AbuseIPDB » 185.152.66.249
185.152.66.249
This IP was reported 8 times. Confidence of
Abuse
is 36% : ?
ISP
Datapacket Atlanta - Bunny CDN
Usage Type
Data Center/Web Hosting/Transit
ASN
AS60068
Hostname(s)
185-152-66-249.bunnyinfra.net
Domain Name
cdn77.com
Country
🇺🇸
United States of America
City
Atlanta, Georgia
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 185.152.66.249 :
This IP address has been reported a total of
8
times from
7 distinct
sources.
185.152.66.249 was first reported on
January 4th 2026 , and the most recent report was
3 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇪
AutosOnShow
2026-06-03 02:35:05
(3 days ago)
blocked for webapp attack | path requested: /.env | seen at 2026-06-03 02:34:10.333 |
Web App Attack
🇺🇸
TPI-Abuse
2026-05-31 02:13:15
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 185.152.66.249 (185-152-66-249.bunnyinfra.net): ...
show more
(mod_security) mod_security (id:210492) triggered by 185.152.66.249 (185-152-66-249.bunnyinfra.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 22:13:11.130294 2026] [security2:error] [pid 28685:tid 28685] [client 185.152.66.249:24503] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "30daysout.com"] [uri "/.env.qa"] [unique_id "ahuZN9DtFZ6_OvKRlBvTGwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
dominioz
2026-05-31 00:53:49
(6 days ago)
2026-05-31 00:53:19 GET /.env.dev - - 185.152.66.249 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x ...
show more
2026-05-31 00:53:19 GET /.env.dev - - 185.152.66.249 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64) - 404 1440
2026-05-31 00:53:19 GET /.env.staging - - 185.152.66.249 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64) - 404 1440
2026-05-31 00:53:19 GET /.env.production - - 185.152.66.249 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64) - 404 1440
2026-05-31 00:53:19 GET /.env.docker - - 185.152.66.249 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64) - 404 1440
...
show less
Web App Attack
🇧🇪
cmbplf
2026-05-28 07:38:11
(1 week ago)
1.004 requests with url.path *.env
Brute-Force
Bad Web Bot
🇳🇱
e.fierstra
2026-05-28 00:20:00
(1 week ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇧🇷
dominioz
2026-05-27 22:35:41
(1 week ago)
2026-05-27 22:35:26 GET /.env.ini - - 185.152.66.249 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x ...
show more
2026-05-27 22:35:26 GET /.env.ini - - 185.152.66.249 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64) - 404 1440
2026-05-27 22:35:26 GET /api/v3/.env - - 185.152.66.249 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64) - 404 1440
2026-05-27 22:35:26 GET /.env.bak1 - - 185.152.66.249 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64) - 404 1440
2026-05-27 22:35:26 GET /.env.old - - 185.152.66.249 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64) - 404 1440
...
show less
Web App Attack
2026-05-25 07:40:03
(1 week ago)
| Suspicious URL access.
Web App Attack
Hacking
SQL Injection
🇺🇸
xmission.com
2026-01-04 19:02:28
(5 months ago)
Blocked by UFW (TCP on 45774)
Source port: 80
TTL: 51
Packet length: 52
TOS: 0x08
This report (for ...
show more
Blocked by UFW (TCP on 45774)
Source port: 80
TTL: 51
Packet length: 52
TOS: 0x08
This report (for 185.152.66.249) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: