AbuseIPDB » 167.99.243.148

167.99.243.148 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 22%: ?

22%

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	Germany
City	Frankfurt am Main, Hessen

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 167.99.243.148

Whois 167.99.243.148

IP Abuse Reports for 167.99.243.148:

This IP address has been reported a total of 7 times from 5 distinct sources. 167.99.243.148 was first reported on September 9th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Acardus	2024-09-09 18:30:01 (4 weeks ago)	Honeypot Hit: @2024-09-09 20:20:13 GET-Request to: 'https' on URI: &# ... show moreHoneypot Hit: @2024-09-09 20:20:13 GET-Request to: 'https' on URI: '/.env' with User-Agent: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36' and Payload: 'not set' show less	Bad Web Bot Web App Attack
sid3windr	2024-09-09 18:28:18 (4 weeks ago)	GET /.env (Tarpitted for , wasted 0B)	Web App Attack
TPI-Abuse	2024-09-09 18:21:27 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 167.99.243.148 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 167.99.243.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 09 14:21:21.262770 2024] [security2:error] [pid 3576018:tid 3576059] [client 167.99.243.148:38884] [client 167.99.243.148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.81"] [uri "/.env"] [unique_id "Zt88oYxEMDDHhff6Ys2lLAAAAMY"] show less	Brute-Force Bad Web Bot Web App Attack
kkeyser	2024-09-09 18:20:14 (4 weeks ago)	GET /.env HTTP/1.1	Web App Attack
TPI-Abuse	2024-09-09 18:03:45 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 167.99.243.148 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 167.99.243.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 09 14:03:37.629375 2024] [security2:error] [pid 15684:tid 15684] [client 167.99.243.148:50742] [client 167.99.243.148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.151"] [uri "/.env"] [unique_id "Zt84eWbeETfL6IRCramyhwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
MPL	2024-09-09 17:53:47 (4 weeks ago)	tcp/443	Port Scan
MPL	2024-09-09 17:53:47 (4 weeks ago)	tcp/443	Port Scan