JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 108.162.216.213

108.162.216.213 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 108.162.216.213 is an IP address from within our whitelist belonging to the subnet 108.162.192.0/18, which we identify as: "Cloudflare Reverse Proxy".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 108.162.216.213

Whois 108.162.216.213

IP Abuse Reports for 108.162.216.213:

This IP address has been reported a total of 33 times from 20 distinct sources. 108.162.216.213 was first reported on April 29th 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 pinguin	2026-06-15 07:24:41 (1 week ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: LOG Protocol: HTTP/2 (POST method) ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: LOG Protocol: HTTP/2 (POST method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇹🇷 muratkaya665	2026-05-29 17:00:00 (3 weeks ago)	IPS Attack Blocked by server.mura****.com.tr Fortigate-80E. Attack Name: Censys.io.Scanner. Dest P ... show more IPS Attack Blocked by server.mura****.com.tr Fortigate-80E. Attack Name: Censys.io.Scanner. Dest Port: 80. Service: HTTP. Message: tools: Censys.io.Scanner. show less	Hacking
🇦🇱 router.al	2026-05-27 02:27:41 (4 weeks ago)	05/27/2026-02:27:41.670887 108.162.216.213 Protocol: 6 ET SCAN WordPress Scanner Performing Multiple ... show more 05/27/2026-02:27:41.670887 108.162.216.213 Protocol: 6 ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML show less	Hacking
🇩🇪 Blexyel	2026-05-12 12:25:17 (1 month ago)	108.162.216.213 - - [12/May/2026:14:25:17 +0200] "GET /wp-includes/theme-compat/wp-login.php HTTP/1. ... show more 108.162.216.213 - - [12/May/2026:14:25:17 +0200] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 404 153 "-" "-" "pingusmc.org" ... show less	Brute-Force Web App Attack
Anonymous	2025-12-11 20:06:45 (6 months ago)	[Thu Dec 11 21:06:36.684184 2025] [authz_core:error] [pid 16321] [client 108.162.216.213:10677] AH01 ... show more [Thu Dec 11 21:06:36.684184 2025] [authz_core:error] [pid 16321] [client 108.162.216.213:10677] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://www.bing.com/ [Thu Dec 11 21:06:39.659412 2025] [authz_core:error] [pid 16321] [client 108.162.216.213:10677] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://www.yahoo.com/ [Thu Dec 11 21:06:44.428984 2025] [authz_core:error] [pid 16321] [client 108.162.216.213:10677] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://www.google.de/ ... show less	Web App Attack
🇫🇷 Campus France	2025-12-11 15:22:12 (6 months ago)	[Thu Dec 11 02:10:49.137603 2025] [php:error] [pid 3034347] [client 108.162.216.213:9385] script '/v ... show more [Thu Dec 11 02:10:49.137603 2025] [php:error] [pid 3034347] [client 108.162.216.213:9385] script '/var/www/html/radio.php' not found or unable to stat, referer: https://duckduckgo.com/ [Thu Dec 11 04:53:03.137041 2025] [php:error] [pid 3072597] [client 108.162.216.213:9511] script '/var/www/html/buy.php' not found or unable to stat, referer: https://duckduckgo.com/ [Thu Dec 11 04:53:04.765540 2025] [php:error] [pid 3072597] [client 108.162.216.213:9511] script '/var/www/html/chosen.php' not found or unable to stat, referer: https://www.bing.com/ [Thu Dec 11 16:21:50.582339 2025] [php:error] [pid 3268901] [client 108.162.216.213:9881] script '/var/www/html/yas.php' not found or unable to stat, referer: https://www.google.de/ [Thu Dec 11 16:22:12.348919 2025] [php:error] [pid 3268349] [client 108.162.216.213:12558] script '/var/www/html/info.php' not found or unable to stat, referer: https://www.yahoo.com/ ... show less	Brute-Force Web App Attack
Anonymous	2025-12-09 16:16:04 (6 months ago)	[Tue Dec 09 17:15:56.332373 2025] [authz_core:error] [pid 25214] [client 108.162.216.213:10713] AH01 ... show more [Tue Dec 09 17:15:56.332373 2025] [authz_core:error] [pid 25214] [client 108.162.216.213:10713] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://www.google.co.uk/ [Tue Dec 09 17:15:56.621584 2025] [authz_core:error] [pid 25214] [client 108.162.216.213:10713] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://www.bing.com/ [Tue Dec 09 17:16:03.290610 2025] [authz_core:error] [pid 25296] [client 108.162.216.213:11477] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://www.google.co.uk/ ... show less	Web App Attack
🇺🇸 Heath Smith	2025-09-06 09:23:36 (9 months ago)	108.162.216.213 - - [06/Sep/2025:04:23:33 -0500] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 608 " ... show more 108.162.216.213 - - [06/Sep/2025:04:23:33 -0500] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 608 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 108.162.216.213 - - [06/Sep/2025:04:23:34 -0500] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 612 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 108.162.216.213 - - [06/Sep/2025:04:23:35 -0500] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 636 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" ... show less	Brute-Force
🇪🇸 el-brujo	2025-09-03 13:18:53 (9 months ago)	03/Sep/2025:15:18:52.521159 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 03/Sep/2025:15:18:52.521159 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 108.162.216.213] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1056"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".cs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "el-hacker.org"] [uri "/Cursos/Creaci\\\\xc3\\\\xb ... show less	Hacking Web App Attack
🇪🇸 el-brujo	2025-08-29 16:03:58 (9 months ago)	29/Aug/2025:18:03:57.537814 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 29/Aug/2025:18:03:57.537814 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 108.162.216.213] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1056"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".com"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "el-hacker.org"] [uri "/Cursos/Pentesting_101_The ... show less	Hacking Web App Attack
🇪🇸 Hugopvigo	2025-06-01 16:18:33 (1 year ago)	108.162.216.213 - - [01/Jun/2025:07:19:14 +0200] "GET /es/categoria-producto/paises/oman/?add-to-car ... show more 108.162.216.213 - - [01/Jun/2025:07:19:14 +0200] "GET /es/categoria-producto/paises/oman/?add-to-cart=6578 HTTP/1.1" 302 5044 "-" "Scrapy/2.11.2 (+https://scrapy.org)" 108.162.216.213 - - [01/Jun/2025:07:19:50 +0200] "GET /es/producto/senegal-3-gb-30-dias/ HTTP/1.1" 200 47191 "-" "Scrapy/2.11.2 (+https://scrapy.org)" 108.162.216.213 - - [01/Jun/2025:07:19:50 +0200] "GET /es/categoria-producto/paises/santa-lucia/?add-to-cart=1473 HTTP/1.1" 302 1185 "-" "Scrapy/2.11.2 (+https://scrapy.org)" 108.162.216.213 - - [01/Jun/2025:07:21:59 +0200] "GET /es/producto/chipre-10-gb-30-dias/?add-to-cart=872 HTTP/1.1" 302 5044 "-" "Scrapy/2.11.2 (+https://scrapy.org)" ... show less	Hacking Brute-Force Web App Attack SSH
🇺🇸 TPI-Abuse	2025-06-01 01:26:35 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 108.162.216.213 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 108.162.216.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 31 21:26:28.101389 2025] [security2:error] [pid 1827401:tid 1827401] [client 108.162.216.213:27944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.perl-photo.com"] [uri "/.git/config"] [unique_id "aDusRGrNQIZ6XLwxtC9eYgAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 bitpanda	2025-04-20 00:01:03 (1 year ago)	Malicious activity detected by Imunify360	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-04-15 05:47:11 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 108.162.216.213 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 108.162.216.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 15 01:47:06.968407 2025] [security2:error] [pid 186047:tid 186047] [client 108.162.216.213:51112] [client 108.162.216.213] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 207.38.87.177 (0+1 hits since last alert)\|virtualizecr.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "virtualizecr.net"] [uri "/xmlrpc.php"] [unique_id "Z_3y2pKTEJIE1lSdD-FKuQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Study Bitcoin 🤗	2025-04-03 02:10:39 (1 year ago)	Port probe to tcp/443 (https) [srv125]	Port Scan Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 151.252.84.225

🇨🇳 123.160.234.43

🇦🇪 87.200.146.124

🇳🇱 45.148.10.141

🇯🇵 8.216.9.117

🇷🇴 2a02:2f00:330c:cf00:8ce9:8b36:25e7:8920

🇧🇷 190.89.137.155

🇿🇦 185.132.186.90

🇭🇰 154.221.19.138

🇺🇸 74.82.47.55

🇺🇸 65.49.1.142

🇺🇸 45.33.105.76

🇨🇷 186.177.88.90

🇧🇷 177.130.149.83

🇭🇰 152.32.225.11

🇳🇱 91.92.40.52

🇳🇱 91.92.40.45

🇲🇩 45.15.227.120

🇺🇸 195.184.76.39

🇮🇳 182.95.103.74