JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.163.192.105

213.163.192.105 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	UpCloud Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS202053
Hostname(s)	213-163-192-105.sg-sin1.upcloud.host
Domain Name	upcloud.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.163.192.105

Whois 213.163.192.105

IP Abuse Reports for 213.163.192.105:

This IP address has been reported a total of 37 times from 36 distinct sources. 213.163.192.105 was first reported on July 21st 2026, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 pndsec	2026-07-23 08:38:00 (19 hours ago)	Automated web reconnaissance observed on 2026-07-22 beginning at approximately 19:18 UTC. The source ... show more Automated web reconnaissance observed on 2026-07-22 beginning at approximately 19:18 UTC. The source IP made approximately 128 HTTP GET requests attempting to access sensitive files and common vulnerable endpoints, including /.env, Laravel configuration files, GitHub-related files, application logs, and other known disclosure targets. Sample logs: 213.163.192.105 - - [22/Jul/2026:19:18:28 +0000] "GET /.github/actions/env HTTP/1.1" 404 36250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 213.163.192.105 - - [22/Jul/2026:19:18:28 +0000] "GET /codeship.env HTTP/1.1" 404 36243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" show less	Web App Attack
🇩🇪 ghostwarriors	2026-07-23 06:50:14 (21 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-23 06:19:48 (22 hours ago)	[Thu Jul 23 06:19:44.386703 2026] [php:error] [pid 3821106] [client 213.163.192.105:41122] script '/ ... show more [Thu Jul 23 06:19:44.386703 2026] [php:error] [pid 3821106] [client 213.163.192.105:41122] script '/var/www/vhosts/mcdermit.org/BOISD/configuration.php' not found or unable to stat [Thu Jul 23 06:19:44.610172 2026] [php:error] [pid 3824734] [client 213.163.192.105:38877] script '/var/www/vhosts/mcdermit.org/BOISD/p.php' not found or unable to stat [Thu Jul 23 06:19:44.807680 2026] [php:error] [pid 3821086] [client 213.163.192.105:23620] script '/var/www/vhosts/mcdermit.org/BOISD/info.php' not found or unable to stat [Thu Jul 23 06:19:47.774291 2026] [php:error] [pid 3825121] [client 213.163.192.105:23631] script '/var/www/vhosts/mcdermit.org/BOISD/wp-config.php' not found or unable to stat [Thu Jul 23 06:19:48.247340 2026] [php:error] [pid 3825119] [client 213.163.192.105:23618] script '/var/www/vhosts/mcdermit.org/BOISD/local.php' not found or unable to stat ... show less	Brute-Force
🇮🇳 evicky2002	2026-07-23 06:00:00 (22 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇬🇧 blik2108	2026-07-23 04:50:04 (23 hours ago)	beta.sleepylizard.com:80 213.163.192.105 - - [23/Jul/2026:05:50:00 +0100] "GET /wp-config.php.bak HT ... show more beta.sleepylizard.com:80 213.163.192.105 - - [23/Jul/2026:05:50:00 +0100] "GET /wp-config.php.bak HTTP/1.1" 301 601 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" beta.sleepylizard.com:80 213.163.192.105 - - [23/Jul/2026:05:50:00 +0100] "GET /wp-config.php HTTP/1.1" 301 593 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" beta.sleepylizard.com:80 213.163.192.105 - - [23/Jul/2026:05:50:03 +0100] "GET /configuration.php HTTP/1.1" 301 601 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:125.0) Gecko/20100101 Firefox/125.0" beta.sleepylizard.com:80 213.163.192.105 - - [23/Jul/2026:05:50:04 +0100] "GET /config/database.php HTTP/1.1" 301 605 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" beta.sleepylizard.com:80 213.163.192.105 - - [23/Jul/2026:05:50:04 +0100] "GET /config.json HTTP/1.1" 301 589 "-" ... show less	Brute-Force
🇫🇷 masterguru	2026-07-23 04:43:55 (23 hours ago)	Host header is a numeric IP address. Pattern match "^ (920350-135)	Hacking Bad Web Bot
Anonymous	2026-07-23 03:26:46 (1 day ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇩🇪 langenkamp-media	2026-07-23 03:20:50 (1 day ago)	Fail2Ban: Banned from jail nginx-scan-critical on 3dausdu.de	Web App Attack
Anonymous	2026-07-23 01:55:31 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 213.163.192.105 (SG/Singapore/213-163-1 ... show more (mod_security) mod_security triggered on hostname [redacted] 213.163.192.105 (SG/Singapore/213-163-192-105.sg-sin1.upcloud.host) show less	SQL Injection
🇫🇷 dwmp	2026-07-22 19:35:20 (1 day ago)	[22/Jul/2026:21:35:20.149033 +0200] amEbeN34gcAPfVA14qexHgAAAJM 213.163.192.105 47264 38.242.227.117 ... show more [22/Jul/2026:21:35:20.149033 +0200] amEbeN34gcAPfVA14qexHgAAAJM 213.163.192.105 47264 38.242.227.117 7080 [22/Jul/2026:21:35:20.299440 +0200] amEbeF8mPoe5pspzhhB8KgAAANI 213.163.192.105 47268 38.242.227.117 7080 [22/Jul/2026:21:35:20.311571 +0200] amEbeF8mPoe5pspzhhB8LQAAAMo 213.163.192.105 47274 38.242.227.117 7080 ... show less	Brute-Force SSH
🇫🇷 Feelautom	2026-07-22 19:01:39 (1 day ago)	[FeelAutom Auto-Ban] PathScan: /.env.credentials (Score: 200)	Port Scan
🇳🇱 e.fierstra	2026-07-22 18:34:44 (1 day ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 Uwe Sarpe	2026-07-22 17:20:46 (1 day ago)	[Wed Jul 22 19:20:45.486944 2026] [access_compat:error] [pid 160137:tid 160137] [client 213.163.192. ... show more [Wed Jul 22 19:20:45.486944 2026] [access_compat:error] [pid 160137:tid 160137] [client 213.163.192.105:30242] AH01797: client denied by server configuration: /var/www/.env.example [Wed Jul 22 19:20:45.666608 2026] [access_compat:error] [pid 160137:tid 160137] [client 213.163.192.105:30242] AH01797: client denied by server configuration: /var/www/secret.json [Wed Jul 22 19:20:45.821517 2026] [access_compat:error] [pid 160175:tid 160175] [client 213.163.192.105:55867] AH01797: client denied by server configuration: /var/www/application.properties [Wed Jul 22 19:20:45.822940 2026] [access_compat:error] [pid 146136:tid 146136] [client 213.163.192.105:59904] AH01797: client denied by server configuration: /var/www/.env.live [Wed Jul 22 19:20:45.823761 2026] [access_compat:error] [pid 146133:tid 146133] [client 213.163.192.105:27307] AH01797: client denied by server configuration: /var/www/k8s-config.yml ... show less	Brute-Force Web App Attack
🇩🇪 todix	2026-07-22 14:40:13 (1 day ago)	Web App Attack Exploid from 213.163.192.105	Web App Attack
🇳🇱 JCB	2026-07-22 14:34:00 (1 day ago)	213.163.192.105 - - [21/Jul/2026:22:43:11 +0300] "GET /.env.backup.old HTTP/1.1" 403 239 "-" "Mozill ... show more 213.163.192.105 - - [21/Jul/2026:22:43:11 +0300] "GET /.env.backup.old HTTP/1.1" 403 239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Edg/125.0.0.0" 213.163.192.105 - - [21/Jul/2026:22:43:11 +0300] "GET /web/.env HTTP/1.1" 403 239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Web App Attack Hacking

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.245

🇧🇪 198.235.24.244

🇨🇳 171.217.92.33

🇳🇬 165.154.10.201

🇺🇸 147.185.132.112

🇨🇳 120.48.67.104

🇨🇭 104.244.74.84

🇳🇱 77.239.124.250

🇺🇸 65.49.20.90

🇺🇸 64.62.156.84

🇺🇸 64.62.156.66

🇺🇸 216.244.66.227

🇧🇪 198.235.24.243

🇧🇪 198.235.24.242

🇦🇷 186.158.183.66

🇺🇸 173.230.155.26

🇳🇱 172.94.9.89

🇲🇲 103.59.163.133

🇺🇸 69.169.111.42

🇱🇹 46.29.234.126