JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

154.216.20.249

Neutral Activity

Abuse confidence score ?

0% Low Risk

173 reports

81 reporters · latest 1 year ago

ISP	Wave Broadband
Usage Type	Fixed Line ISP
ASN	AS11404
Domain Name	astound.com
Country	🇺🇸 United States of America
City	Silverton, Oregon

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

154.216.20.249 has been reported 173 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 154.216.20.249

This IP address has been reported a total of 173 times from 81 distinct sources. 154.216.20.249 was first reported on October 18th 2023, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 yun yan	2024-10-05 03:43:01 (1 year ago)	scan: HTTP Sensitive information Scanning	Port Scan
🇪🇸 Gem	2024-09-06 22:33:55 (2 years ago)	Unauthorized web scan.	Web App Attack
🇺🇦 URAN Publishing Service	2024-09-03 03:15:29 (2 years ago)	154.216.20.249 - - [03/Sep/2024:06:15:27 +0300] "GET /.env HTTP/1.1" 404 494 "-" "Mozilla/5.0 (Linux ... show more 154.216.20.249 - - [03/Sep/2024:06:15:27 +0300] "GET /.env HTTP/1.1" 404 494 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 154.216.20.249 - - [03/Sep/2024:06:15:29 +0300] "GET /.env HTTP/1.1" 404 3081 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" ... show less	Web App Attack
🇸🇪 webbfabriken	2024-09-03 00:34:41 (2 years ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbf ... show more spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabiken Security API - WFSecAPI show less	Web Spam
🇦🇺 ozisp.com.au	2024-09-03 00:24:49 (2 years ago)	HK_null_<33>1725323086 [1:2034508:1] ET SCAN Laravel Debug Mode Information Disclosure Probe Inbound ... show more HK_null_<33>1725323086 [1:2034508:1] ET SCAN Laravel Debug Mode Information Disclosure Probe Inbound [Classification: Attempted Information Leak] [Priority: 2] {TCP} 154.216.20.249:59872 show less	Hacking
🇪🇸 el-brujo	2024-09-02 21:41:35 (2 years ago)	Cloudflare WAF: Request Path: /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php Request Query: Ho ... show more Cloudflare WAF: Request Path: /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php Request Query: Host: ns2.elhacker.net userAgent: python-requests/2.25.1 Action: block Source: firewallManaged ASN Description: NETRESEARCH Country: HK Method: GET Timestamp: 2024-09-02T21:41:35Z ruleId: db1f213645904ab9b16b227b4a6a7b3a. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2024-09-02 21:41:13 (2 years ago)	02/Sep/2024:23:41:12.730784 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 02/Sep/2024:23:41:12.730784 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 154.216.20.249] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.97.95.111"] [uri "/.env"] [unique_id "ZtYw-CKRwa474Wav--QZpgAAAHU"] ... show less	Hacking Web App Attack
Anonymous	2024-09-02 14:33:20 (2 years ago)	2024/09/02 16:33:19 [error] 19495#19495: 3184701 access forbidden by rule, client: 154.216.20.249, ... show more 2024/09/02 16:33:19 [error] 19495#19495: 3184701 access forbidden by rule, client: 154.216.20.249, server: _, request: "GET /.env HTTP/1.1", host: "212.83.182.103" show less	Brute-Force Web App Attack
Anonymous	2024-09-02 11:29:49 (2 years ago)	[01/Sep/2024:13:20:31 -0400] \"GET /.env HTTP/1.1\" \"Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; H ... show more [01/Sep/2024:13:20:31 -0400] \"GET /.env HTTP/1.1\" \"Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30\" [01/Sep/2024:13:20:32 -0400] \"POST / HTTP/1.1\" \"Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30\" [01/Sep/2024:13:20:34 -0400] \"GET /.env HTTP/1.1\" \"Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30\" [01/Sep/2024:13:20:36 -0400] \"POST / HTTP/1.1\" \"Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30\" [01/Sep/2024:13:20:40 -0400] \"GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1\" \"python-requests/2. show less	Hacking
🇭🇰 mutebot.net	2024-09-02 01:23:00 (2 years ago)	Tried access sensitive path: /.env	Hacking Bad Web Bot
Anonymous	2024-09-01 09:52:11 (2 years ago)	[31/Aug/2024:06:36:56 -0400] \"GET /.env HTTP/1.1\" \"Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; H ... show more [31/Aug/2024:06:36:56 -0400] \"GET /.env HTTP/1.1\" \"Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30\" [31/Aug/2024:06:36:57 -0400] \"POST / HTTP/1.1\" \"Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30\" [31/Aug/2024:06:36:58 -0400] \"GET /.env HTTP/1.1\" \"Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30\" [31/Aug/2024:06:36:59 -0400] \"POST / HTTP/1.1\" \"Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30\" [31/Aug/2024:06:37:12 -0400] \"GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1\" \"python-requests/2. show less	Hacking
🇦🇺 ozisp.com.au	2024-08-31 15:23:51 (2 years ago)	null_null_<33>1725117827 [1:2034508:1] ET SCAN Laravel Debug Mode Information Disclosure Probe Inbou ... show more null_null_<33>1725117827 [1:2034508:1] ET SCAN Laravel Debug Mode Information Disclosure Probe Inbound [Classification: Attempted Information Leak] [Priority: 2] {TCP} 154.216.20.249:64873 show less	Hacking
🇦🇺 ozisp.com.au	2024-08-31 09:04:45 (2 years ago)	null_null_<33>1725095082 [1:2031502:4] ET INFO Request to Hidden Environment File - Inbound [Classif ... show more null_null_<33>1725095082 [1:2031502:4] ET INFO Request to Hidden Environment File - Inbound [Classification: Misc activity] [Priority: 3] {TCP} 154.216.20.249:63326 show less	Hacking
🇸🇪 webbfabriken	2024-08-31 08:30:16 (2 years ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbf ... show more spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabiken Security API - WFSecAPI show less	Web Spam
🇦🇺 ozisp.com.au	2024-08-31 07:30:36 (2 years ago)	null_null_<33>1725089433 [1:2031502:4] ET INFO Request to Hidden Environment File - Inbound [Classif ... show more null_null_<33>1725089433 [1:2031502:4] ET INFO Request to Hidden Environment File - Inbound [Classification: Misc activity] [Priority: 3] {TCP} 154.216.20.249:50816 show less	Hacking

Showing 1 to 15 of 173 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.96

🇸🇪 195.178.191.5

🇺🇸 156.232.10.218

🇫🇷 91.196.152.172

🇺🇸 45.79.207.129

🇺🇸 35.237.154.206

🇰🇷 34.64.127.68

🇻🇪 190.73.25.11

🇨🇳 111.192.52.67

🇫🇷 104.23.225.190

🇺🇸 100.28.153.226

🇳🇱 91.92.241.57

🇱🇹 62.60.130.201

🇰🇷 59.7.131.145

🇫🇷 51.91.96.79

🇺🇸 50.83.205.22

🇩🇪 167.94.146.47

🇨🇳 116.179.32.49

🇨🇳 111.19.212.140

🇵🇰 103.26.83.28