JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.209.159.114

213.209.159.114 was found in our database!

This IP was reported 146 times. Confidence of Abuse is 100%: ?

100%

ISP	Feo Prest SRL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS208137
Domain Name	feoprest.life
Country	🇩🇪 Germany
City	Aachen, North Rhine-Westphalia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.209.159.114

Whois 213.209.159.114

IP Abuse Reports for 213.209.159.114:

This IP address has been reported a total of 146 times from 107 distinct sources. 213.209.159.114 was first reported on July 7th 2026, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-09 23:30:02 (1 minute ago)	CrowdSec decision: crowdsecurity/http-sensitive-files (origin: crowdsec)	Web App Attack
🇮🇪 AutosOnShow	2026-07-09 22:14:06 (1 hour ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-07-09 22:13:45.256 \|	Web App Attack
🇺🇸 chrisoej	2026-07-09 22:00:25 (1 hour ago)	Automated scan detection: 50 requests, 50 failures Probed 14 sensitive paths: - /.env - /.env.lo ... show more Automated scan detection: 50 requests, 50 failures Probed 14 sensitive paths: - /.env - /.env.local - /.env.local.json - /.env.local.txt - /credentials.json Reported by chairlabs infrastructure monitoring show less	Web App Attack Hacking
🇮🇪 AutosOnShow	2026-07-09 21:24:05 (2 hours ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-07-09 21:23:34.642 \|	Web App Attack
🇺🇸 cwytech	2026-07-09 19:45:44 (3 hours ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/rdg-local-lockdown-high.	Bad Web Bot Web App Attack
Anonymous	2026-07-09 19:42:38 (3 hours ago)	LH-Watcher: HONEYPOT	Hacking SSH
🇺🇸 chrisoej	2026-07-09 19:33:02 (3 hours ago)	213.209.159.114 - - [09/Jul/2026:19:32:52 +0000] "GET /.env HTTP/1.1" 404 19 "-" "-" 5201318 "-" "-" ... show more 213.209.159.114 - - [09/Jul/2026:19:32:52 +0000] "GET /.env HTTP/1.1" 404 19 "-" "-" 5201318 "-" "-" 0ms 213.209.159.114 - - [09/Jul/2026:19:32:57 +0000] "GET /.env.local HTTP/1.1" 404 19 "-" "-" 5201336 "-" "-" 0ms 213.209.159.114 - - [09/Jul/2026:19:32:57 +0000] "GET /.env.local.json HTTP/1.1" 404 19 "-" "-" 5201337 "-" "-" 0ms 213.209.159.114 - - [09/Jul/2026:19:32:57 +0000] "GET /.env.local.txt HTTP/1.1" 404 19 "-" "-" 5201339 "-" "-" 0ms 213.209.159.114 - - [09/Jul/2026:19:33:02 +0000] "GET /credentials.json HTTP/1.1" 404 19 "-" "-" 5201366 "-" "-" 0ms ... show less	Web App Attack
🇺🇸 kuj	2026-07-09 19:29:39 (4 hours ago)	2026-07-09T13:29:25.123530-06:00 derp derper[411665]: 2026/07/09 13:29:25 http: TLS handshake error ... show more 2026-07-09T13:29:25.123530-06:00 derp derper[411665]: 2026/07/09 13:29:25 http: TLS handshake error from 213.209.159.114:21860: acme/autocert: missing server name 2026-07-09T13:29:38.237477-06:00 derp derper[411665]: 2026/07/09 13:29:38 http: TLS handshake error from 213.209.159.114:32042: acme/autocert: missing server name 2026-07-09T13:29:38.238655-06:00 derp derper[411665]: 2026/07/09 13:29:38 http: TLS handshake error from 213.209.159.114:32044: acme/autocert: missing server name ... show less	Port Scan Brute-Force
🇬🇧 WebNiraj	2026-07-09 19:15:17 (4 hours ago)	(mod_security) mod_security (id:949110) triggered by 213.209.159.114 (DE/Germany/-): 5 in the last 3 ... show more (mod_security) mod_security (id:949110) triggered by 213.209.159.114 (DE/Germany/-): 5 in the last 3600 secs [SIGMA] show less	Brute-Force
🇺🇸 Starburst SysOp Team	2026-07-09 19:08:43 (4 hours ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-stl2-14)	Hacking Bad Web Bot
🇫🇷 bazter.pro	2026-07-09 18:52:52 (4 hours ago)	Fail2Ban: apache-ratelimit - 20 failures	Port Scan Bad Web Bot Web App Attack
🇺🇸 LotPhantom	2026-07-09 18:47:10 (4 hours ago)	213.209.159.114 - - [09/Jul/2026:18:46:09 +0000] "GET /.env HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Wind ... show more 213.209.159.114 - - [09/Jul/2026:18:46:09 +0000] "GET /.env HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" "0" ... show less	Web App Attack
Anonymous	2026-07-09 18:38:24 (4 hours ago)	2026/07/09 14:38:21 [error] 102795#0: 6018 open() "/var/www/htdocs/.env.local.json" failed (2: No s ... show more 2026/07/09 14:38:21 [error] 102795#0: 6018 open() "/var/www/htdocs/.env.local.json" failed (2: No such file or directory), client: 213.209.159.114, server: www.hquest.pro.br, request: "GET /.env.local.json HTTP/1.1", host: "mx.hquest.pro.br" 2026/07/09 14:38:21 [error] 102795#0: 6017 open() "/var/www/htdocs/.env.local.txt" failed (2: No such file or directory), client: 213.209.159.114, server: www.hquest.pro.br, request: "GET /.env.local.txt HTTP/1.1", host: "mx.hquest.pro.br" 2026/07/09 14:38:21 [error] 102795#0: 6016 open() "/var/www/htdocs/.env.local" failed (2: No such file or directory), client: 213.209.159.114, server: www.hquest.pro.br, request: "GET /.env.local HTTP/1.1", host: "mx.hquest.pro.br" ... show less	Bad Web Bot Web App Attack
🇺🇸 Major Hostility	2026-07-09 18:36:53 (4 hours ago)	"GET /.env HTTP/1.1" 404 "GET /.env.local.txt HTTP/1.1" 404 "GET /.env.local.json HTTP/1.1" 404 "GET ... show more "GET /.env HTTP/1.1" 404 "GET /.env.local.txt HTTP/1.1" 404 "GET /.env.local.json HTTP/1.1" 404 "GET /.env.local HTTP/1.1" 404 "GET /mcp.json HTTP/1.1" 404 show less	Web App Attack
🇮🇪 AutosOnShow	2026-07-09 18:12:05 (5 hours ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-07-09 18:11:39.745 \|	Web App Attack

Showing 1 to 15 of 146 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇴 193.163.125.126

🇷🇺 185.10.63.235

🇺🇸 162.216.149.175

🇺🇸 128.203.200.216

🇹🇭 125.25.235.224

🇸🇦 77.232.122.33

🇱🇹 45.227.254.170

🇺🇸 17.22.245.24

🇳🇱 200.162.144.77

🇺🇿 198.163.194.100

🇺🇿 195.158.9.163

🇬🇹 190.148.128.100

🇩🇪 139.162.190.222

🇳🇱 91.92.241.196

🇷🇴 80.94.95.211

🇳🇱 34.34.103.195

🇹🇼 198.235.24.46

🇺🇸 185.126.181.39

🇺🇦 176.103.7.91

🇰🇷 121.175.21.11