JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 143.198.239.241

143.198.239.241 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 84%: ?

84%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 143.198.239.241

Whois 143.198.239.241

IP Abuse Reports for 143.198.239.241:

This IP address has been reported a total of 13 times from 13 distinct sources. 143.198.239.241 was first reported on June 17th 2026, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-06-17 14:32:04 (22 hours ago)	tcp port scan (10 or more attempts)	Port Scan
🇺🇸 mccsoft.io	2026-06-17 14:11:28 (22 hours ago)	Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ... show more Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received). show less	Bad Web Bot Web App Attack
🇹🇭 Sawasdee	2026-06-17 09:06:13 (1 day ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇫🇷 vincent_EUDIER	2026-06-17 08:20:00 (1 day ago)	SURICATA HTTP unable to match response to request	Hacking
🇺🇸 xmission.com	2026-06-17 07:29:32 (1 day ago)	Blocked by UFW (TCP on 2078) Source port: 44836 TTL: 54 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 2078) Source port: 44836 TTL: 54 Packet length: 60 TOS: 0x08 This report (for 143.198.239.241) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇷 Threat.live	2026-06-17 07:00:10 (1 day ago)	Suspicious Connection Attempts	Brute-Force
🇺🇸 donarev419	2026-06-17 05:06:17 (1 day ago)	Port scan detected on port 2077 (connection without data transfer)	Port Scan
🇺🇸 masterguru	2026-06-17 03:46:46 (1 day ago)	Host header is a numeric IP address. Pattern match "^ (920350-164)	Hacking Bad Web Bot
🇪🇸 yvoictra	2026-06-17 03:16:00 (1 day ago)	143.198.239.241 - - [17/Jun/2026:05:15:46 +0200] "GET /.git/HEAD HTTP/1.1" 404 134 "-" "Mozilla/5.0 ... show more 143.198.239.241 - - [17/Jun/2026:05:15:46 +0200] "GET /.git/HEAD HTTP/1.1" 404 134 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 143.198.239.241 - - [17/Jun/2026:05:15:52 +0200] "GET /.git/refs/heads/master HTTP/1.1" 404 134 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 143.198.239.241 - - [17/Jun/2026:05:15:54 +0200] "GET /.git/refs/heads/main HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 143.198.239.241 - - [17/Jun/2026:05:15:56 +0200] "GET /.git/index HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0" 143.198.239.241 - - [17/Jun/2026:05:15:59 +0200] "GET /.env HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36" ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-17 01:51:37 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 143.198.239.241 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 143.198.239.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 21:51:31.717133 2026] [security2:error] [pid 7113:tid 7113] [client 143.198.239.241:57330] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.152"] [uri "/.git/config"] [unique_id "ajH9o2_DXL9BDD7FU-8F1gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 kivitendo.de	2026-06-17 01:27:19 (1 day ago)	[Wed Jun 17 03:27:25.921812 2026] [authz_core:error] [pid 257387:tid 257395] [client 143.198.239.241 ... show more [Wed Jun 17 03:27:25.921812 2026] [authz_core:error] [pid 257387:tid 257395] [client 143.198.239.241:48626] AH01630: client denied by server configuration: /var/www/kivitendo-erp/.git/HEAD [Wed Jun 17 03:27:30.908130 2026] [authz_core:error] [pid 257387:tid 257406] [client 143.198.239.241:48658] AH01630: client denied by server configuration: /var/www/kivitendo-erp/.git/config ... show less	Brute-Force Web App Attack
🇷🇸 Scan	2026-06-17 01:22:27 (1 day ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇩🇪 Admins@FBN	2026-06-17 00:25:16 (1 day ago)	FW-PortScan: Traffic Blocked srcport=60212 dstport=443	Port Scan

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 177.229.197.38

🇳🇱 104.248.198.114

🇺🇸 91.230.168.13

🇺🇸 2607:f8b0:4001:c20::121

🇭🇰 199.45.154.157

🇺🇸 162.216.150.50

🇺🇸 157.245.1.7

🇮🇳 157.119.168.54

🇫🇮 147.185.133.229

🇧🇷 129.121.42.131

🇨🇳 123.191.156.15

🇭🇰 118.193.38.26

🇺🇸 91.230.168.23

🇺🇸 65.49.1.211

🇫🇷 51.38.224.5

🇸🇬 47.84.141.125

🇺🇸 20.169.104.211

🇷🇺 213.180.203.116

🇿🇦 197.184.116.129

🇭🇳 181.78.45.98