JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 130.93.99.225

130.93.99.225 was found in our database!

This IP was reported 78 times. Confidence of Abuse is 100%: ?

100%

ISP	INIT SYS SAS
Usage Type	Fixed Line ISP
ASN	AS25540
Hostname(s)	225-99-93-130.reverse.alphalink.fr
Domain Name	init-sys.com
Country	🇫🇷 France
City	Saint-Martin-sur-le-Pre, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 130.93.99.225

Whois 130.93.99.225

IP Abuse Reports for 130.93.99.225:

This IP address has been reported a total of 78 times from 54 distinct sources. 130.93.99.225 was first reported on October 17th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Steve	2026-10-22 16:48:44 (1 hour ago)	Attempts against SMTP/SSMTP	Brute-Force
🇺🇸 kosada.com	2026-10-22 15:24:28 (3 hours ago)	Repeated exploit attempts, for example: /.env /.env (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (iP ... show more Repeated exploit attempts, for example: /.env /.env (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1") show less	Web App Attack
🇵🇱 Budyn	2026-10-22 15:23:14 (3 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cdn.budyn.ovh \| URI: /.env \| UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1 \| BODY: [Empty / GET Request] \| HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Ipcountry":"FR","Accept":"text\/plain,text\/html,application\/xhtml+xml,application\/xml;q=0.9,\/;q=0.8","Accept-Language":"en-US,en;q=0.5","Accept-Encoding":"gzip, br","Cf-Ray":"a4e98085fe7a9efe-CDG","Cf-Connecting-Ip":" show less	Bad Web Bot Web App Attack
🇩🇪 LRob	2026-10-22 14:30:20 (3 hours ago)	Secret file probe \| method: GET \| path: /.env, /.env.local \| ua: Mozilla/5.0 (iPhone; CPU iPhone OS ... show more Secret file probe \| method: GET \| path: /.env, /.env.local \| ua: Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Saf \| 2026-10-22 14:30 UTC show less	Hacking Web App Attack
🇺🇸 LSPCCU	2026-10-22 13:58:02 (4 hours ago)	TSEC Honeypot Network report. Threat score: 82/100. Categories: DDoS Attack, Port Scan, Hacking, Bru ... show more TSEC Honeypot Network report. Threat score: 82/100. Categories: DDoS Attack, Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: h0neytr4p. Context: 130.93.99.225 classified as botnet node participating in coordinated attack campaigns (high confidence). show less	DDoS Attack Port Scan Hacking Brute-Force Web App Attack SSH
🇫🇮 as211431.net	2026-10-22 13:10:28 (5 hours ago)	Triggered Cloudflare WAF (firewallCustom) from FR. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from FR. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.env UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 WellSpring	2026-10-22 12:40:35 (5 hours ago)	env leak on wellspr.ing/.env.local — WellSpr.ing/NetSentinel civic-AI security layer	Web App Attack
🇩🇪 FeG Deutschland	2026-10-22 12:22:26 (6 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12	Exploited Host Web App Attack
🇵🇱 Budyn	2026-10-22 12:12:20 (6 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: app.goblinpot.store \| URI: /.env \| UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1 \| BODY: [Empty / GET Request] \| HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"FR","Cf-Connecting-Ip":"130.93.99.225","Cdn-Loop":"cloudflare; loops=1","Connection":"Keep-Alive","Cf-Ray":"a4e868e12df26eb7-CDG","Accept":"text\/plain,text\/html,application\/xhtml+xml,applica show less	Bad Web Bot Web App Attack
🇿🇦 conure.sh	2026-10-22 11:17:22 (7 hours ago)	csagent: score 19.8: secrets grab x2; 1 domain(s) in 4s	Web App Attack
🇩🇪 BlueWire Hosting	2026-10-22 10:36:24 (7 hours ago)	High-confidence malicious configuration/VCS probe	Web App Attack
🇵🇱 Budyn	2026-10-22 09:14:04 (9 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: app.budyn.xyz \| URI: /.env \| UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1 \| BODY: [Empty / GET Request] \| HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"FR","Cf-Connecting-Ip":"130.93.99.225","Cdn-Loop":"cloudflare; loops=1","Connection":"Keep-Alive","Cf-Ray":"a4e763be2837b940-CDG","Accept":"text\/plain,text\/html,application\/xhtml+xml,application\/ show less	Bad Web Bot Web App Attack
🇫🇷 UM3	2026-10-22 08:56:05 (9 hours ago)	Exim Auth Failed	Brute-Force
🇨🇦 Anytech	2026-10-22 08:22:45 (10 hours ago)	Blocked by Conn-Monitor: env-probing	Web App Attack Hacking
🇦🇺 Klaverstyn	2026-10-22 07:51:31 (10 hours ago)	Excessive HTTP request rate	Web App Attack

Showing 1 to 15 of 78 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.191.16.42

🇹🇼 198.235.24.71

🇭🇰 185.227.152.135

🇺🇸 174.134.45.64

🇺🇸 138.99.37.166

🇨🇦 129.222.95.253

🇫🇷 88.188.146.142

🇳🇱 77.239.124.65

🇺🇸 45.130.83.38

🇬🇧 5.252.83.204

🇮🇷 2.180.151.231

🇪🇹 196.189.16.214

🇨🇳 180.100.217.164

🇨🇳 118.121.202.149

🇩🇪 109.160.32.134

🇫🇷 54.37.68.60

🇬🇧 2.57.17.17

🇰🇷 210.96.72.179

🇺🇸 192.9.228.120

🇺🇸 170.106.154.106