JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.189.222.6

213.189.222.6 was found in our database!

This IP was reported 57 times. Confidence of Abuse is 100%: ?

100%

ISP	Internet-Pro LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS44128
Hostname(s)	vm-47e0bd57.na4u.ru
Domain Name	khalikov.ru
Country	🇷🇺 Russian Federation
City	Yekaterinburg, Sverdlovsk Oblast

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.189.222.6

Whois 213.189.222.6

IP Abuse Reports for 213.189.222.6:

This IP address has been reported a total of 57 times from 51 distinct sources. 213.189.222.6 was first reported on June 29th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-07-06 08:56:25 (4 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-07-03 02:20:31 (1 week ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇫🇷 thecocasio	2026-07-02 04:42:54 (1 week ago)	HellPot honeypot: .env secret-file probe — observed request "GET /.env" against a honeypot host wher ... show more HellPot honeypot: .env secret-file probe — observed request "GET /.env" against a honeypot host where no such application or resource exists. Detected at 2026-07-02T04:42:54Z. show less	Web App Attack
🇺🇸 masterguru	2026-07-02 04:15:24 (1 week ago)	Host header is a numeric IP address. Pattern match "^ (920350-169)	Hacking Bad Web Bot
Anonymous	2026-07-02 02:47:56 (1 week ago)	213.189.222.6 - - [02/Jul/2026:02:47:56 +0000] "GET /.env HTTP/1.1" 404 400 "-" "Mozilla/5.0 (Window ... show more 213.189.222.6 - - [02/Jul/2026:02:47:56 +0000] "GET /.env HTTP/1.1" 404 400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇵🇱 nakordoni.eu	2026-07-02 01:00:02 (1 week ago)	Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matc ... show more Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matches. ISP: Internet-Pro LLC (RU), Usage: Data Center/Web Hosting/Transit. Prior AbuseIPDB score at ban time: 100/100. show less	Bad Web Bot Web App Attack
Anonymous	2026-07-01 23:46:11 (1 week ago)	Probe hitting /.env detected. Whatcha lookin for in there?!	Brute-Force Bad Web Bot Web App Attack
🇩🇪 TheDjRider	2026-07-01 23:36:13 (1 week ago)	213.189.222.6 - - [01/Jul/2026:23:33:33 +0000] "GET /database.sql HTTP/1.1" 404 1142 "-" "Mozilla/5. ... show more 213.189.222.6 - - [01/Jul/2026:23:33:33 +0000] "GET /database.sql HTTP/1.1" 404 1142 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 213.189.222.6 - - [01/Jul/2026:23:33:41 +0000] "GET /dump.sql HTTP/1.1" 404 1142 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 213.189.222.6 - - [01/Jul/2026:23:33:49 +0000] "GET /db.sql HTTP/1.1" 404 1142 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 213.189.222.6 - - [01/Jul/2026:23:35:21 +0000] "GET /config/database.yml HTTP/1.1" 404 1142 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 213.189.222.6 - - [01/Jul/2026:23:36:12 +0000] "GET /backup/.env HTTP/1.1" 404 1142 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" ... show less	Port Scan Bad Web Bot Web App Attack
🇩🇪 Bedios GmbH	2026-07-01 23:18:01 (1 week ago)	Login credentials theft attempt	Hacking
🇩🇪 jotoma.de	2026-07-01 20:53:58 (1 week ago)	[Wed Jul 01 22:53:09.300655 2026] [proxy_fcgi:error] [pid 756985:tid 757052] [client 213.189.222.6:3 ... show more [Wed Jul 01 22:53:09.300655 2026] [proxy_fcgi:error] [pid 756985:tid 757052] [client 213.189.222.6:39656] AH01071: Got error 'Primary script unknown' [Wed Jul 01 22:53:33.677017 2026] [proxy_fcgi:error] [pid 756986:tid 757086] [client 213.189.222.6:48104] AH01071: Got error 'Primary script unknown' [Wed Jul 01 22:53:58.056241 2026] [proxy_fcgi:error] [pid 756985:tid 757082] [client 213.189.222.6:37086] AH01071: Got error 'Primary script unknown' ... show less	Bad Web Bot Web App Attack
🇩🇪 ecs.ge	2026-07-01 19:45:47 (1 week ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇫🇮 Christopher Hughes	2026-07-01 15:37:26 (1 week ago)	[Wed Jul 01 16:37:23.752022 2026] [proxy_fcgi:error] [pid 1356621:tid 139821183923776] [client 213.1 ... show more [Wed Jul 01 16:37:23.752022 2026] [proxy_fcgi:error] [pid 1356621:tid 139821183923776] [client 213.189.222.6:49546] AH01071: Got error 'Primary script unknown' [Wed Jul 01 16:37:23.895235 2026] [proxy_fcgi:error] [pid 1356621:tid 139822775862848] [client 213.189.222.6:32904] AH01071: Got error 'Primary script unknown' [Wed Jul 01 16:37:24.115217 2026] [proxy_fcgi:error] [pid 1356621:tid 139822750684736] [client 213.189.222.6:49560] AH01071: Got error 'Primary script unknown' [Wed Jul 01 16:37:25.844068 2026] [proxy_fcgi:error] [pid 1356622:tid 139821167138368] [client 213.189.222.6:49606] AH01071: Got error 'Primary script unknown' [Wed Jul 01 16:37:26.002222 2026] [proxy_fcgi:error] [pid 1356621:tid 139821704009280] [client 213.189.222.6:32918] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇫🇮 23p02732	2026-07-01 14:32:01 (1 week ago)	Mailserver and mailaccount attacks	Brute-Force Bad Web Bot Exploited Host Web App Attack
🇫🇷 IRISIO	2026-07-01 09:46:09 (1 week ago)	scans/SQL injection/spam posts : 141 queries	Web App Attack SQL Injection
🇺🇸 Som1ght3n	2026-07-01 07:01:17 (1 week ago)	IP 213.189.222.6 attempted to access sensitive configuration files ('/.env') via HTTP GET, consisten ... show more IP 213.189.222.6 attempted to access sensitive configuration files ('/.env') via HTTP GET, consistent with a web application attack. show less	Web App Attack

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.46.255.86

🇫🇮 147.185.133.81

🇨🇳 112.20.12.225

🇺🇸 35.237.94.18

🇧🇷 20.226.22.37

🇩🇪 213.209.159.235

🇺🇸 209.163.98.0

🇸🇾 185.225.41.192

🇺🇸 185.198.240.220

🇧🇷 177.128.81.65

🇮🇳 144.48.51.82

🇳🇱 91.92.42.64

🇺🇸 64.62.156.10

🇵🇰 59.103.216.228

🇺🇸 15.204.89.69

🇩🇪 213.209.159.225

🇨🇦 142.44.149.52

🇩🇪 116.202.20.68

🇺🇸 104.243.35.45

🇵🇱 95.214.53.134