JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 162.243.194.218

162.243.194.218 was found in our database!

This IP was reported 66 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Secaucus, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 162.243.194.218

Whois 162.243.194.218

IP Abuse Reports for 162.243.194.218:

This IP address has been reported a total of 66 times from 34 distinct sources. 162.243.194.218 was first reported on July 1st 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇹 im	2026-07-09 07:46:20 (2 days ago)		Port Scan
Anonymous	2026-07-09 06:26:54 (2 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇫🇷 GoodOldTOS	2026-07-08 15:12:17 (2 days ago)	Highly suspect IP	Hacking Web App Attack
🇧🇷 dominioz	2026-07-08 07:12:37 (3 days ago)	2026-07-07 09:17:52 GET /.env - - 162.243.194.218 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64) ... show more 2026-07-07 09:17:52 GET /.env - - 162.243.194.218 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/122.0.0.0+Safari/537.36 - 200 1040 2026-07-08 07:12:05 GET /.env - - 162.243.194.218 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/122.0.0.0+Safari/537.36 - 301 574 2026-07-08 07:12:22 GET /_profiler/open file=.env - 162.243.194.218 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/122.0.0.0+Safari/537.36 - 301 574 2026-07-08 07:12:02 GET /phpgraphy/index.php dir=Fotos%20Alexandre - 162.243.194.218 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/122.0.0.0+Safari/537.36 - 404 1987 ... show less	Web App Attack
🇩🇪 BlueWire Hosting	2026-07-08 07:01:47 (3 days ago)	Probing websites for vulnerabilities	Web App Attack SQL Injection
🇺🇸 ambor	2026-07-08 04:18:24 (3 days ago)	Honeypot access: Symfony profiler exploit attempt. Path: /_profiler/phpinfo	Web App Attack
🇩🇪 ger-stg-sifi1	2026-07-08 01:53:01 (3 days ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇫🇮 mnazibo	2026-07-07 23:00:07 (3 days ago)	Date: 08/Jul/2026 01:28:00 \| Reported IP: 162.243.194.218 mod_security \| id: 930130 \| US/group.my_do ... show more Date: 08/Jul/2026 01:28:00 \| Reported IP: 162.243.194.218 mod_security \| id: 930130 \| US/group.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| URIs: /.env \| Logs: Restricted File Access Attempt show less	SQL Injection Brute-Force Bad Web Bot
🇵🇫 www.gregorymariani.com	2026-07-07 22:59:40 (3 days ago)	162.243.194.218 - - [07/Jul/2026:22:59:28 +0000] "GET /.env HTTP/1.1" 200 4389 "-" "Mozilla/5.0 (Win ... show more 162.243.194.218 - - [07/Jul/2026:22:59:28 +0000] "GET /.env HTTP/1.1" 200 4389 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 616 0.002 [upstream-default-backend] [] 10.244.217.152:80 : 10.244.217.131:80 0 : 4389 0.001 : 0.001 404 : 200 53d614c952c3a423ddaea5ee826b1692 162.243.194.218 - - [07/Jul/2026:22:59:33 +0000] "GET /_profiler/phpinfo HTTP/1.1" 200 4389 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 629 0.001 [upstream-default-backend] [] 10.244.217.152:80 : 10.244.217.131:80 0 : 4389 0.000 : 0.001 404 : 200 3391ca3af67781e9dd010e05213312ad 162.243.194.218 - - [07/Jul/2026:22:59:34 +0000] "GET /_profiler/open?file=config/packages/swiftmailer.yaml HTTP/1.1" 200 4389 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 664 0.001 [upstream-default-backend] [] 10.244.217.152:80 : ... show less	Web App Attack
🇩🇪 pltcldvlpr	2026-07-07 21:46:08 (3 days ago)	CMS/framework probe: 162.243.194.218 - - [07/Jul/2026:23:46:07 +0200] "GET /.env HTTP/1.1" 444 0 "-" ... show more CMS/framework probe: 162.243.194.218 - - [07/Jul/2026:23:46:07 +0200] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" asn=14061 org="DigitalOcean, LLC" country=US ... show less	Web App Attack
Anonymous	2026-07-07 11:27:06 (3 days ago)	Bot / scanning and/or hacking attempts: GET /_profiler/phpinfo HTTP/1.1, GET /.env HTTP/1.1, GET / H ... show more Bot / scanning and/or hacking attempts: GET /_profiler/phpinfo HTTP/1.1, GET /.env HTTP/1.1, GET / HTTP/1.1 show less	Hacking Web App Attack
🇨🇭 4server	2026-07-07 00:04:15 (4 days ago)	[TueJul0702:04:07.8738642026][security2:error][pid1475931:tid1476711][client162.243.194.218:0]ModSec ... show more [TueJul0702:04:07.8738642026][security2:error][pid1475931:tid1476711][client162.243.194.218:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"dc-graphicart.com\"][uri\"/.env\"][unique_id\"akxCd95mSkMBJwqsQ_w6nQAAAEY\"] show less	Hacking Web App Attack
🇮🇹 abuseiphack	2026-07-06 23:14:14 (4 days ago)	Automatic report for brute force attack	Bad Web Bot
🇺🇸 conrad10781	2026-07-06 22:09:12 (4 days ago)	nginx-dot-env	Web App Attack
Anonymous	2026-07-06 16:33:00 (4 days ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host

Showing 1 to 15 of 66 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.131.110.3

🇵🇱 128.127.94.140

🇨🇳 101.126.54.36

🇳🇱 87.199.200.149

🇩🇪 87.120.84.174

🇰🇷 43.166.1.243

🇵🇱 194.165.16.165

🇱🇹 141.98.10.142

🇫🇷 130.185.184.12

🇮🇳 117.220.58.95

🇦🇷 38.199.201.33

🇮🇳 122.160.142.194

🇨🇳 119.249.100.109

🇧🇧 65.48.179.91

🇫🇮 2.26.23.218

🇳🇱 193.176.31.223

🇬🇧 193.163.125.2

🇧🇷 172.253.234.21

🇮🇳 103.123.226.138

🇩🇪 85.215.138.48