AbuseIPDB » 192.241.162.145

192.241.162.145 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 45%: ?

45%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 192.241.162.145

Whois 192.241.162.145

IP Abuse Reports for 192.241.162.145:

This IP address has been reported a total of 51 times from 31 distinct sources. 192.241.162.145 was first reported on December 6th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rshict	2024-12-11 17:59:42 (1 month ago)	Hacking, Brute-Force, Web App Attack	Hacking Brute-Force Web App Attack
onkeltom	2024-12-06 23:42:57 (1 month ago)	Unauthorized connection attempts	Hacking Brute-Force
Countryman	2024-12-06 23:00:14 (1 month ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
MPL	2024-12-06 22:58:38 (1 month ago)	tcp/443 (2 or more attempts)	Port Scan
SkyDancer	2024-12-06 22:51:20 (1 month ago)	Multiple login attempts via RDP and/or SSH using wrong credentials. Attack automatically blocked by ... show moreMultiple login attempts via RDP and/or SSH using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-A-X show less	Hacking Brute-Force SSH
TPI-Abuse	2024-12-06 22:44:12 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 192.241.162.145 (-): 1 in the last 300 secs; Po ... show more(mod_security) mod_security (id:210492) triggered by 192.241.162.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 06 17:44:05.561312 2024] [security2:error] [pid 2504908:tid 2504908] [client 192.241.162.145:32928] [client 192.241.162.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.248"] [uri "/.env"] [unique_id "Z1N-NfNI-5ZY5ZRd_Mw7jwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
OK	2024-12-06 22:44:03 (1 month ago)	HTTP/HTTPS	Hacking Web App Attack
taivas.nl	2024-12-06 22:30:04 (1 month ago)	General bad request	Bad Web Bot
TPI-Abuse	2024-12-06 22:27:53 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 192.241.162.145 (-): 1 in the last 300 secs; Po ... show more(mod_security) mod_security (id:210492) triggered by 192.241.162.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 06 17:27:50.134430 2024] [security2:error] [pid 6909:tid 6909] [client 192.241.162.145:53690] [client 192.241.162.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.20"] [uri "/.env"] [unique_id "Z1N6ZroRZA7GkDOxcYrYUQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
MPL	2024-12-06 22:16:45 (1 month ago)	tcp/443 (10 or more attempts)	Port Scan
TPI-Abuse	2024-12-06 22:11:55 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 192.241.162.145 (-): 1 in the last 300 secs; Po ... show more(mod_security) mod_security (id:210492) triggered by 192.241.162.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 06 17:11:50.707695 2024] [security2:error] [pid 2900505:tid 2900505] [client 192.241.162.145:37028] [client 192.241.162.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.154"] [uri "/.env"] [unique_id "Z1N2pnWaKMRpvNq_uJ8g2AAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
ANTI SCANNER	2024-12-06 22:04:22 (1 month ago)	Scanner : /.env	Web Spam
swrlly	2024-12-06 21:52:09 (1 month ago)	attempted directly connecting to webserver using origin ip	Web App Attack
TPI-Abuse	2024-12-06 21:47:05 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 192.241.162.145 (-): 1 in the last 300 secs; Po ... show more(mod_security) mod_security (id:210492) triggered by 192.241.162.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 06 16:47:01.526467 2024] [security2:error] [pid 391:tid 391] [client 192.241.162.145:36084] [client 192.241.162.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.57"] [uri "/.env"] [unique_id "Z1Nw1TnEFrKz60Rjmy9t1QAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-12-06 21:32:51 (1 month ago)	Fail2Ban - Scan for web exploit. ...	Bad Web Bot Web App Attack