JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.220.96.243

158.220.96.243 was found in our database!

This IP was reported 199 times. Confidence of Abuse is 0%: ?

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3343665.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.220.96.243

Whois 158.220.96.243

IP Abuse Reports for 158.220.96.243:

This IP address has been reported a total of 199 times from 96 distinct sources. 158.220.96.243 was first reported on November 5th 2023, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Linuxmalwarehuntingnl	2024-07-01 10:39:53 (2 years ago)	Unauthorized connection attempt	Brute-Force
🇩🇪 Hydra-Shield.fr	2024-06-23 04:14:40 (2 years ago)	Directory Traversal on: /.env	Web App Attack
🇨🇭 filou812	2024-06-23 04:12:17 (2 years ago)	urls tried are "/.env.save", "/.env.dev", "/.env.bak", "/.env.prod", "/.env.stage"	Web App Attack
Anonymous	2024-06-22 23:27:07 (2 years ago)	Aggressive web scan	Web App Attack
🇳🇱 Savvii	2024-06-22 19:10:52 (2 years ago)	20 attempts against mh-misbehave-ban on redirect	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-06-21 17:51:18 (2 years ago)	wp admin page access attempt ...	Hacking Web App Attack
🇺🇸 TPI-Abuse	2024-05-31 07:14:45 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 158.220.96.243 (vmi1506364.contaboserver.net): ... show more (mod_security) mod_security (id:210492) triggered by 158.220.96.243 (vmi1506364.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 31 03:14:39.516627 2024] [security2:error] [pid 13464] [client 158.220.96.243:52386] [client 158.220.96.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aperturecontrols.com"] [uri "/.env"] [unique_id "Zll437wMk2YXAwX5JLH_KwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-05-31 05:55:31 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 158.220.96.243 (vmi1506364.contaboserver.net): ... show more (mod_security) mod_security (id:210492) triggered by 158.220.96.243 (vmi1506364.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 31 01:55:24.526904 2024] [security2:error] [pid 30913] [client 158.220.96.243:41070] [client 158.220.96.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "andrewweigel.name"] [uri "/.env"] [unique_id "ZllmTCz0WmTG-AU5g8xegQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-05-31 04:47:04 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 158.220.96.243 (vmi1506364.contaboserver.net): ... show more (mod_security) mod_security (id:210492) triggered by 158.220.96.243 (vmi1506364.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 31 00:46:58.624668 2024] [security2:error] [pid 22235] [client 158.220.96.243:59212] [client 158.220.96.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amatosdrywall.com"] [uri "/.env"] [unique_id "ZllWQqSo_Bh-5K10XORsUAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-05-30 22:24:18 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 158.220.96.243 (vmi1506364.contaboserver.net): ... show more (mod_security) mod_security (id:210492) triggered by 158.220.96.243 (vmi1506364.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 30 18:24:15.427762 2024] [security2:error] [pid 10856] [client 158.220.96.243:56934] [client 158.220.96.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ad1soundstudio.darkalleyproductions.com"] [uri "/.env"] [unique_id "Zlj8j2NRcXcHWaSWo9xZBQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-05-30 22:09:12 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 158.220.96.243 (vmi1506364.contaboserver.net): ... show more (mod_security) mod_security (id:210492) triggered by 158.220.96.243 (vmi1506364.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 30 18:09:06.213792 2024] [security2:error] [pid 27497] [client 158.220.96.243:50974] [client 158.220.96.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "acquivest.net"] [uri "/.env"] [unique_id "Zlj5Ajip3jZjrL7k8sAo8wAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-05-30 21:15:43 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 158.220.96.243 (vmi1506364.contaboserver.net): ... show more (mod_security) mod_security (id:210492) triggered by 158.220.96.243 (vmi1506364.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 30 17:15:40.218553 2024] [security2:error] [pid 11886] [client 158.220.96.243:37160] [client 158.220.96.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abuscalledfreedom.com"] [uri "/.env"] [unique_id "ZljsfLWddfL242jsN5uoTAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 tg_de	2024-05-30 15:55:05 (2 years ago)	97 attempts since 02.04.2024 04:07:50 UTC - last search for: /	Web App Attack
🇺🇸 TPI-Abuse	2024-05-30 15:01:57 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 158.220.96.243 (vmi1506364.contaboserver.net): ... show more (mod_security) mod_security (id:210492) triggered by 158.220.96.243 (vmi1506364.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 30 11:01:48.928505 2024] [security2:error] [pid 4496] [client 158.220.96.243:43782] [client 158.220.96.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4give-n-hearts.org"] [uri "/.env"] [unique_id "ZliU3BPse6UWYmtZXNBaCAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2024-05-30 12:23:38 (2 years ago)	176 requests to *.env	Brute-Force Bad Web Bot

Showing 1 to 15 of 199 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.53.200.73

🇬🇧 163.5.138.109

🇺🇸 74.125.76.17

🇳🇱 2a00:1450:4013:c00::129

🇮🇩 210.79.142.230

🇺🇸 195.184.76.108

🇳🇱 195.178.110.104

🇧🇬 185.255.212.178

🇮🇹 172.253.12.149

🇨🇳 115.190.160.80

🇺🇸 66.132.195.93

🇺🇸 66.132.195.67

🇸🇬 43.172.197.229

🇺🇸 37.140.223.113

🇬🇧 35.203.210.205

🇺🇸 207.90.244.28

🇧🇩 203.76.222.184

🇺🇸 195.184.76.135

🇺🇸 195.184.76.88

🇿🇦 169.239.183.232