JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.173.98.24

213.173.98.24 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 100%: ?

100%

ISP	EVOBITS Information Technology SRL
Usage Type	Commercial
ASN	AS202779
Domain Name	evobitsit.com
Country	🇷🇴 Romania
City	Arad, Arad County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.173.98.24

Whois 213.173.98.24

IP Abuse Reports for 213.173.98.24:

This IP address has been reported a total of 36 times from 29 distinct sources. 213.173.98.24 was first reported on August 22nd 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 paissangroup	2026-08-22 23:21:57 (5 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 23:19:16 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 213.173.98.24 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 213.173.98.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 19:19:12.347707 2026] [security2:error] [pid 23563:tid 23585] [client 213.173.98.24:44460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.123"] [uri "/.env.development.local"] [unique_id "aooucL1cS5gPIrYYpAYgKQAAAVM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 23:02:01 (6 hours ago)	(mod_security) mod_security (id:949110) triggered by 213.173.98.24 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:949110) triggered by 213.173.98.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 19:01:54.296252 2026] [security2:error] [pid 24127:tid 24127] [client 213.173.98.24:39114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "192.64.150.239"] [uri "/.env.local"] [unique_id "aooqYuqU9ecY4MYfVRMoeQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Lino Project	2026-08-22 22:59:20 (6 hours ago)	213.173.98.24 - - [23/Aug/2026:00:59:17 +0200] "GET /.env.save HTTP/1.1" 404 5193 "-" "Mozilla/5.0 ( ... show more 213.173.98.24 - - [23/Aug/2026:00:59:17 +0200] "GET /.env.save HTTP/1.1" 404 5193 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0" ... show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-22 22:58:41 (6 hours ago)	213.173.98.24 - - [23/Aug/2026:00:58:40 +0200] "GET /.env.bak HTTP/1.1" 403 177 "https://49.12.100.9 ... show more 213.173.98.24 - - [23/Aug/2026:00:58:40 +0200] "GET /.env.bak HTTP/1.1" 403 177 "https://49.12.100.91/.env.bak" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 22:10:52 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 213.173.98.24 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 213.173.98.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 18:10:48.693117 2026] [security2:error] [pid 16590:tid 16590] [client 213.173.98.24:50994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.4"] [uri "/config/.env"] [unique_id "aooeaLVlFZ4_rDtNegRyBQAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 MusicLibrary	2026-08-22 22:08:44 (7 hours ago)	Attempted access to sensitive configuration files (.env, .git, etc.)	Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-08-22 22:05:20 (7 hours ago)	Blocked by CSF 13 firewall - Rule: config-dotfile NL/Netherlands/-	Web App Attack
🇺🇸 mnsf	2026-08-22 22:05:06 (7 hours ago)	Abuse Detected (13)	Brute-Force Web App Attack
🇿🇦 conure.sh	2026-08-22 21:59:09 (7 hours ago)	csagent: score 18.0: 404 noise floor x4, secrets grab x2; 2 domain(s) in 4m56s	Web App Attack
🇫🇷 LRob	2026-08-22 21:57:38 (7 hours ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /.env.production.local show less	Hacking Web App Attack
🇺🇸 kosada.com	2026-08-22 21:55:23 (7 hours ago)	Web vulnerability probing: /public/.env (bogus vhost/SNI)	Web App Attack
🇮🇩 bps-statistics	2026-08-22 21:54:29 (7 hours ago)	Web Application Attacks	Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 21:53:54 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 213.173.98.24 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 213.173.98.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 17:53:47.139285 2026] [security2:error] [pid 28671:tid 28671] [client 213.173.98.24:33760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.221"] [uri "/.env.staging"] [unique_id "aooaa0xmXLg-IASJXDSDogAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-08-22 21:49:17 (7 hours ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-195)	Hacking Bad Web Bot

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 213.176.26.72

🇺🇸 167.172.203.111

🇺🇸 162.216.150.4

🇫🇮 147.185.133.19

🇨🇳 111.53.189.3

🇨🇳 218.92.244.10

🇩🇪 150.241.115.90

🇺🇸 147.185.132.91

🇩🇪 104.28.159.88

🇩🇪 104.28.159.17

🇺🇸 98.91.209.6

🇹🇷 94.54.236.207

🇺🇸 45.156.129.98

🇺🇸 45.156.129.83

🇩🇪 45.135.194.113

🇶🇦 37.211.92.120

🇺🇸 20.168.120.150

🇺🇸 3.234.254.133

🇪🇨 190.10.186.34

🇺🇸 189.81.235.33