AbuseIPDB » 143.110.228.242

143.110.228.242 was found in our database!

This IP was reported 428 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 143.110.228.242

Whois 143.110.228.242

IP Abuse Reports for 143.110.228.242:

This IP address has been reported a total of 428 times from 145 distinct sources. 143.110.228.242 was first reported on June 22nd 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
service Informatique	2025-07-13 04:00:37 (5 days ago)	GET /t4	Web App Attack
Anonymous	2025-07-13 00:07:37 (5 days ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
mr_whitehat	2025-07-12 23:35:14 (5 days ago)	Probed for vulnerable web application: request line: /ab2g (Possible exploit:Scanning for Cobalt Str ... show moreProbed for vulnerable web application: request line: /ab2g (Possible exploit:Scanning for Cobalt Strike C2 server) show less	Web App Attack
mnsf	2025-07-12 22:05:03 (5 days ago)	Too many Status 50X (13)	Brute-Force Web App Attack
barbarella	2025-07-12 21:30:42 (5 days ago)	Multiple (7) times attack on https port 443: unsolicited access to Administrative pages (GET /form.h ... show moreMultiple (7) times attack on https port 443: unsolicited access to Administrative pages (GET /form.html) 21:30:43 infected host with malware (GET /upl.php) 21:30:44 unsolicited access to nonexisting pages (GET /t4) 21:30:44 searching Geoip Security Vulnerabilities (GET /geoip/) 21:30:46 hacking attempt (GET /1.php) 21:30:46 SystemBC Malware Activity (GET /systembc/password.php) 21:30:47 unsolicited access to Administrative pages (GET /password.php) show less	Hacking Web App Attack
Anonymous	2025-07-12 19:12:53 (6 days ago)	Fail2Ban Log Report 143.110.228.242 - [12/Jul/2025:21:12:51 +0200] "\x16\x03\x01\x00{\x01\x00\x00w\x ... show moreFail2Ban Log Report 143.110.228.242 - [12/Jul/2025:21:12:51 +0200] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03&\xF5\x08\xE4\xDF-i\x08\xBC\xF5\x1AA`" 403 146 "-" "-" "-" "-" ... show less	Hacking SQL Injection Web App Attack
simpeg-adm.bandung.go.id	2025-07-12 18:14:32 (6 days ago)	143.110.228.242 - - [12/Jul/2025:18:14:30 +0000] "GET /form.html HTTP/1.1" 404 133 "-" "curl/8.1.2"< ... show more143.110.228.242 - - [12/Jul/2025:18:14:30 +0000] "GET /form.html HTTP/1.1" 404 133 "-" "curl/8.1.2" 143.110.228.242 - - [12/Jul/2025:18:14:30 +0000] "GET /upl.php HTTP/1.1" 404 133 "-" "Mozilla/5.0" 143.110.228.242 - - [12/Jul/2025:18:14:31 +0000] "GET /t4 HTTP/1.1" 404 133 "-" "Mozilla/5.0" 143.110.228.242 - - [12/Jul/2025:18:14:31 +0000] "GET /geoip/ HTTP/1.1" 404 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 143.110.228.242 - - [12/Jul/2025:18:14:31 +0000] "GET /favicon.ico HTTP/1.1" 404 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 143.110.228.242 - - [12/Jul/2025:18:14:32 +0000] "GET /1.php HTTP/1.1" 404 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 143.110.228.242 - - [12/Jul/2025:18:14:32 +0000] "GET /systembc/password.php HTTP/1.1" 404 194 "-" "Mozilla/5 ... show less	Web Spam Brute-Force Web App Attack
masterguru	2025-07-12 17:39:36 (6 days ago)	Host header is a numeric IP address. Pattern match "^ (920350-133)	Hacking Bad Web Bot
spufidoo	2025-07-12 16:54:08 (6 days ago)	143.110.228.242 - - [12/Jul/2025:17:54:06 +0100] "GET /upl.php HTTP/1.1" 404 134 "-" "Mozilla/5.0"<b ... show more143.110.228.242 - - [12/Jul/2025:17:54:06 +0100] "GET /upl.php HTTP/1.1" 404 134 "-" "Mozilla/5.0" 143.110.228.242 - - [12/Jul/2025:17:54:07 +0100] "GET /1.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" show less	Web App Attack
Sawasdee	2025-07-12 15:24:10 (6 days ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
Anonymous	2025-07-12 15:14:00 (6 days ago)	Drop from IP address 143.110.228.242 to tcp-port 80	Port Scan
adalbertoreyes.org	2025-07-12 15:13:33 (6 days ago)	CategoryPortScan	Port Scan
Study Bitcoin 🤗	2025-07-12 14:46:25 (6 days ago)	Port probe to tcp/80 (http) [srv129]	Port Scan Bad Web Bot Web App Attack
StopAbuse	2025-07-12 14:13:05 (6 days ago)	tcp/80	Port Scan
2000cn.com.au	2025-07-12 11:26:32 (6 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Bad Web Bot Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩