AbuseIPDB » 213.134.31.56

213.134.31.56 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 0%: ?

ISP	Podaon SIA
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	213-134-31-56.netherlands.vps.ac
Domain Name	podaon.com
Country	Netherlands (Kingdom of the)
City	Meppel, Drenthe

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 213.134.31.56

Whois 213.134.31.56

IP Abuse Reports for 213.134.31.56:

This IP address has been reported a total of 20 times from 16 distinct sources. 213.134.31.56 was first reported on March 14th 2024, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Savvii	2024-04-13 13:52:48 (5 months ago)	10 attempts against mh_ha-misc-ban on azuki	Brute-Force Web App Attack
Anonymous	2024-04-13 13:03:39 (5 months ago)	Aggressive web scan	Web App Attack
COMAITE	2024-04-12 23:12:00 (5 months ago)	213.134.31.56 - - [13/Apr/2024:01:12:41 +0200] "GET /test.txt%0d%0aSet-Cookie:CRLFInjection=Test%0d% ... show more213.134.31.56 - - [13/Apr/2024:01:12:41 +0200] "GET /test.txt%0d%0aSet-Cookie:CRLFInjection=Test%0d%0aLocation:%20interact.sh%0d%0aX-XSS-Protection:0 HTTP/1.1" 404 144733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 Edg/112.0.1722.58" show less	Web App Attack
Anonymous	2024-04-12 12:37:00 (5 months ago)	Hacker	Hacking Web App Attack
VHosting	2024-04-11 21:54:10 (5 months ago)	Attempt from 213.134.31.56, reason: TooManyBadRequests	DDoS Attack Bad Web Bot
TPI-Abuse	2024-04-11 18:07:16 (5 months ago)	(mod_security) mod_security (id:211070) triggered by 213.134.31.56 (213-134-31-56.netherlands.vps.ac ... show more(mod_security) mod_security (id:211070) triggered by 213.134.31.56 (213-134-31-56.netherlands.vps.ac): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 11 14:07:13.122639 2024] [security2:error] [pid 13288] [client 213.134.31.56:56374] [client 213.134.31.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "," at REQUEST_HEADERS:Transfer-Encoding. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "38"] [id "211070"] [rev "1"] [msg "COMODO WAF: HTTP Request Smuggling Attack.\|\|webdisk.coretherapyassoc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "webdisk.coretherapyassoc.com"] [uri "/tmui/login.jsp"] [unique_id "Zhgm0UBWRUEvdLsiLxkIngAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
security.rdmc.fr	2024-04-11 08:27:15 (5 months ago)	Port Scan Attack proto:TCP src:54284 dst:23	Port Scan
PoSitRon	2024-04-11 06:36:00 (5 months ago)	26 scans and vulnerabilities attempted .	Email Spam Port Scan Hacking Web App Attack
Savvii	2024-04-10 19:25:48 (5 months ago)	20 attempts against mh-misbehave-ban on shine	Brute-Force Bad Web Bot Web App Attack
Savvii	2024-04-10 19:10:00 (5 months ago)	10 attempts against mh_ha-misc-ban on shine	Brute-Force Web App Attack
Anonymous	2024-04-10 16:43:35 (5 months ago)	Aggressive web scan	Web App Attack
ghostwarriors	2024-03-17 05:50:02 (6 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Hirte	2024-03-17 05:21:57 (6 months ago)	SS5: Web Attack GET //wp-login.php	Web Spam Hacking Bad Web Bot Web App Attack
backslash	2024-03-17 02:20:04 (6 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
Hirte	2024-03-17 02:18:07 (6 months ago)	SS5: Web Attack GET /wp-includes/css/modules.php	Web Spam Hacking Bad Web Bot Web App Attack