AbuseIPDB » 142.93.221.135

142.93.221.135 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 48%: ?

48%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	India
City	Doddaballapura, Karnataka

Report 142.93.221.135

Whois 142.93.221.135

IP Abuse Reports for 142.93.221.135:

This IP address has been reported a total of 45 times from 31 distinct sources. 142.93.221.135 was first reported on November 3rd 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Steptoe	2024-11-07 14:38:38 (1 month ago)	Attack.LocalFileInclusion.132: GET /.env	Hacking
rtbh.com.tr	2024-11-04 20:53:34 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
octageeks.com	2024-11-04 05:06:21 (1 month ago)	Wordpress malicious attack:[octablocked]	Web App Attack
rtbh.com.tr	2024-11-03 20:53:33 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2024-11-03 13:17:14 (1 month ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
NotACaptcha	2024-11-03 13:04:02 (1 month ago)	webserver:443 [03/Nov/2024] "GET / HTTP/1.0" 400 528 webserver:443 [03/Nov/2024] "GET /.env ... show morewebserver:443 [03/Nov/2024] "GET / HTTP/1.0" 400 528 webserver:443 [03/Nov/2024] "GET /.env HTTP/1.1" 403 5043 "-" "Mozilla/5.0 Keydrop" show less	SQL Injection Web App Attack
TPI-Abuse	2024-11-03 13:02:06 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 142.93.221.135 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 142.93.221.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 03 08:01:59.571881 2024] [security2:error] [pid 17319:tid 17332] [client 142.93.221.135:39794] [client 142.93.221.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.18"] [uri "/.env"] [unique_id "Zyd0R6n5KOdbEp4GU_cCLQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Admins@FBN	2024-11-03 12:37:32 (1 month ago)	FW-PortScan: Traffic Blocked srcport=42630 dstport=443	Port Scan
Admins@FBN	2024-11-03 12:37:32 (1 month ago)	FW-PortScan: Traffic Blocked srcport=42629 dstport=443	Port Scan
Trueforce Threat Report	2024-11-03 12:25:45 (1 month ago)	Automated report, trolling for resource vulnerabilities	Bad Web Bot Web App Attack
TPI-Abuse	2024-11-03 12:24:55 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 142.93.221.135 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 142.93.221.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 03 07:24:48.679435 2024] [security2:error] [pid 3611:tid 3611] [client 142.93.221.135:45238] [client 142.93.221.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.52"] [uri "/.env"] [unique_id "ZydrkNknQFQmabw9XZ20rwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Study Bitcoin 🤗	2024-11-03 11:58:48 (1 month ago)	Port probe to tcp/443 (https) [srv133]	Port Scan Brute-Force Bad Web Bot Web App Attack
Shadymint	2024-11-03 11:53:08 (1 month ago)	url probing from IP marked as abusive	Web App Attack
MPL	2024-11-03 11:48:13 (1 month ago)	tcp/443 (2 or more attempts)	Port Scan
apitree	2024-11-03 11:33:37 (1 month ago)	suspicious behavior judging by the logs from the server	Phishing Port Scan Hacking Spoofing Bad Web Bot