JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 84.201.4.212

84.201.4.212 was found in our database!

This IP was reported 92 times. Confidence of Abuse is 100%: ?

100%

ISP	UltaHost Inc
Usage Type	Data Center/Web Hosting/Transit
ASN	AS214036
Domain Name	ultahost.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 84.201.4.212

Whois 84.201.4.212

IP Abuse Reports for 84.201.4.212:

This IP address has been reported a total of 92 times from 77 distinct sources. 84.201.4.212 was first reported on July 14th 2026, and the most recent report was 11 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Lino Project	2026-07-15 04:21:11 (11 minutes ago)	84.201.4.212 - - [15/Jul/2026:06:21:08 +0200] "GET /.env HTTP/1.1" 302 385 "-" "Mozilla/5.0 (Windows ... show more 84.201.4.212 - - [15/Jul/2026:06:21:08 +0200] "GET /.env HTTP/1.1" 302 385 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 sdos.es	2026-07-15 03:43:22 (48 minutes ago)	"Restricted File Access Attempt - Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"	Web App Attack
🇬🇧 SilverZippo	2026-07-15 03:40:22 (51 minutes ago)	Web App Attack	Web App Attack
🇵🇱 nakordoni.eu	2026-07-15 03:30:03 (1 hour ago)	Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matc ... show more Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matches. ISP: UltaHost Inc (DE), Usage: Data Center/Web Hosting/Transit. Prior AbuseIPDB score at ban time: 100/100. show less	Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-15 03:12:46 (1 hour ago)	Web vulnerability probing: /appsettings.json	Web App Attack
🇺🇸 infra-monitor	2026-07-15 03:00:05 (1 hour ago)	Automated ban via infra-monitor: suspicious-probe	Port Scan
🇩🇪 macrob	2026-07-15 02:55:49 (1 hour ago)	2026/07/15 02:55:47 [error] 3511270#3511270: 377174706 access forbidden by rule, client: 84.201.4.2 ... show more 2026/07/15 02:55:47 [error] 3511270#3511270: 377174706 access forbidden by rule, client: 84.201.4.212, server: binixo.pl, request: "GET /.env HTTP/2.0", host: "binixo.pl" 2026/07/15 02:55:47 [error] 3511270#3511270: 377174706 access forbidden by rule, client: 84.201.4.212, server: binixo.pl, request: "GET /.env.local HTTP/2.0", host: "binixo.pl" 2026/07/15 02:55:47 [error] 3511270#3511270: 377174706 access forbidden by rule, client: 84.201.4.212, server: binixo.pl, request: "GET /.git/config HTTP/2.0", host: "binixo.pl" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 02:53:57 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 84.201.4.212 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 84.201.4.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 22:53:52.428286 2026] [security2:error] [pid 6069:tid 6069] [client 84.201.4.212:43364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bzbdesigns.com"] [uri "/.env"] [unique_id "alb2QGPrx5rtpfaYNV0eAgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Bedios GmbH	2026-07-15 02:14:23 (2 hours ago)	Login credentials theft attempt	Hacking
🇩🇪 Nevermind	2026-07-15 02:03:27 (2 hours ago)	84.201.4.212 - - [15/Jul/2026:04:03:21 +0200] "GET /.env HTTP/1.1" 403 6283 "-" "Mozilla/5.0 (Window ... show more 84.201.4.212 - - [15/Jul/2026:04:03:21 +0200] "GET /.env HTTP/1.1" 403 6283 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 84.201.4.212 - - [15/Jul/2026:04:03:27 +0200] "GET /.env.local HTTP/1.1" 403 6283 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 84.201.4.212 - - [15/Jul/2026:04:03:27 +0200] "GET /.git/config HTTP/1.1" 403 6283 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 84.201.4.212 - - [15/Jul/2026:04:03:27 +0200] "GET /appsettings.json HTTP/1.1" 404 6296 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 Lee Daniel	2026-07-15 01:55:38 (2 hours ago)	84.201.4.212 - - [14/Jul/2026:21:55:37 -0400] "GET /.env HTTP/1.1" 403 6315 "-" "Mozilla/5.0 (Window ... show more 84.201.4.212 - - [14/Jul/2026:21:55:37 -0400] "GET /.env HTTP/1.1" 403 6315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇫🇷 [email protected]	2026-07-15 01:54:37 (2 hours ago)	PrestaShop Security Module: Suspicious path detected (/.git)	Web App Attack
Anonymous	2026-07-15 01:49:34 (2 hours ago)	Blocked by ModSec and CSF	Port Scan
🇮🇪 AutosOnShow	2026-07-15 01:26:06 (3 hours ago)	blocked for webapp attack \| path requested: /.git/config \| seen at 2026-07-15 01:25:26.956 \|	Web App Attack
🇬🇧 andypiper	2026-07-15 01:01:32 (3 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack

Showing 1 to 15 of 92 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2001:19f0:4400:78d8:5400:5ff:fe0e:3549

🇺🇸 205.210.31.106

🇵🇭 165.154.58.108

🇺🇸 162.216.150.58

🇭🇰 137.220.158.188

🇮🇳 103.90.159.187

🇺🇸 216.25.89.125

🇨🇳 211.90.188.182

🇧🇷 205.210.31.225

🇧🇪 198.235.24.213

🇩🇪 193.124.20.235

🇺🇸 192.34.164.13

🇵🇱 176.53.159.198

🇺🇸 172.236.126.175

🇫🇮 147.185.133.85

🇺🇸 147.185.132.85

🇺🇸 147.185.132.72

🇨🇳 120.76.202.208

🇩🇪 69.5.169.252

🇩🇪 69.5.169.147