AbuseIPDB » 188.166.160.72

188.166.160.72 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 43%: ?

43%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 188.166.160.72

Whois 188.166.160.72

IP Abuse Reports for 188.166.160.72:

This IP address has been reported a total of 50 times from 30 distinct sources. 188.166.160.72 was first reported on December 3rd 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rshict	2024-12-05 18:37:57 (1 month ago)	Hacking, Brute-Force, Web App Attack	Hacking Brute-Force Web App Attack
service Informatique	2024-12-04 04:00:37 (1 month ago)	GET /.env	Web App Attack
TPI-Abuse	2024-12-03 12:17:06 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 188.166.160.72 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 188.166.160.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 03 07:17:02.933206 2024] [security2:error] [pid 8103:tid 8103] [client 188.166.160.72:40238] [client 188.166.160.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.13"] [uri "/.env"] [unique_id "Z072vpjvbUBt8iGtVPbuhAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
sdos.es	2024-12-03 12:13:41 (1 month ago)	"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env"	Web App Attack
Harold Wong	2024-12-03 12:05:05 (1 month ago)	$f2bV_matches	Brute-Force
Anonymous	2024-12-03 11:59:29 (1 month ago)	fail2ban_hh apache-modsecurity [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [uri "/.env"]	Web App Attack
TPI-Abuse	2024-12-03 11:52:27 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 188.166.160.72 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 188.166.160.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 03 06:52:23.730314 2024] [security2:error] [pid 6377:tid 6377] [client 188.166.160.72:37396] [client 188.166.160.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.146"] [uri "/.env"] [unique_id "Z07w94u8KcUhKqU35Ro_OgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-12-03 11:51:33 (1 month ago)	Bot / scanning and/or hacking attempts: GET / HTTP/1.0, GET /.env HTTP/1.1	Hacking Web App Attack
WebRanger	2024-12-03 11:51:14 (1 month ago)	GET /.env HTTP/1.1 403 146 "- GET /.env HTTP/1.1" 403 146 "-" "Mozilla/5.0 Keydrop" "-	Web App Attack
sid3windr	2024-12-03 11:40:20 (1 month ago)	GET /.env (Tarpitted for , wasted 0B)	Web App Attack
chronos	2024-12-03 11:31:53 (1 month ago)	[AUTORAVALT][[03/12/2024 - 08:31:53 -03:00 UTC] Attack from [DigitalOcean Network Operations]< ... show more[AUTORAVALT][[03/12/2024 - 08:31:53 -03:00 UTC] Attack from [DigitalOcean Network Operations] [188.166.160.72]-[RANGE:188.166.160.0 - 188.166.167.255] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> CMS ] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
TPI-Abuse	2024-12-03 11:28:58 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 188.166.160.72 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 188.166.160.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 03 06:28:51.100413 2024] [security2:error] [pid 1062810:tid 1062810] [client 188.166.160.72:56584] [client 188.166.160.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.145"] [uri "/.env"] [unique_id "Z07rcx0J3zS-SLTlF66yHwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-12-03 11:17:45 (1 month ago)	Restricted File Access Requests	Hacking Brute-Force
Countryman	2024-12-03 11:17:11 (1 month ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
Mr-Money	2024-12-03 11:15:47 (1 month ago)	188.166.160.72 - - [03/Dec/2024:12:15:46 +0100] "GET /.env HTTP/1.1" 404 3835 "-" "Mozilla/5.0 Keydr ... show more188.166.160.72 - - [03/Dec/2024:12:15:46 +0100] "GET /.env HTTP/1.1" 404 3835 "-" "Mozilla/5.0 Keydrop" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack