JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.198.40.216

159.198.40.216 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 100%: ?

100%

ISP	Namecheap, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS22612
Hostname(s)	bureaucrats-jink.vpsrdns.web-hosting.com
Domain Name	namecheap.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.198.40.216

Whois 159.198.40.216

IP Abuse Reports for 159.198.40.216:

This IP address has been reported a total of 46 times from 30 distinct sources. 159.198.40.216 was first reported on June 11th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 screwlooseit.com.au	2026-06-16 10:35:34 (6 hours ago)	Blocked by CSF 13 firewall - Rule: config-dotfile US/United States/bureaucrats-jink.vpsrdns.web-host ... show more Blocked by CSF 13 firewall - Rule: config-dotfile US/United States/bureaucrats-jink.vpsrdns.web-hosting.com show less	Web App Attack
🇫🇷 ✨	2026-06-16 03:17:09 (14 hours ago)	Domain : solobreaks.co.uk Rule : env 2026-06-16 03:15:13 *hidden-privacy* GET /.env - 443 - 159. ... show more Domain : solobreaks.co.uk Rule : env 2026-06-16 03:15:13 *hidden-privacy* GET /.env - 443 - 159.198.40.216 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0 https://www.solobreaks.co.uk/.env solobreaks.co.uk 404 0 0 51937 252 611 - - show less	Hacking SQL Injection
🇪🇸 el-brujo	2026-06-16 02:53:47 (14 hours ago)	Cloudflare WAF: Request Path: /.env Request Query: Host: www.elhacker.net userAgent: Mozilla/5.0 (W ... show more Cloudflare WAF: Request Path: /.env Request Query: Host: www.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0 Action: block Source: firewallManaged ASN Description: Namecheap, Inc. Country: US Method: GET Timestamp: 2026-06-16T02:53:47Z ruleId: 23548ee2b36547a1be09bb2c0550c529. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇺🇸 kosada.com	2026-06-15 20:42:10 (20 hours ago)	Web vulnerability probing: /.env	Web App Attack
🇧🇪 voormedia	2026-06-15 18:50:27 (22 hours ago)	Accessed trap at '/.env'	Web App Attack
🇺🇸 conrad10781	2026-06-15 17:04:36 (1 day ago)	nginx-dot-env	Web App Attack
🇬🇧 openstrike.co.uk	2026-06-15 05:13:59 (1 day ago)	3 attacks on env grabbing URLs: GET /.env HTTP/1.1	Hacking
🇩🇪 MusicLibrary	2026-06-14 15:31:43 (2 days ago)	Attempted access to sensitive configuration files (.env, .git, etc.)	Bad Web Bot Web App Attack
🇬🇧 Aetherweb Ark	2026-06-14 14:56:33 (2 days ago)	(mod_security) mod_security (id:949110) triggered by 159.198.40.216 (US/United States/bureaucrats-ji ... show more (mod_security) mod_security (id:949110) triggered by 159.198.40.216 (US/United States/bureaucrats-jink.vpsrdns.web-hosting.com): N in the last X secs show less	Web App Attack
🇩🇪 www.Examensfragen.de	2026-06-14 14:16:07 (2 days ago)		Web Spam Bad Web Bot
Anonymous	2026-06-14 13:53:59 (2 days ago)		Web App Attack
🇦🇺 paulshipley.com.au	2026-06-14 11:47:31 (2 days ago)	[Sun Jun 14 21:47:30.627149 2026] [security2:error] [pid 911792] [client 159.198.40.216:49352] [clie ... show more [Sun Jun 14 21:47:30.627149 2026] [security2:error] [pid 911792] [client 159.198.40.216:49352] [client 159.198.40.216] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "rjryanpartners.com.au"] [uri "/.env"] [unique_id "ai6U0qoS_fBkLBCz5rV2AgAAAAM"], referer: https://www.rjryanpartners.com.au/.env ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 11:35:15 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 159.198.40.216 (bureaucrats-jink.vpsrdns.web-ho ... show more (mod_security) mod_security (id:210492) triggered by 159.198.40.216 (bureaucrats-jink.vpsrdns.web-hosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 07:35:08.696018 2026] [security2:error] [pid 14317:tid 14317] [client 159.198.40.216:56202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rentaroller.com.au"] [uri "/.env"] [unique_id "ai6R7FtwhFAYFDN1zHhIrAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 todix	2026-06-14 10:24:38 (2 days ago)	Web App Attack Exploid from 159.198.40.216	Web App Attack
🇧🇷 Halux	2026-06-14 09:54:27 (2 days ago)	159.198.40.216 Probing protected path or service	Web App Attack

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 40.124.172.146

🇩🇪 213.209.159.56

🇯🇵 212.135.211.50

🇺🇸 184.105.139.85

🇺🇸 162.216.149.176

🇧🇷 129.121.50.86

🇮🇩 103.155.47.102

🇫🇷 91.231.89.150

🇸🇪 90.231.51.54

🇳🇱 89.21.67.163

🇺🇸 66.132.195.61

🇮🇪 54.74.134.78

🇺🇸 195.184.76.215

🇳🇱 185.223.235.60

🇳🇱 176.65.149.201

🇩🇪 167.94.146.59

🇺🇸 162.216.150.213

🇯🇵 160.251.233.185

🇮🇳 122.185.146.18

🇬🇧 101.36.97.88