JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.173.108.8

213.173.108.8 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 100%: ?

100%

ISP	EVOBITS Information Technology SRL
Usage Type	Fixed Line ISP
ASN	AS202779
Domain Name	evobitsit.com
Country	🇷🇴 Romania
City	Timisoara, Timis County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.173.108.8

Whois 213.173.108.8

IP Abuse Reports for 213.173.108.8:

This IP address has been reported a total of 47 times from 31 distinct sources. 213.173.108.8 was first reported on July 24th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-07-25 13:31:10 (2 hours ago)	213.173.108.8 - - [25/Jul/2026:16:31:09 +0300] "GET /.env HTTP/1.1" 404 4652 "-" "Mozilla/5.0" ...	Web App Attack
🇫🇷 Baking333	2026-07-25 13:10:37 (3 hours ago)	[redacted] 213.173.108.8 - - [25/Jul/2026:13:57:57 +0100] "GET /.[redacted] HTTP/1.1" 302 6753 0/419 ... show more [redacted] 213.173.108.8 - - [25/Jul/2026:13:57:57 +0100] "GET /.[redacted] HTTP/1.1" 302 6753 0/41975 "-" "Mozilla/5.0" [redacted] 213.173.108.8 - - [25/Jul/2026:14:10:35 +0100] "GET /config/.env HTTP/1.1" 302 6753 0/40718 "-" "Mozilla/5.0" show less	Bad Web Bot Web App Attack
🇮🇩 sockominfo	2026-07-25 13:00:28 (3 hours ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Email Spam
🇺🇸 TPI-Abuse	2026-07-25 12:15:13 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 213.173.108.8 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 213.173.108.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 08:15:06.952245 2026] [security2:error] [pid 1278507:tid 1278507] [client 213.173.108.8:58562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dmasoftlab.com"] [uri "/.env.production"] [unique_id "amSoyqhaikUIRHTsDOML8AAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 tall1oN	2026-07-25 11:53:24 (4 hours ago)	213.173.108.8 - - [25/Jul/2026:13:53:08 +0200] "GET /.env HTTP/2.0" 200 670 "-" "Mozilla/5.0" "diamo ... show more 213.173.108.8 - - [25/Jul/2026:13:53:08 +0200] "GET /.env HTTP/2.0" 200 670 "-" "Mozilla/5.0" "diamondliferp.cc" 213.173.108.8 - - [25/Jul/2026:13:53:24 +0200] "GET /.env HTTP/2.0" 200 4730 "-" "Mozilla/5.0" "diamondliferp.cc" ... show less	Web App Attack Port Scan Hacking
🇺🇸 TPI-Abuse	2026-07-25 06:47:17 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 213.173.108.8 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 213.173.108.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 02:47:13.114612 2026] [security2:error] [pid 1265788:tid 1265788] [client 213.173.108.8:32886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "804web.net"] [uri "/.env.development"] [unique_id "amRb8aL8Z9d11AjFsNilKwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-07-25 06:25:00 (9 hours ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 213.173.108.8 (RO/Romania/-): 2 in t ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 213.173.108.8 (RO/Romania/-): 2 in the last 3600 secs show less	Web App Attack
🇨🇭 lufi	2026-07-25 06:13:27 (10 hours ago)	2026-07-25 08:13:26 213.173.108.8: blacklistedPath: /.env ...	Web Spam Brute-Force Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 01:47:24 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 213.173.108.8 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 213.173.108.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 21:47:20.962083 2026] [security2:error] [pid 1266818:tid 1266818] [client 213.173.108.8:40752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "benefit-design.com"] [uri "/.env"] [unique_id "amQVqKjcGNHOB6gy9R6qPwAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 andypiper	2026-07-25 01:01:08 (15 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 00:56:33 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 213.173.108.8 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 213.173.108.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 20:56:27.852138 2026] [security2:error] [pid 1516202:tid 1516202] [client 213.173.108.8:60866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "inetbrain.com"] [uri "/.env.development"] [unique_id "amQJu3jo25AdFUgoSKaWHAAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-07-25 00:45:50 (15 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 00:29:54 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 213.173.108.8 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 213.173.108.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 20:29:47.188172 2026] [security2:error] [pid 26834:tid 26856] [client 213.173.108.8:49806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "epsbudgetcommittee.org"] [uri "/.env"] [unique_id "amQDe54TgWH5j036GRdZhwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-07-25 00:15:36 (16 hours ago)	213.173.108.8 - - [25/Jul/2026:03:15:35 +0300] "GET /.env.local HTTP/1.1" 200 4198 "-" "Mozilla/5.0" ... show more 213.173.108.8 - - [25/Jul/2026:03:15:35 +0300] "GET /.env.local HTTP/1.1" 200 4198 "-" "Mozilla/5.0" ... show less	Web App Attack
🇺🇸 Gabriel Camargo	2026-07-25 00:05:20 (16 hours ago)	213.173.108.8 - - [24/Jul/2026:19:04:01 -0500] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT ... show more 213.173.108.8 - - [24/Jul/2026:19:04:01 -0500] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 213.173.108.8 - - [24/Jul/2026:19:05:01 -0500] "GET /.env HTTP/1.1" 301 178 "-" "Mozilla/5.0" 213.173.108.8 - - [24/Jul/2026:19:05:20 -0500] "GET /.env.local HTTP/1.1" 301 178 "-" "Mozilla/5.0" ... show less	Brute-Force SSH

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 190.181.97.207

🇺🇸 162.216.150.180

🇧🇩 103.177.168.245

🇨🇳 101.126.155.86

🇺🇸 68.183.121.213

🇬🇧 35.203.211.186

🇫🇷 13.38.13.162

🇨🇭 209.99.184.143

🇷🇺 188.32.104.175

🇧🇴 177.222.97.206

🇱🇰 175.157.99.193

🇺🇸 104.23.211.89

🇧🇩 103.129.238.121

🇳🇬 102.209.31.142

🇯🇵 101.36.104.242

🇻🇪 38.92.20.219

🇦🇪 38.54.76.172

🇵🇱 176.53.159.198

🇫🇮 147.185.133.9

🇺🇸 104.23.211.88