AbuseIPDB » 174.138.92.160

174.138.92.160 was found in our database!

This IP was reported 58 times. Confidence of Abuse is 50%: ?

50%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 174.138.92.160

Whois 174.138.92.160

IP Abuse Reports for 174.138.92.160:

This IP address has been reported a total of 58 times from 36 distinct sources. 174.138.92.160 was first reported on December 7th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
RAP	2025-01-05 02:05:21 (2 weeks ago)	2025-01-05 02:05:21 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
diego	2024-12-13 21:13:43 (1 month ago)	Events: TCP SYN Discovery or Flooding, Seen 6 times in the last 10800 seconds	DDoS Attack
service Informatique	2024-12-09 04:00:37 (1 month ago)	GET /.env	Web App Attack
FutureFm	2024-12-08 06:16:00 (1 month ago)	174.138.92.160 - - [08/Dec/2024:00:16:07 +0100] "GET /.env HTTP/1.1" 404 7073 "-" "Mozilla/5.0 Keydr ... show more174.138.92.160 - - [08/Dec/2024:00:16:07 +0100] "GET /.env HTTP/1.1" 404 7073 "-" "Mozilla/5.0 Keydrop" show less	Hacking
BlueWire Hosting	2024-12-08 05:10:14 (1 month ago)	Scanning for Laravel vulnerabilities	Web App Attack
octageeks.com	2024-12-08 05:08:24 (1 month ago)	Wordpress malicious attack:[octablocked]	Web App Attack
service Informatique	2024-12-08 04:00:37 (1 month ago)	GET /.env	Web App Attack
Anonymous	2024-12-08 01:55:17 (1 month ago)	Malicious activity detected	Hacking Web App Attack
TPI-Abuse	2024-12-08 01:36:49 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 174.138.92.160 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 174.138.92.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 07 20:36:44.142798 2024] [security2:error] [pid 32417:tid 32417] [client 174.138.92.160:55836] [client 174.138.92.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.88"] [uri "/.env"] [unique_id "Z1T4LIIWGFSBfrxa0-pjagAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Interceptor_HQ	2024-12-08 01:36:13 (1 month ago)	request_uri: /.env -- automatic report --	Hacking Brute-Force
TPI-Abuse	2024-12-08 01:17:31 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 174.138.92.160 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 174.138.92.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 07 20:17:27.215925 2024] [security2:error] [pid 2185547:tid 2185547] [client 174.138.92.160:59908] [client 174.138.92.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.100"] [uri "/.env"] [unique_id "Z1Tzp2Evc9aCIquB9FYjsQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
lumbermatt_de	2024-12-08 01:03:21 (1 month ago)	Vulnerability exploit attack detected	Web App Attack
TPI-Abuse	2024-12-08 00:59:08 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 174.138.92.160 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 174.138.92.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 07 19:59:01.808459 2024] [security2:error] [pid 31270:tid 31270] [client 174.138.92.160:58254] [client 174.138.92.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.19"] [uri "/.env"] [unique_id "Z1TvVeTViAxZAAKIG5PiPQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-12-08 00:44:52 (1 month ago)	174.138.92.160 - - [08/Dec/2024:00:44:52 +0000] "GET /.env HTTP/1.1" 404 11 "-" "Mozilla/5.0 Keydrop ... show more174.138.92.160 - - [08/Dec/2024:00:44:52 +0000] "GET /.env HTTP/1.1" 404 11 "-" "Mozilla/5.0 Keydrop" ... show less	Hacking Web App Attack
Bedios GmbH	2024-12-08 00:41:32 (1 month ago)	Login credentials theft attempt	Hacking