AbuseIPDB » 104.248.133.94

104.248.133.94 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 65%: ?

65%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	Germany
City	Frankfurt am Main, Hesse

Report 104.248.133.94

Whois 104.248.133.94

IP Abuse Reports for 104.248.133.94:

This IP address has been reported a total of 49 times from 30 distinct sources. 104.248.133.94 was first reported on September 6th 2023, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
myintarweb	2024-11-11 17:57:58 (3 weeks ago)	104.248.133.94 - - [09/Nov/2024:07:48:33 +0000] 443 "GET /.env HTTP/1.1" 404 29078 "-" "Mozilla/5.0 ... show more104.248.133.94 - - [09/Nov/2024:07:48:33 +0000] 443 "GET /.env HTTP/1.1" 404 29078 "-" "Mozilla/5.0 Keydrop" ... show less	Hacking Bad Web Bot Web App Attack
Cynar & Cinny	2024-11-09 16:10:10 (4 weeks ago)	httpd_block_log	Bad Web Bot
TPI-Abuse	2024-11-09 12:08:26 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.248.133.94 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 104.248.133.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 09 07:08:18.895215 2024] [security2:error] [pid 4478:tid 4478] [client 104.248.133.94:49546] [client 104.248.133.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.27"] [uri "/.env"] [unique_id "Zy9Qsv-4VUzB2sty5aSywAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-11-09 11:49:57 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.248.133.94 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 104.248.133.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 09 06:49:50.274254 2024] [security2:error] [pid 21974:tid 21974] [client 104.248.133.94:34682] [client 104.248.133.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.64"] [uri "/.env"] [unique_id "Zy9MXqZx3cqXMxlYZOzDeQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
lindi	2024-11-09 11:40:04 (4 weeks ago)	trying to access .env file ...	Hacking Web App Attack
gumbysoft	2024-11-09 11:31:46 (4 weeks ago)	Too many HTTP Bad Requests	Bad Web Bot
sbk97 (https://sayor.online)	2024-11-09 11:27:18 (4 weeks ago)	GET / HTTP/1.0	Web App Attack
fstap	2024-11-09 11:23:19 (4 weeks ago)	"GET /.env HTTP/1.1"	Bad Web Bot Web App Attack
TPI-Abuse	2024-11-09 11:06:21 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.248.133.94 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 104.248.133.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 09 06:06:14.867474 2024] [security2:error] [pid 14473:tid 14514] [client 104.248.133.94:54856] [client 104.248.133.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.134"] [uri "/.env"] [unique_id "Zy9CJlHdGrCFGEaKLBVXogAAAIM"] show less	Brute-Force Bad Web Bot Web App Attack
MPL	2024-11-09 11:05:59 (4 weeks ago)	tcp/443 (2 or more attempts)	Port Scan
MPL	2024-11-09 10:50:02 (4 weeks ago)	tcp/443 (4 or more attempts)	Port Scan
TPI-Abuse	2024-11-09 10:39:43 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.248.133.94 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 104.248.133.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 09 05:39:38.123543 2024] [security2:error] [pid 22604:tid 22604] [client 104.248.133.94:53328] [client 104.248.133.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.6"] [uri "/.env"] [unique_id "Zy876tNaoBqRRskr5viKVgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Study Bitcoin 🤗	2024-11-09 10:30:46 (4 weeks ago)	Port probe to tcp/443 (https) [srv132]	Port Scan Brute-Force Bad Web Bot Web App Attack
gurnip	2024-11-09 10:25:56 (4 weeks ago)	Vulnerability probe of page /.env, not found on server.	Brute-Force Web App Attack
TPI-Abuse	2024-11-09 10:15:04 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.248.133.94 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 104.248.133.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 09 05:14:57.012725 2024] [security2:error] [pid 22670:tid 22670] [client 104.248.133.94:50020] [client 104.248.133.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.189"] [uri "/.env"] [unique_id "Zy82IUax0x9s2-ugn7NVmgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack