=94.130.132.133 ... show more Dec 14 01:47:31 SRC=94.130.132.133 PROTO=TCP SPT=57014 DPT=10598 Dec 14 01:47:32 SRC=94.130.132.133 PROTO=TCP SPT=57014 DPT=10598 Dec 14 01:47:34 SRC=94.130.132.133 PROTO=TCP SPT=57014 DPT=10598 WIND ... show less	Port Scan
🇩🇪 ISPLtd	2021-12-13 16:54:02 (4 years ago)	Dec 13 17:47:32 SRC=94.130.132.133 PROTO=TCP SPT=41038 DPT=10598 Dec 13 17:47:33 SRC=94.130.132.133 ... show more Dec 13 17:47:32 SRC=94.130.132.133 PROTO=TCP SPT=41038 DPT=10598 Dec 13 17:47:33 SRC=94.130.132.133 PROTO=TCP SPT=41038 DPT=10598 Dec 13 17:47:35 SRC=94.130.132.133 PROTO=TCP SPT=41038 DPT=10598 ... show less	Port Scan
🇩🇪 ISPLtd	2021-12-13 14:00:31 (4 years ago)	Dec 13 15:00:02 SRC=94.130.132.133 PROTO=TCP SPT=39734 DPT=10598 Dec 13 15:00:03 SRC=94.130.132.133 ... show more Dec 13 15:00:02 SRC=94.130.132.133 PROTO=TCP SPT=39734 DPT=10598 Dec 13 15:00:03 SRC=94.130.132.133 PROTO=TCP SPT=39734 DPT=10598 Dec 13 15:00:05 SRC=94.130.132.133 PROTO=TCP SPT=39734 DPT=10598 WIND ... show less	Port Scan
🇩🇪 ISPLtd	2021-12-13 07:40:23 (4 years ago)	Dec 13 08:35:31 SRC=94.130.132.133 PROTO=TCP SPT=50024 DPT=10598 Dec 13 08:35:32 SRC=94.130.132.133 ... show more Dec 13 08:35:31 SRC=94.130.132.133 PROTO=TCP SPT=50024 DPT=10598 Dec 13 08:35:32 SRC=94.130.132.133 PROTO=TCP SPT=50024 DPT=10598 Dec 13 08:35:34 SRC=94.130.132.133 PROTO=TCP SPT=50024 DPT=10598 ... show less	Port Scan

Showing 1 to 15 of 79 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 185.242.235.139

🇩🇪 35.198.133.106

🇷🇺 188.191.246.94

🇳🇱 109.160.32.136

🇫🇷 85.217.140.26

🇳🇱 77.83.39.32

🇨🇴 185.231.184.49

🇹🇷 176.236.127.114

🇮🇳 168.144.95.71

🇨🇳 121.11.160.75

🇨🇳 81.68.238.92

🇱🇹 62.60.130.253

🇺🇸 216.25.89.147

🇷🇺 188.225.106.205

🇺🇸 157.245.85.173

🇺🇸 147.185.132.54

🇸🇬 136.110.49.251

🇲🇾 47.250.178.80

🇧🇬 46.55.134.253

🇨🇱 34.176.69.175