AbuseIPDB » 104.248.169.120

104.248.169.120 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	United Kingdom of Great Britain and Northern Ireland
City	London, England

Report 104.248.169.120

Whois 104.248.169.120

IP Abuse Reports for 104.248.169.120:

This IP address has been reported a total of 41 times from 30 distinct sources. 104.248.169.120 was first reported on November 15th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
urmarcht	2024-11-19 08:20:24 (1 week ago)	Bot attack detected : webscan vurnerability	Web App Attack
rshict	2024-11-18 10:20:10 (2 weeks ago)	Hacking, Brute-Force, Web App Attack	Hacking Brute-Force Web App Attack
RF68	2024-11-16 06:06:23 (2 weeks ago)	104.248.169.120 [15/Nov/2024 * Spam host detected, probing for vulnerabilities]	Web Spam Exploited Host Web App Attack
OK	2024-11-15 06:20:02 (2 weeks ago)	HTTP/HTTPS	Hacking Web App Attack
penjaga BRIN	2024-11-15 06:13:00 (2 weeks ago)	nginx-alfa-240	Web App Attack
TPI-Abuse	2024-11-15 06:09:12 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.248.169.120 (-): 1 in the last 300 secs; Po ... show more(mod_security) mod_security (id:210492) triggered by 104.248.169.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 15 01:09:06.644892 2024] [security2:error] [pid 31023:tid 31023] [client 104.248.169.120:38540] [client 104.248.169.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.20"] [uri "/.env"] [unique_id "ZzblghIlFa1yyhkjSfI0rAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
ANTI SCANNER	2024-11-15 05:53:28 (2 weeks ago)	Scanner : /.env	Web Spam
TPI-Abuse	2024-11-15 05:46:24 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.248.169.120 (-): 1 in the last 300 secs; Po ... show more(mod_security) mod_security (id:210492) triggered by 104.248.169.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 15 00:46:16.737412 2024] [security2:error] [pid 2569380:tid 2569380] [client 104.248.169.120:42864] [client 104.248.169.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.96"] [uri "/.env"] [unique_id "ZzbgKHE8NwWivqkGgoqLsQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
swrlly	2024-11-15 05:45:14 (2 weeks ago)	attempted directly connecting to webserver using origin ip	Web App Attack
whitehoodie	2024-11-15 05:29:55 (2 weeks ago)	AUTOMATED REPORT: Tried to access .env file	Hacking Bad Web Bot Web App Attack
TPI-Abuse	2024-11-15 05:29:09 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.248.169.120 (-): 1 in the last 300 secs; Po ... show more(mod_security) mod_security (id:210492) triggered by 104.248.169.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 15 00:29:03.351422 2024] [security2:error] [pid 638:tid 638] [client 104.248.169.120:52858] [client 104.248.169.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.41"] [uri "/.env"] [unique_id "ZzbcH_g2ptK3VtZG220kmAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
mescribano	2024-11-15 05:10:02 (2 weeks ago)		Bad Web Bot Web App Attack
TPI-Abuse	2024-11-15 04:55:01 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.248.169.120 (-): 1 in the last 300 secs; Po ... show more(mod_security) mod_security (id:210492) triggered by 104.248.169.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 14 23:54:53.412050 2024] [security2:error] [pid 15736:tid 15746] [client 104.248.169.120:58100] [client 104.248.169.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.128"] [uri "/.env"] [unique_id "ZzbUHah8AxtG3Dtcp4-N4wAAAEg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-11-15 04:43:11 (2 weeks ago)	2024/11/15 05:43:10 [error] 30430#30430: 9057857 access forbidden by rule, client: 104.248.169.120, ... show more2024/11/15 05:43:10 [error] 30430#30430: 9057857 access forbidden by rule, client: 104.248.169.120, server: aide.bobelweb.eu, request: "GET /.env HTTP/1.1", host: "163.172.78.48" show less	Brute-Force Web App Attack
barbarella	2024-11-15 04:35:44 (2 weeks ago)	Configuration snooping in .env file (GET /.env)	Hacking Web App Attack