JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 217.113.30.132

217.113.30.132

Activity Trending Down

31 reports found in our database

28% ▼ ▼ ▼ Elevated

Abuse confidence score ?

ISP

LIR LLC

Usage Type

Fixed Line ISP

ASN

AS42991

Domain Name

lir.am

Country

🇦🇲 Armenia

City

Yerevan, Yerevan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 217.113.30.132:

This IP address has been reported a total of 31 times from 24 distinct sources. 217.113.30.132 was first reported on December 20th 2024, and the most recent report was 1 week ago. In the last 60 days, the top reporter locations were: Germany with 4 reports; United States of America with 3 reports; Spain with 1 report. The most common categories in these recent reports were: Hacking 7 times; Web App Attack 5 times; Bad Web Bot 4 times; Port Scan 4 times; Brute-Force 3 times; Other 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-02 21:15:26 (1 week ago)	Large-scale coordinated botnet (3M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (3M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]) employed by Angara Technologies Group \| Attack Signature Blocked: /wishlist/index/add/product/11134/form_key/T7MVV7TjHCsoVRjZ/ \| UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_3 like Mac OS X) AppleWebKit/536.2 (KHTML, like Gecko) CriOS/51.0.892.0 Mobile/56W823 Safari/536.2 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-08-04 10:27:53 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 IP Analyzer	2026-08-02 23:00:21 (1 month ago)	Unauthorized connection attempt from IP address 217.113.30.132 on Port 445(SMB)	Port Scan
🇫🇷 Entalpi.net	2026-07-25 03:16:56 (1 month ago)	Tried to hit sensible closed port commonly used in attacks	Port Scan Hacking
🇺🇸 drewf.ink	2026-07-25 01:50:27 (1 month ago)	[01:50] Triggered SMB honeypot. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1. ... show more [01:50] Triggered SMB honeypot. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12 show less	Hacking Exploited Host
🇩🇪 Luhte	2026-07-24 21:45:04 (1 month ago)	Unsolicited TCP connection from 217.113.30.132 to port 0 at 2026-07-24T21:45:04Z. Source IP complete ... show more Unsolicited TCP connection from 217.113.30.132 to port 0 at 2026-07-24T21:45:04Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇩🇪 Vegascosmetics	2026-07-23 12:29:18 (1 month ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: DEEP ATTACK: Recursive currentUrl nesting detected show less	Hacking Exploited Host Web App Attack
🇩🇪 EGP Abuse Dept	2026-07-18 00:40:27 (1 month ago)	Scanning for port/service exploits on tpc-027.mach3builders.nl	Port Scan Hacking
🇪🇸 masterguru	2026-07-17 14:52:48 (1 month ago)	(xmlrpc) Failed xmlrpc access from 217.113.30.132 (AM/Armenia/-): 5 in the last 3600 secs (0-122)	Hacking
🇺🇸 TPI-Abuse	2026-07-17 14:21:27 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 217.113.30.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 217.113.30.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 10:21:20.720610 2026] [security2:error] [pid 936069:tid 936069] [client 217.113.30.132:59152] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 217.113.30.132 (+1 hits since last alert)\|walterceron.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "walterceron.com"] [uri "/xmlrpc.php"] [unique_id "alo6YL5QD68bedmJhyIn2QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 dbmwebdesign	2026-07-17 13:10:28 (1 month ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 11:57:49 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 217.113.30.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 217.113.30.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 07:57:45.045953 2026] [security2:error] [pid 17062:tid 17062] [client 217.113.30.132:52258] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 217.113.30.132 (+1 hits since last alert)\|georgegourmet.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "georgegourmet.com"] [uri "/xmlrpc.php"] [unique_id "aloYuQf-iVBBp6RVVp3tFQAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-07 02:08:59 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇬🇧 PeravixGroup	2026-05-17 16:14:16 (3 months ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇩🇪 Honeypot-EU-Fru	2026-05-08 17:16:31 (4 months ago)	1778260590 - 05/08/2026 19:16:30 Host: 217.113.30.132/217.113.30.132 Port: 445 TCP Blocked ...	Port Scan

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 201.152.201.19

🇿🇼 197.155.225.93

🇸🇬 162.158.189.207

🇨🇳 101.126.71.100

🇸🇬 45.32.111.35

🇰🇷 43.128.156.124

🇺🇸 34.44.184.98

🇺🇸 18.216.114.83

🇲🇾 2a02:4780:5e:3b98::1

🇺🇸 216.180.246.97

🇧🇷 177.192.0.133

🇧🇷 177.129.48.103

🇷🇺 158.46.23.126

🇩🇪 92.208.29.249

🇺🇸 72.219.214.226

🇺🇸 64.62.156.85

🇩🇪 49.51.132.100

🇧🇷 43.135.211.148

🇺🇸 34.66.47.24

🇧🇪 34.62.2.158