JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 145.223.104.160

145.223.104.160 was found in our database!

This IP was reported 110 times. Confidence of Abuse is 100%: ?

100%

ISP	Brander Group Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS47583
Domain Name	brandergroup.net
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 145.223.104.160

Whois 145.223.104.160

IP Abuse Reports for 145.223.104.160:

This IP address has been reported a total of 110 times from 50 distinct sources. 145.223.104.160 was first reported on May 31st 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 decisionconcepts	2026-06-08 13:43:08 (6 days ago)	145.223.104.160 - - [08/Jun/2026:06:43:07 -0700] "GET /api/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 ( ... show more 145.223.104.160 - - [08/Jun/2026:06:43:07 -0700] "GET /api/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 145.223.104.160 - - [08/Jun/2026:06:43:07 -0700] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" show less	Brute-Force SSH
🇬🇧 WebNiraj	2026-06-08 12:39:24 (6 days ago)	(mod_security) mod_security (id:949110) triggered by 145.223.104.160 (US/United States/-): 5 in the ... show more (mod_security) mod_security (id:949110) triggered by 145.223.104.160 (US/United States/-): 5 in the last 3600 secs [SIGMA] show less	Brute-Force
🇫🇷 masterguru	2026-06-08 10:14:02 (6 days ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-195)	Hacking Web App Attack
Anonymous	2026-06-08 05:37:05 (6 days ago)	(caddyscan) Scanner path probe from 145.223.104.160 (US/United States/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 145.223.104.160 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 145.223.104.160 - - [08/Jun/2026:05:37:01 +0000] "GET /api/.env HTTP/1.1" [REDACTED] 200 2627 145.223.104.160 - - [08/Jun/2026:05:37:01 +0000] "GET /core/.env HTTP/1.1" [REDACTED] 200 2627 145.223.104.160 - - [08/Jun/2026:05:37:01 +0000] "GET /admin/.env HTTP/1.1" [REDACTED] 200 2627 145.223.104.160 - - [08/Jun/2026:05:37:01 +0000] "GET /app/.env HTTP/1.1" [REDACTED] 200 2627 145.223.104.160 - - [08/Jun/2026:05:37:01 +0000] "GET /backend/.env HTTP/1.1" show less	Port Scan
🇫🇮 as211431.net	2026-06-08 02:40:46 (6 days ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Bedios GmbH	2026-06-08 02:34:32 (6 days ago)	Login credentials theft attempt	Hacking
🇫🇷 Feelautom	2026-06-07 22:20:49 (6 days ago)	[FeelAutom Auto-Ban] AI Analyst: PathScan sur fichiers .env (9 tentatives) et score élevé (180/200) ... show more [FeelAutom Auto-Ban] AI Analyst: PathScan sur fichiers .env (9 tentatives) et score élevé (180/200) (Score: 280) show less	Port Scan
🇺🇸 JustMeHere	2026-06-07 18:40:38 (1 week ago)	[Sun Jun 07 14:40:34.458047 2026] [security2:error] [pid 81259:tid 81383] [client 145.223.104.160:19 ... show more [Sun Jun 07 14:40:34.458047 2026] [security2:error] [pid 81259:tid 81383] [client 145.223.104.160:19920] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "yorknation.com"] [uri "/backend/.env"] [unique_id "aiW7Il3YkfwOdVlpLBGsGQAAAIU"] ... show less	Web App Attack
🇩🇪 bescared	2026-06-07 13:50:10 (1 week ago)	F2B - Malicious activity detected. URL Probing. -8ff06ede-	Hacking Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-06-07 12:51:59 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 masterguru	2026-06-07 11:48:08 (1 week ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇫🇷 dynamix	2026-06-07 07:53:53 (1 week ago)	Multiple WAF Violations	Web App Attack
🇺🇸 conrad10781	2026-06-07 03:58:36 (1 week ago)	nginx-dot-env	Web App Attack
Anonymous	2026-06-07 02:51:16 (1 week ago)	(caddyscan) Scanner path probe from 145.223.104.160 (US/United States/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 145.223.104.160 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 145.223.104.160 - - [07/Jun/2026:02:51:11 +0000] "GET /backend/.env HTTP/1.1" [REDACTED] 200 2627 145.223.104.160 - - [07/Jun/2026:02:51:11 +0000] "GET /new/.env HTTP/1.1" [REDACTED] 200 2627 145.223.104.160 - - [07/Jun/2026:02:51:11 +0000] "GET /api/.env HTTP/1.1" [REDACTED] 200 2627 145.223.104.160 - - [07/Jun/2026:02:51:11 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 145.223.104.160 - - [07/Jun/2026:02:51:11 +0000] "GET /app/.env HTTP/1.1" show less	Port Scan
🇲🇾 Rizzy	2026-06-06 22:41:48 (1 week ago)	Multiple WAF Violations	Brute-Force Web App Attack

Showing 1 to 15 of 110 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 85.217.140.3

🇷🇺 81.177.101.45

🇺🇸 45.79.190.10

🇺🇸 172.69.31.110

🇦🇷 167.250.118.3

🇮🇷 151.232.185.249

🇨🇳 117.187.180.20

🇨🇳 117.34.85.168

🇳🇴 104.250.204.20

🇳🇱 91.92.241.196

🇺🇸 66.132.172.189

🇸🇬 47.128.122.100

🇺🇸 192.241.141.178

🇭🇰 165.154.41.232

🇷🇺 132.243.18.24

🇨🇳 121.61.2.40

🇷🇺 46.8.246.27

🇺🇸 35.252.146.203

🇳🇱 31.14.32.6

🇨🇳 27.21.25.110