JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.232.112.116

213.232.112.116 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 100%: ?

100%

ISP	Mullvad VPN
Usage Type	Data Center/Web Hosting/Transit
ASN	AS43357
Domain Name	mullvad.net
Country	🇪🇪 Estonia
City	Tallinn, Harjumaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.232.112.116

Whois 213.232.112.116

IP Abuse Reports for 213.232.112.116:

This IP address has been reported a total of 50 times from 48 distinct sources. 213.232.112.116 was first reported on August 30th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇱 spd.co.il	2026-09-01 08:01:58 (3 hours ago)	Web application attack detected	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-08-31 12:34:46 (22 hours ago)		Brute-Force Web App Attack
🇬🇧 Smish	2026-08-30 09:32:14 (2 days ago)	HONEYPOT HIT --> Fail2ban time=1788082333 log=2026-08-30T10:32:13+01:00 ip=213.232.112.116 host=as21 ... show more HONEYPOT HIT --> Fail2ban time=1788082333 log=2026-08-30T10:32:13+01:00 ip=213.232.112.116 host=as210667.net method=GET uri="/.git/HEAD" status=404 ua="Mozilla/5.0 (compatible; gitwell/1.0)" ref="-" rid=8d10cc764251d65c3b71105529c1e29c show less	Web App Attack
🇷🇴 iulianh	2026-08-30 09:24:40 (2 days ago)	80,443	Brute-Force SSH
Anonymous	2026-08-30 09:11:54 (2 days ago)	Web Server Exposed Git Repository Information Disclosure.	Hacking
🇫🇷 Baking333	2026-08-30 08:59:12 (2 days ago)	[redacted] 213.232.112.116 - - [30/Aug/2026:09:59:09 +0100] "GET /.git/HEAD HTTP/2.0" 301 295 "-" "M ... show more [redacted] 213.232.112.116 - - [30/Aug/2026:09:59:09 +0100] "GET /.git/HEAD HTTP/2.0" 301 295 "-" "Mozilla/5.0 (compatible; gitwell/1.0)" [redacted] 213.232.112.116 - - [30/Aug/2026:09:59:10 +0100] "GET /fr/.git/HEAD/ HTTP/2.0" 404 34574 "-" "Mozilla/5.0 (compatible; gitwell/1.0)" show less	Bad Web Bot Web App Attack
🇿🇦 simon boshoff	2026-08-30 08:58:14 (2 days ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇩🇪 macrob	2026-08-30 08:47:46 (2 days ago)	2026/08/30 08:47:43 [error] 730832#730832: 536227004 access forbidden by rule, client: 213.232.112. ... show more 2026/08/30 08:47:43 [error] 730832#730832: 536227004 access forbidden by rule, client: 213.232.112.116, server: binixo.es, request: "GET /.git/HEAD HTTP/1.1", host: "binixo.es" 2026/08/30 08:47:44 [error] 730832#730832: 536227004 access forbidden by rule, client: 213.232.112.116, server: binixo.es, request: "GET /.git/config HTTP/1.1", host: "binixo.es" 2026/08/30 08:47:44 [error] 730832#730832: 536227004 access forbidden by rule, client: 213.232.112.116, server: binixo.es, request: "GET /.git/ HTTP/1.1", host: "binixo.es" ... show less	Web App Attack
🇺🇸 interbiznw.com	2026-08-30 08:20:50 (2 days ago)	malicious-web-requests-vulnerability-scanning	Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 london2038.com	2026-08-30 08:18:40 (2 days ago)	Probing for exploits 213.232.112.116 - - [30/Aug/2026:10:18:36 +0200] "GET /.git/HEAD HTTP/1.1" 422 ... show more Probing for exploits 213.232.112.116 - - [30/Aug/2026:10:18:36 +0200] "GET /.git/HEAD HTTP/1.1" 422 0 "-" "Mozilla/5.0 (compatible; gitwell/1.0)" 213.232.112.116 - - [30/Aug/2026:10:18:37 +0200] "GET /.git/config HTTP/1.1" 422 0 "-" "Mozilla/5.0 (compatible; gitwell/1.0)" show less	Hacking Web App Attack
🇳🇴 jad-abuse	2026-08-30 08:17:20 (2 days ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, env_probe, source_backup. Observed by 1 sensor(s); 7 hits. show less	Web App Attack
🇨🇭 lufi	2026-08-30 08:11:05 (2 days ago)	2026-08-30T10:11:05+02:00 lufischer04 ids442 2026-08-30 10:11:05 213.232.112.116: blacklistedPath: / ... show more 2026-08-30T10:11:05+02:00 lufischer04 ids442 2026-08-30 10:11:05 213.232.112.116: blacklistedPath: /.git/HEAD ... show less	Web Spam Brute-Force Hacking Web App Attack
🇹🇭 MWA SOC	2026-08-30 08:09:22 (2 days ago)		Hacking
🇩🇪 pscriptos	2026-08-30 08:05:02 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-08-30 08:04:13 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 213.232.112.116 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.232.112.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 04:04:06.767480 2026] [security2:error] [pid 5931:tid 5931] [client 213.232.112.116:64159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lietuvai.lt"] [uri "/.git/HEAD"] [unique_id "apPj9u7-U_gMJsETWwx-wQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.73.216.253

🇺🇿 213.230.86.55

🇭🇺 185.203.184.220

🇺🇸 64.62.156.108

🇬🇧 34.153.157.68

🇫🇷 217.182.253.249

🇭🇰 199.45.154.186

🇬🇶 196.251.240.98

🇳🇱 195.178.110.228

🇮🇳 152.59.191.205

🇮🇳 117.244.16.6

🇮🇩 103.122.34.142

🇮🇳 103.44.52.140

🇭🇰 101.36.107.243

🇸🇬 84.75.155.239

🇧🇷 45.236.208.79

🇿🇦 41.24.83.159

🇮🇹 37.186.214.146

🇯🇵 34.97.246.95

🇩🇪 213.209.159.208