AbuseIPDB » 159.203.60.59

159.203.60.59 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 28%: ?

28%

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 159.203.60.59

Whois 159.203.60.59

IP Abuse Reports for 159.203.60.59:

This IP address has been reported a total of 43 times from 31 distinct sources. 159.203.60.59 was first reported on August 3rd 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
privacy.com.de	2024-08-30 16:58:55 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Hacking Web App Attack
TPI-Abuse	2024-08-07 10:51:40 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 159.203.60.59 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 159.203.60.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 07 06:51:33.272087 2024] [security2:error] [pid 26400:tid 26400] [client 159.203.60.59:57570] [client 159.203.60.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "julecarey.com"] [uri "/config/.env"] [unique_id "ZrNRtS4aVaySMTLyyrIzWgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
IRISIO	2024-08-07 07:19:46 (1 month ago)	scans/SQL injection/spam posts : 47 queries	SQL Injection Web App Attack
Ba-Yu	2024-08-07 06:13:16 (1 month ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
polycoda	2024-08-06 23:39:00 (1 month ago)	Probes for /.env files everywhere	Hacking Web App Attack
FeG Deutschland	2024-08-06 22:38:01 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities - 13	Exploited Host Web App Attack
Hirte	2024-08-06 17:29:19 (1 month ago)	SS1: Web Attack GET /wp-config.php	Web Spam Hacking Bad Web Bot Web App Attack
TPI-Abuse	2024-08-06 16:20:21 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 159.203.60.59 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 159.203.60.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 06 12:20:14.767093 2024] [security2:error] [pid 3197:tid 3281] [client 159.203.60.59:38000] [client 159.203.60.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "liquido.cocoonprojects.com"] [uri "/config/.env"] [unique_id "ZrJNPkMmmvvsmUMVaKWwCwAAAI4"] show less	Brute-Force Bad Web Bot Web App Attack
privacy.com.de	2024-08-06 15:13:31 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Hacking Web App Attack
backslash	2024-08-06 06:22:36 (1 month ago)		Bad Web Bot
TPI-Abuse	2024-08-05 23:38:25 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 159.203.60.59 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 159.203.60.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 05 19:38:19.878921 2024] [security2:error] [pid 23973:tid 24168] [client 159.203.60.59:47454] [client 159.203.60.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kerrfamilyassociation.com"] [uri "/config/.env"] [unique_id "ZrFia7elXM3NReGVZvZ1kwAAAdU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-08-05 16:42:00 (1 month ago)	Excessive crawling/scraping. Vulnerable file probing.	Brute-Force Bad Web Bot Web App Attack
Anymous	2023-08-28 00:18:25 (1 year ago)	participation in dns ddos attack	DDoS Attack
Anymous	2023-08-27 00:13:23 (1 year ago)	participation in dns ddos attack	DDoS Attack
Cynar & Cinny	2023-08-26 22:40:48 (1 year ago)	ufw_block_log_banned	Port Scan