AbuseIPDB » 162.243.6.146

162.243.6.146 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 71%: ?

71%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 162.243.6.146

Whois 162.243.6.146

IP Abuse Reports for 162.243.6.146:

This IP address has been reported a total of 53 times from 34 distinct sources. 162.243.6.146 was first reported on December 13th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
octageeks.com	2024-12-14 05:06:43 (4 weeks ago)	Wordpress malicious attack:[octablocked]	Web App Attack
service Informatique	2024-12-14 04:00:37 (4 weeks ago)	GET /.env	Web App Attack
JPPO	2024-12-13 16:46:32 (4 weeks ago)	GET /.env or GET //.env with or without prefix /api ...	Web App Attack
Anonymous	2024-12-13 15:46:34 (4 weeks ago)	Malicious activity detected	Hacking Web App Attack
TPI-Abuse	2024-12-13 15:28:16 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 162.243.6.146 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 162.243.6.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 13 10:28:10.273619 2024] [security2:error] [pid 23969:tid 23969] [client 162.243.6.146:33872] [client 162.243.6.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.88"] [uri "/.env"] [unique_id "Z1xSikzk1XZn2XruxDl14wAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Interceptor_HQ	2024-12-13 15:27:41 (4 weeks ago)	request_uri: /.env -- automatic report --	Hacking Brute-Force
TPI-Abuse	2024-12-13 15:10:42 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 162.243.6.146 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 162.243.6.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 13 10:10:39.326199 2024] [security2:error] [pid 3797046:tid 3797046] [client 162.243.6.146:49816] [client 162.243.6.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.100"] [uri "/.env"] [unique_id "Z1xObxyWM9iDjjq1hKaamwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
BlueWire Hosting	2024-12-13 15:10:28 (4 weeks ago)	Scanning for Laravel vulnerabilities	Web App Attack
MPL	2024-12-13 14:56:09 (4 weeks ago)	tcp/443 (4 or more attempts)	Port Scan
Countryman	2024-12-13 14:55:23 (4 weeks ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
TPI-Abuse	2024-12-13 14:54:16 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 162.243.6.146 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 162.243.6.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 13 09:54:10.031073 2024] [security2:error] [pid 16427:tid 16427] [client 162.243.6.146:46468] [client 162.243.6.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.19"] [uri "/.env"] [unique_id "Z1xKklAheCFlQzyPEBr8RgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-12-13 14:41:25 (4 weeks ago)	162.243.6.146 - - [13/Dec/2024:14:41:25 +0000] "GET /.env HTTP/1.1" 404 11 "-" "Mozilla/5.0 Keydrop" ... show more162.243.6.146 - - [13/Dec/2024:14:41:25 +0000] "GET /.env HTTP/1.1" 404 11 "-" "Mozilla/5.0 Keydrop" ... show less	Hacking Web App Attack
Bedios GmbH	2024-12-13 14:38:26 (4 weeks ago)	Login credentials theft attempt	Hacking
TPI-Abuse	2024-12-13 14:33:39 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 162.243.6.146 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 162.243.6.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 13 09:33:31.998834 2024] [security2:error] [pid 22233:tid 22233] [client 162.243.6.146:56520] [client 162.243.6.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.148"] [uri "/.env"] [unique_id "Z1xFu91pd0gZAf1aTmjPugAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
onkeltom	2024-12-13 14:33:23 (4 weeks ago)	Multiple unauthorized connection attempts	Hacking Brute-Force