JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.176.138.14

213.176.138.14 was found in our database!

This IP was reported 95 times. Confidence of Abuse is 0%: ?

ISP	Ljosleidarinn ehf
Usage Type	Fixed Line ISP
ASN	AS12969
Hostname(s)	maria.dg.is
Domain Name	ljosleidarinn.is
Country	🇮🇸 Iceland
City	Reykjavik, Capital Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.176.138.14

Whois 213.176.138.14

IP Abuse Reports for 213.176.138.14:

This IP address has been reported a total of 95 times from 31 distinct sources. 213.176.138.14 was first reported on February 27th 2023, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alboweb B.V.	2025-08-26 12:44:23 (10 months ago)	Bad web bot activity detected by Fail2Ban in plesk-apache-badbot jail	Bad Web Bot
🇨🇦 polycoda	2025-08-10 16:30:37 (11 months ago)	📂 Probes for backup files such as: temp.zip, main.zip, backup.zip, backup.sql, back.zip, old.zip, pa ... show more 📂 Probes for backup files such as: temp.zip, main.zip, backup.zip, backup.sql, back.zip, old.zip, pack.zip, docs.zip, html.zip, www.zip, www1.zip, website.zip, web.zip, wp-config.php.zip, public_html.zip, wordpress.sql, etc... show less	Hacking Web App Attack
🇮🇹 Progetto1	2025-08-08 08:57:03 (11 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇯🇵 Valhalla	2025-07-31 09:47:10 (11 months ago)	/backup.zip	Hacking Web App Attack
🇺🇸 Al Coholic	2025-07-29 20:26:18 (11 months ago)	Detected By Fail2ban	Hacking Bad Web Bot Web App Attack
Anonymous	2025-07-27 04:48:45 (11 months ago)	Account archive download attempts	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-07-19 19:07:49 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 213.176.138.14 (maria.dg.is): 1 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 213.176.138.14 (maria.dg.is): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 15:07:43.264844 2025] [security2:error] [pid 7772:tid 7772] [client 213.176.138.14:53814] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brazilianbikinis.com"] [uri "/wp-config.php_old"] [unique_id "aHvs_13LHGheWErbJcJVZAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-07-19 19:05:51 (1 year ago)	Detected attack by Imunify360	Brute-Force Web App Attack
🇮🇹 VHosting	2025-07-19 14:25:55 (1 year ago)	Detected attack by Imunify360	Brute-Force Web App Attack
🇫🇮 paissangroup	2025-07-17 05:29:07 (1 year ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2025-07-15 09:57:17 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 213.176.138.14 (maria.dg.is): 1 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 213.176.138.14 (maria.dg.is): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 15 05:57:11.837508 2025] [security2:error] [pid 1274:tid 1274] [client 213.176.138.14:44428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nancybcatering.com"] [uri "/wp-config.php.old"] [unique_id "aHYl9744jAn7eIS8E83FKgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting	2025-07-15 09:18:37 (1 year ago)	(modsecurity) srv102 ModSecurity 213.176.138.14 (IS/Iceland/maria.dg.is): 5 in the last 3600 secs; P ... show more (modsecurity) srv102 ModSecurity 213.176.138.14 (IS/Iceland/maria.dg.is): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇺🇸 TPI-Abuse	2025-07-13 12:46:52 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 213.176.138.14 (maria.dg.is): 1 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 213.176.138.14 (maria.dg.is): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 13 08:46:48.503829 2025] [security2:error] [pid 16838:tid 16838] [client 213.176.138.14:34680] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fromthehandofgodministry.org"] [uri "/wp-config.php1"] [unique_id "aHOquFs2jVeM29DphurOVAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-10 23:46:39 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 213.176.138.14 (maria.dg.is): 1 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 213.176.138.14 (maria.dg.is): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 10 19:46:31.532081 2025] [security2:error] [pid 1576:tid 1576] [client 213.176.138.14:51336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fibroscopie.net"] [uri "/wp-config.php.old"] [unique_id "aHBQ11sjVaBe-AZgojpnsQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-10 12:22:25 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 213.176.138.14 (maria.dg.is): 1 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 213.176.138.14 (maria.dg.is): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 10 08:22:21.287535 2025] [security2:error] [pid 16045:tid 16045] [client 213.176.138.14:47168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dgroupsa.com"] [uri "/wp-config.php1"] [unique_id "aG-wfeu-xhDnyKcJhVJL9QAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 95 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:2:d1:0:1:51ea:1

🇺🇸 207.97.143.195

🇮🇳 152.32.156.158

🇱🇹 94.244.77.5

🇫🇷 91.231.89.133

🇫🇷 194.113.235.89

🇵🇪 190.223.60.209

🇫🇮 178.20.210.151

🇰🇷 175.119.225.68

🇺🇸 147.185.132.81

🇺🇸 147.185.132.78

🇺🇸 136.67.80.39

🇳🇱 45.153.34.186

🇺🇸 204.152.195.212

🇺🇸 192.204.35.134

🇻🇳 171.231.193.177

🇺🇸 147.185.132.231

🇺🇸 147.185.132.168

🇺🇸 147.185.132.66

🇰🇷 106.245.142.83