JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.209.159.113

213.209.159.113 was found in our database!

This IP was reported 1,225 times. Confidence of Abuse is 100%: ?

100%

ISP	Feo Prest SRL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS208137
Domain Name	feoprest.life
Country	🇩🇪 Germany
City	Aachen, North Rhine-Westphalia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.209.159.113

Whois 213.209.159.113

IP Abuse Reports for 213.209.159.113:

This IP address has been reported a total of 1,225 times from 454 distinct sources. 213.209.159.113 was first reported on September 7th 2022, and the most recent report was 30 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇿🇦 slartybartfast69420blazit	2026-06-16 20:27:53 (30 minutes ago)	Fail2ban picked up 213.209.159.113 attacking nginx	Web App Attack
🇧🇪 boxed-it	2026-06-16 18:32:45 (2 hours ago)	GET /.git/config (Tarpitted for 1d15h8m29s, wasted 8.06MB)	Web App Attack
🇱🇮 wmek	2026-06-16 14:55:05 (6 hours ago)	Attack (5x confirmed): cpfence-block(12x),cpfence-block(20x),cpfence-block(4x),cpfence-block(60x),cp ... show more Attack (5x confirmed): cpfence-block(12x),cpfence-block(20x),cpfence-block(4x),cpfence-block(60x),cpfence-block(8x). Port: 443/tcp. URI: web-service. WAF rule: 0. Protocol: HTTPS. Detected by: WAF/IDS (OWASP CRS ModSecurity). show less	Web App Attack Port Scan
🇩🇪 ecs.ge	2026-06-16 13:48:40 (7 hours ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇺🇸 www.nomadomia.com	2026-06-16 13:44:44 (7 hours ago)	Hack attack .git	Port Scan Hacking Bad Web Bot Web App Attack
🇫🇷 LiloBzH	2026-06-16 13:31:07 (7 hours ago)	213.209.159.113 - - [16/Jun/2026:15:30:00 +0200] "GET /.git/config HTTP/2.0" 403 107 "-" "Mozilla/5. ... show more 213.209.159.113 - - [16/Jun/2026:15:30:00 +0200] "GET /.git/config HTTP/2.0" 403 107 "-" "Mozilla/5.0 (compatible; GitFinder/1.0)" 213.209.159.113 - - [16/Jun/2026:15:31:05 +0200] "GET / HTTP/2.0" 200 1292 "https://maison.lilobzh.com/.git/config" "Mozilla/5.0 (compatible; GitFinder/1.0)" 213.209.159.113 - - [16/Jun/2026:15:31:05 +0200] "GET / HTTP/2.0" 200 1292 "https://minecraft.lilobzh.com/.git/config" "Mozilla/5.0 (compatible; GitFinder/1.0)" show less	Web App Attack
🇺🇸 MPL	2026-06-16 13:06:06 (7 hours ago)	tcp ports: 80,443 (24 or more attempts)	Port Scan
🇫🇷 Baking333	2026-06-16 12:52:09 (8 hours ago)	[redacted] 213.209.159.113 - - [16/Jun/2026:13:52:07 +0100] "GET /.git/config HTTP/1.1" 302 5278 0/8 ... show more [redacted] 213.209.159.113 - - [16/Jun/2026:13:52:07 +0100] "GET /.git/config HTTP/1.1" 302 5278 0/80654 "-" "Mozilla/5.0 (compatible; GitFinder/1.0)" [redacted] 213.209.159.113 - - [16/Jun/2026:13:52:07 +0100] "GET / HTTP/1.1" 200 12862 0/141022 "https://[redacted]/.git/config" "Mozilla/5.0 (compatible; GitFinder/1.0)" show less	Bad Web Bot Web App Attack
🇺🇸 mccsoft.io	2026-06-16 12:40:52 (8 hours ago)	Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ... show more Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received). show less	Bad Web Bot Web App Attack
🇺🇸 Charlesiv	2026-06-16 12:01:20 (8 hours ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 208137 (Feo Prest SRL) P ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 208137 (Feo Prest SRL) Protocol: HTTP/2 (GET method) Endpoint: /.git/config Timestamp: 2026-06-16T11:12:46Z Ray ID: a0c961a41c390b88 UA: Mozilla/5.0 (compatible; GitFinder/1.0) show less	Bad Web Bot
🇪🇸 matatunos	2026-06-16 12:00:05 (8 hours ago)	Honeypot favala.es: 4 peticiones web a rutas de ataque (/wp-login, /.env, etc.) en 24h. Reporte auto ... show more Honeypot favala.es: 4 peticiones web a rutas de ataque (/wp-login, /.env, etc.) en 24h. Reporte automático. show less	Web App Attack Bad Web Bot
🇩🇪 ghostwarriors	2026-06-16 11:50:19 (9 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇮🇩 securejdprop	2026-06-16 11:20:34 (9 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 65). Ip 213.209.159.113 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-06-16 11:20:32.959606308 +0000 UTC show less	Hacking Web App Attack
🇫🇷 900cm	2026-06-16 10:48:33 (10 hours ago)	[Tue Jun 16 09:18:34.162967 2026] [access_compat:error] [pid 1357982:tid 1357982] [client 213.209.15 ... show more [Tue Jun 16 09:18:34.162967 2026] [access_compat:error] [pid 1357982:tid 1357982] [client 213.209.159.113:50768] AH01797: client denied by server configuration: /var/www/darkintruder/.git [Tue Jun 16 12:48:32.968589 2026] [access_compat:error] [pid 1357918:tid 1357918] [client 213.209.159.113:34714] AH01797: client denied by server configuration: /var/www/darkintruder/.git [Tue Jun 16 12:48:32.968673 2026] [access_compat:error] [pid 1357950:tid 1357950] [client 213.209.159.113:34700] AH01797: client denied by server configuration: /var/www/darkintruder/.git ... show less	Port Scan Brute-Force SSH
🇫🇷 [email protected]	2026-06-16 10:45:46 (10 hours ago)	PrestaShop Security Module: Suspicious path detected (/.git)	Web App Attack

Showing 1 to 15 of 1225 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c32::12c

🇨🇳 202.103.55.158

🇱🇹 45.227.254.170

🇳🇱 45.148.10.141

🇺🇸 20.163.10.187

🇺🇸 216.73.161.114

🇧🇷 205.210.31.219

🇳🇱 193.176.31.254

🇦🇷 191.83.223.71

🇺🇸 162.243.147.237

🇺🇸 104.23.245.70

🇺🇸 104.23.245.25

🇦🇺 103.208.219.38

🇦🇪 92.99.114.241

🇷🇺 90.150.77.25

🇨🇳 47.122.127.10

🇺🇸 45.131.195.172

🇻🇳 14.225.46.21

🇷🇴 2.57.122.238

🇺🇸 216.73.163.115