JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.35.114.170

213.35.114.170

Recent Activity

19 reports found in our database

93% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Oracle Svenska AB

Usage Type

Data Center/Web Hosting/Transit

ASN

AS31898

Domain Name

oracle.com

Country

🇸🇬 Singapore

City

Kampong Loyang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 213.35.114.170:

This IP address has been reported a total of 19 times from 18 distinct sources. 213.35.114.170 was first reported on September 4th 2026, and the most recent report was 1 day ago. In the last 60 days, the top reporter locations were: Germany with 3 reports; France with 3 reports; United Kingdom of Great Britain and Northern Ireland with 3 reports. The most common categories in these recent reports were: Web App Attack 16 times; Bad Web Bot 9 times; Brute-Force 4 times; Hacking 3 times; Port Scan 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 dwmosaics	2026-09-05 06:33:16 (1 day ago)	"GET /robots.txt HTTP/1.1" 200 397 "-" "Mozilla/5.0 (Windows NT 10.0; Win64...	Brute-Force Web App Attack
🇳🇱 lns.bz	2026-09-05 05:47:39 (1 day ago)	.env scanning [DOOZ]	Web App Attack
🇫🇷 Little Iguana	2026-09-05 05:43:13 (1 day ago)	Attempt to hack Wordpress Login, XMLRPC or other login	Hacking
🇬🇧 myintarweb	2026-09-05 05:07:22 (2 days ago)	213.35.114.170 - - [05/Sep/2026:06:07:21 +0100] 80 "GET /.env.example HTTP/1.1" 403 1423 "-" "Mozill ... show more 213.35.114.170 - - [05/Sep/2026:06:07:21 +0100] 80 "GET /.env.example HTTP/1.1" 403 1423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 213.35.114.170 - - [05/Sep/2026:06:07:21 +0100] 80 "GET /.env HTTP/1.1" 403 1423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 213.35.114.170 - - [05/Sep/2026:06:07:21 +0100] 80 "GET /.env.production HTTP/1.1" 403 1423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 213.35.114.170 - - [05/Sep/2026:06:07:21 +0100] 80 "GET /.env.local HTTP/1.1" 403 1423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Hacking Bad Web Bot Web App Attack
Anonymous	2026-09-05 05:07:13 (2 days ago)	[Sat Sep 05 07:07:12.478579 2026] [:error] [pid 2605865:tid 2605865] [client 213.35.114.170:51928] M ... show more [Sat Sep 05 07:07:12.478579 2026] [:error] [pid 2605865:tid 2605865] [client 213.35.114.170:51928] ModSecurity: Warning. Matched "Operator `PmFromFile' with parameter `restricted-files.data' against variable `REQUEST_FILENAME' (Value: `/.env.production' ) [file "/usr/local/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "131"] [id "930130"] [rev ""] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.production"] [severity "2"] [ver "OWASP_CRS/4.30.0-dev"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/ATTACK-LFI"] [tag "capec/1000/255/153/126"] [uri "/.env.production"] [unique_id "178858483222.532560"] [ref "o1,4v4,16t:utf8toUnicode,t:urlDecodeUni,t:normalizePathWin"] [Sat Sep 05 07:07:12.649849 2026] [:error] [pid 2605865:tid 2605865] [client 213.35.114.170:51 ... show less	Web App Attack
🇫🇷 LoneRider	2026-09-05 04:39:59 (2 days ago)	[05/Sep/2026:06:39:58.717645 +0200] apudHnjZeWoDxi7L6JXj4AAAAAM 213.35.114.170 45606 127.0.0.1 7080 ... show more [05/Sep/2026:06:39:58.717645 +0200] apudHnjZeWoDxi7L6JXj4AAAAAM 213.35.114.170 45606 127.0.0.1 7080 [05/Sep/2026:06:39:58.862614 +0200] apudHrhFlIDjjWdFOE8PcAAAAAw 213.35.114.170 45622 127.0.0.1 7080 [05/Sep/2026:06:39:58.864429 +0200] apudHv8s2YpLA6SBUzvqkAAAAAA 213.35.114.170 45640 127.0.0.1 7080 ... show less	Hacking
🇧🇪 cmbplf	2026-09-05 00:05:49 (2 days ago)	19.212 4xx requests in 1 hour (1w4d2h)	Brute-Force Bad Web Bot
🇺🇦 Scientific Route	2026-09-04 23:57:47 (2 days ago)	213.35.114.170 - - [05/Sep/2026:02:57:47 +0300] "GET /.env.bak HTTP/1.1" 404 4174 "-" "Mozilla/5.0 ( ... show more 213.35.114.170 - - [05/Sep/2026:02:57:47 +0300] "GET /.env.bak HTTP/1.1" 404 4174 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 213.35.114.170 - - [05/Sep/2026:02:57:47 +0300] "GET /.env.production HTTP/1.1" 404 4176 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-09-04 23:57:31 (2 days ago)	[05/Sep/2026:02:57:30 +0300] -- 213.35.114.170 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.en ... show more [05/Sep/2026:02:57:30 +0300] -- 213.35.114.170 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.env.production HTTP/1.1 show less	Bad Web Bot Web App Attack
🇩🇪 pscriptos	2026-09-04 23:54:43 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-crawl-non_statics	Web App Attack Bad Web Bot
🇩🇪 AetherFox	2026-09-04 23:52:02 (2 days ago)	AetherFox VoidGuard detected: [Fri Sep 04 23:52:02.068699 2026] [authz_core:error] [pid 410270:tid 4 ... show more AetherFox VoidGuard detected: [Fri Sep 04 23:52:02.068699 2026] [authz_core:error] [pid 410270:tid 410346] [client 213.35.114.170:30640] AH01630: client denied by server configuration: /var/www/html/ [Fri Sep 04 23:52:02.069608 2026] [authz_core:error] [pid 410270:tid 410346] [client 213.35.114.170:30640] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html [Fri Sep 04 23:52:02.223335 2026] [authz_core:error] [pid 410270:tid 410347] [client 213.35.114.170:30640] AH01630: client denied by server configuration: /var/www/html/.env.production [Fri Sep 04 23:52:02.223890 2026] [authz_core:error] [pid 410270:tid 410347] [client 213.35.114.170:30640] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html [Fri Sep 04 23:52:02.377390 2026] [authz_core:error] [pid 410270:tid 410327] [client 213.35.114.170:30640] AH01630: client denied by server configuration: /var/www/html/.env.local ... show less	Bad Web Bot Web App Attack
🇬🇧 saxicola	2026-09-04 23:35:34 (2 days ago)	213.35.114.170 - - [05/Sep/2026:00:35:32 +0100] "GET /.env.local HTTP/1.1" 403 480 "-" "Mozilla/5.0 ... show more 213.35.114.170 - - [05/Sep/2026:00:35:32 +0100] "GET /.env.local HTTP/1.1" 403 480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 213.35.114.170 - - [05/Sep/2026:00:35:32 +0100] "GET /text/html;%20charset=UTF-8 HTTP/1.1" 404 477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇨🇭 Zdeněk Svancar	2026-09-04 23:34:26 (2 days ago)	213.35.114.170 - - [04/Sep/2026:23:34:24 +0000] "GET /phpinfo.php HTTP/1.1" 404 181 "-" "Mozilla/5.0 ... show more 213.35.114.170 - - [04/Sep/2026:23:34:24 +0000] "GET /phpinfo.php HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 213.35.114.170 - - [04/Sep/2026:23:34:24 +0000] "GET /wp-login.php HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Port Scan Bad Web Bot Web App Attack
🇫🇮 JLKnoch Software GmbH	2026-09-04 23:17:36 (2 days ago)	CrowdSec crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇧🇾 lns.bz	2026-09-04 23:11:54 (2 days ago)	.env scanning [BY]	Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 180.182.234.23

🇵🇰 139.135.40.123

🇹🇼 116.59.10.205

🇻🇳 115.75.160.86

🇧🇬 109.160.32.116

🇫🇷 89.226.222.168

🇺🇸 34.34.229.99

🇻🇳 171.240.16.32

🇻🇳 103.200.25.198

🇪🇸 84.77.62.201

🇮🇩 36.64.131.68

🇺🇸 35.235.81.215

🇹🇼 198.235.24.54

🇨🇳 183.94.9.160

🇫🇷 176.181.168.247

🇵🇱 176.53.159.198

🇳🇱 172.70.47.163

🇰🇷 121.173.173.48

🇷🇺 93.158.241.119

🇬🇧 87.236.176.82