JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 208.84.100.214

208.84.100.214 was found in our database!

This IP was reported 134 times. Confidence of Abuse is 100%: ?

100%

ISP	Fro LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS22295
Domain Name	fro.email
Country	🇺🇸 United States of America
City	Kansas City, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 208.84.100.214

Whois 208.84.100.214

IP Abuse Reports for 208.84.100.214:

This IP address has been reported a total of 134 times from 79 distinct sources. 208.84.100.214 was first reported on March 21st 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-05-21 12:54:49 (3 weeks ago)	Attempted access to sensitive endpoint (/.env) detected. Automated scan or unauthorized probing.	Web App Attack
🇳🇱 Site.eu	2026-05-21 11:16:22 (3 weeks ago)	Excessive multi-domain requests	Brute-Force
🇺🇦 URAN Publishing Service	2026-05-21 10:51:21 (3 weeks ago)	208.84.100.214 - - [21/May/2026:13:51:21 +0300] "GET /.env HTTP/1.1" 404 486 "-" "Mozilla/5.0 (Windo ... show more 208.84.100.214 - - [21/May/2026:13:51:21 +0300] "GET /.env HTTP/1.1" 404 486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 208.84.100.214 - - [21/May/2026:13:51:21 +0300] "GET /backend/.env HTTP/1.1" 404 486 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0" ... show less	Web App Attack
🇩🇪 FeG Deutschland	2026-05-21 08:51:13 (3 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇬🇧 sc user	2026-05-21 05:55:40 (3 weeks ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan
🇦🇹 Pingger Shikkoken	2026-05-21 02:05:37 (3 weeks ago)	2026-05-21T02:05:37+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2026-05-21T02:05:37+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=208.84.100.214 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=59511 DF PROTO=TCP SPT=35060 DPT=80 WINDOW=42340 RES=0x00 SYN URGP=0 2026-05-21T02:05:37+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=208.84.100.214 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=61971 DF PROTO=TCP SPT=3094 DPT=443 WINDOW=42340 RES=0x00 SYN URGP=0 2026-05-21T02:05:38+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=208.84.100.214 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=59512 DF PROTO=TCP SPT=35060 DPT=80 WINDOW=42340 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
🇺🇦 URAN Publishing Service	2026-05-21 00:49:37 (3 weeks ago)	208.84.100.214 - - [21/May/2026:03:49:36 +0300] "GET /app/.env HTTP/1.1" 404 707 "-" "Mozilla/5.0 (M ... show more 208.84.100.214 - - [21/May/2026:03:49:36 +0300] "GET /app/.env HTTP/1.1" 404 707 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:150.0) Gecko/20100101 Firefox/150.0" 208.84.100.214 - - [21/May/2026:03:49:36 +0300] "GET /backend/.env HTTP/1.1" 404 707 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0" ... show less	Web App Attack
🇩🇪 SwinT	2026-05-20 22:00:05 (3 weeks ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇫🇷 dynamix	2026-05-20 19:45:37 (3 weeks ago)	Multiple WAF Violations	Web App Attack
🇲🇾 Rizzy	2026-05-20 17:05:56 (3 weeks ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇬🇧 consul.to	2026-05-20 16:35:54 (3 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 masterguru	2026-05-20 16:29:26 (3 weeks ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 208.84.100.214 (US/United States/-): ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 208.84.100.214 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
Anonymous	2026-05-20 15:10:19 (3 weeks ago)	(caddyscan) Scanner path probe from 208.84.100.214 (US/United States/-): 5 in the last 3600 secs; Po ... show more (caddyscan) Scanner path probe from 208.84.100.214 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 208.84.100.214 - - [20/May/2026:15:10:16 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 208.84.100.214 - - [20/May/2026:15:10:17 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 208.84.100.214 - - [20/May/2026:15:10:17 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 208.84.100.214 - - [20/May/2026:15:10:17 +0000] "GET /.aws/credentials HTTP/1.1" [REDACTED] 200 2627 208.84.100.214 - - [20/May/2026:15:10:17 +0000] "GET /backend/.env HTTP/1.1" show less	Port Scan
🇨🇭 4server	2026-05-20 14:53:29 (3 weeks ago)	[WedMay2016:53:26.1405432026][security2:error][pid3068251:tid3068276][client208.84.100.214:0]ModSecu ... show more [WedMay2016:53:26.1405432026][security2:error][pid3068251:tid3068276][client208.84.100.214:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"cpcontacts.mio-ip.ch\"][uri\"/.env.production.copy\"][unique_id\"ag3K5tkHCY4Y_PIgvwvDPQAAAFY\"] show less	Hacking Web App Attack
🇩🇪 Dennis	2026-05-20 14:29:58 (3 weeks ago)	208.84.100.214 has been banned for triggering http-sensitive-files (5 events over 3.990957934s).	Brute-Force Web App Attack

Showing 1 to 15 of 134 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 36.80.185.124

🇺🇸 173.194.92.185

🇭🇰 165.154.1.18

🇨🇳 106.75.156.189

🇭🇰 103.244.88.62

🇧🇬 78.128.114.58

🇩🇪 69.5.169.245

🇺🇸 64.62.156.100

🇷🇴 2.57.121.25

🇺🇸 206.189.168.209

🇩🇪 202.61.236.85

🇫🇷 193.248.217.118

🇬🇧 161.35.43.242

🇺🇸 138.122.193.39

🇺🇸 45.3.62.185

🇺🇸 193.36.224.171

🇩🇪 94.26.106.80

🇬🇧 74.125.40.147

🇮🇳 59.88.100.68

🇰🇪 41.60.235.30