JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 143.20.97.243

143.20.97.243 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 100%: ?

100%

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS214481
Domain Name	netutils.io
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 143.20.97.243

Whois 143.20.97.243

IP Abuse Reports for 143.20.97.243:

This IP address has been reported a total of 30 times from 24 distinct sources. 143.20.97.243 was first reported on June 14th 2026, and the most recent report was 55 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Skyrider	2026-06-15 21:49:49 (55 minutes ago)	Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 19:28:21 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 143.20.97.243 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 143.20.97.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 15:28:13.542674 2026] [security2:error] [pid 28639:tid 28639] [client 143.20.97.243:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eddysgroup.com"] [uri "/.env.example"] [unique_id "ajBSTVimV0VlVyfR8VR1BwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-15 19:26:08 (3 hours ago)	"GET /.env HTTP/1.1"	Hacking Web App Attack
Anonymous	2026-06-15 17:19:05 (5 hours ago)	Bot / scanning and/or hacking attempts: GET /.env.backup HTTP/1.1, GET /.env.bak HTTP/1.1, GET /appl ... show more Bot / scanning and/or hacking attempts: GET /.env.backup HTTP/1.1, GET /.env.bak HTTP/1.1, GET /application.properties HTTP/1.1, GET /.env.production HTTP/1.1, GET /application.yml HTTP/1.1, GET /backend/.env HTTP/1.1 show less	Hacking Web App Attack
🇳🇱 e.fierstra	2026-06-15 17:12:25 (5 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 Séfora Srl	2026-06-15 15:02:15 (7 hours ago)	Bad user agents ignoring web crawling rules. Draing bandwidth - detected by Fail2Ban in plesk-apache ... show more Bad user agents ignoring web crawling rules. Draing bandwidth - detected by Fail2Ban in plesk-apache-badbot jail show less	Bad Web Bot
Anonymous	2026-06-15 09:55:09 (12 hours ago)	Blocked by ModSec and CSF	Port Scan
🇺🇸 TPI-Abuse	2026-06-15 09:20:18 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 143.20.97.243 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 143.20.97.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 05:20:10.688484 2026] [security2:error] [pid 23502:tid 23502] [client 143.20.97.243:48114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stacyfarm.com"] [uri "/.env"] [unique_id "ai_Dym5EGRd9WqGl5d_WIgAAAFc"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 elcruzado.es	2026-06-15 06:17:45 (16 hours ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 143.20.97.243 (US/Un ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 143.20.97.243 (US/United States/-) show less	Bad Web Bot
🇺🇦 URAN Publishing Service	2026-06-15 05:03:48 (17 hours ago)	143.20.97.243 - - [15/Jun/2026:08:03:47 +0300] "GET /.env HTTP/1.1" 404 3213 "-" "Mozilla/5.0 AppleW ... show more 143.20.97.243 - - [15/Jun/2026:08:03:47 +0300] "GET /.env HTTP/1.1" 404 3213 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" ... show less	Web App Attack
🇧🇪 cmbplf	2026-06-15 04:42:28 (18 hours ago)	108 requests with url.path *secrets.yml	Brute-Force Bad Web Bot
🇺🇸 ipblock.com	2026-06-15 04:02:00 (18 hours ago)	IPBlock protected site ID [3390-wh]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇧🇪 taivas.nl	2026-06-15 02:02:11 (20 hours ago)	Site scraper	Web App Attack
🇫🇷 masterguru	2026-06-15 02:01:20 (20 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. (1100000-135 ... show more BAD BOT - Detected and Blocked.. Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. (1100000-135) show less	Bad Web Bot
🇩🇪 EGP Abuse Dept	2026-06-15 01:28:44 (21 hours ago)	Scanning for web/db/file exploits on www.greendealduurzamezorg.nl	SQL Injection Bad Web Bot Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 150.241.244.100

🇨🇳 140.143.222.240

🇮🇩 103.27.250.27

🇷🇴 80.94.92.164

🇱🇺 64.89.160.135

🇮🇩 223.25.108.2

🇺🇸 162.217.162.103

🇷🇴 80.94.92.187

🇲🇩 77.89.199.242

🇺🇸 63.46.42.51

🇳🇱 45.148.10.147

🇭🇰 43.155.40.91

🇺🇸 35.245.10.229

🇯🇵 8.211.128.112

🇧🇪 198.235.24.245

🇭🇰 165.154.6.224

🇸🇬 152.42.240.74

🇲🇴 125.31.4.70

🇨🇳 120.48.14.72

🇨🇳 116.207.114.251