AbuseIPDB » 159.203.42.29

159.203.42.29 was found in our database!

This IP was reported 91 times. Confidence of Abuse is 36%: ?

36%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	Canada
City	Toronto, Ontario

Report 159.203.42.29

Whois 159.203.42.29

IP Abuse Reports for 159.203.42.29:

This IP address has been reported a total of 91 times from 48 distinct sources. 159.203.42.29 was first reported on July 3rd 2021, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
jcbriar	2024-10-15 18:32:34 (1 month ago)	Searching for vulnerable scripts	Hacking Web App Attack
TPI-Abuse	2024-10-15 17:39:11 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 159.203.42.29 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 159.203.42.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 15 13:39:06.456071 2024] [security2:error] [pid 29739:tid 29739] [client 159.203.42.29:36288] [client 159.203.42.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.76"] [uri "/.env"] [unique_id "Zw6ouv92-WGS1zZ0cV9oeQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
onkeltom	2024-10-15 17:37:18 (1 month ago)	Unauthorized connection attempts	Hacking Brute-Force
Anonymous	2024-10-15 17:29:59 (1 month ago)	159.203.42.29 - - [15/Oct/2024:18:29:58 +0100] "GET /.env HTTP/1.1" 400 230 "-" "Mozilla/5.0 Keydrop ... show more159.203.42.29 - - [15/Oct/2024:18:29:58 +0100] "GET /.env HTTP/1.1" 400 230 "-" "Mozilla/5.0 Keydrop" ... show less	Brute-Force Web App Attack
lp	2024-10-15 17:13:33 (1 month ago)	Bot webscan: 1 attempts were recorded from 159.203.42.29 159.203.42.29 "GET /.env HTTP/1.1" 40 ... show moreBot webscan: 1 attempts were recorded from 159.203.42.29 159.203.42.29 "GET /.env HTTP/1.1" 404 1077 "-" "Mozilla/5.0 Keydrop" show less	Port Scan
TPI-Abuse	2024-10-15 16:48:17 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 159.203.42.29 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 159.203.42.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 15 12:48:10.311300 2024] [security2:error] [pid 2783:tid 2783] [client 159.203.42.29:50784] [client 159.203.42.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.48"] [uri "/.env"] [unique_id "Zw6cyq7HuFfUJKjFfVhCGQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
anon333	2024-10-15 16:34:43 (1 month ago)	Hacker syslog review 1729010083	Hacking
Anonymous	2024-10-15 16:18:22 (1 month ago)	[16/Oct/2024:03:18:21 +1100] "GET /.env HTTP/1.1" 404 196	Hacking Web App Attack
brantknudson.org	2024-10-15 15:59:06 (1 month ago)	Client attempted attack using request path '/.env' to honeypot.	Web App Attack
TPI-Abuse	2024-10-15 15:31:23 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 159.203.42.29 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 159.203.42.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 15 11:31:18.190277 2024] [security2:error] [pid 882:tid 882] [client 159.203.42.29:44450] [client 159.203.42.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.147"] [uri "/.env"] [unique_id "Zw6Kxv0WYWzGGgq8qD_dbwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
nv	2024-10-15 15:29:59 (1 month ago)	159.203.42.29 - - [15/Oct/2024:17:29:59 +0200] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 Keydrop ... show more159.203.42.29 - - [15/Oct/2024:17:29:59 +0200] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 Keydrop" show less	Web App Attack
aks4226	2024-10-15 15:15:43 (1 month ago)	Attacking common web applications. (n01)	Web App Attack
Anonymous	2024-10-15 15:11:11 (1 month ago)	Http Port:80 (http_status:403) - /.env - Agent:Mozilla/5.0 Keydrop	Web App Attack
Admins@FBN	2024-10-15 15:10:08 (1 month ago)	FW-PortScan: Traffic Blocked srcport=60426 dstport=443	Port Scan
Admins@FBN	2024-10-15 15:10:08 (1 month ago)	FW-PortScan: Traffic Blocked srcport=60425 dstport=443	Port Scan