JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 192.241.180.104

192.241.180.104 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Secaucus, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 192.241.180.104

Whois 192.241.180.104

IP Abuse Reports for 192.241.180.104:

This IP address has been reported a total of 16 times from 13 distinct sources. 192.241.180.104 was first reported on April 3rd 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 Mr.Singh	2026-03-18 12:30:25 (2 months ago)	NFT blocked 192.241.180.104 on 18-Mar-2026..	Port Scan Brute-Force
🇫🇮 6kilowatti	2026-03-18 10:30:38 (2 months ago)	2026-03-18T12:30:37.916224+02:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-03-18T12:30:37.916224+02:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=192.241.180.104 DST=83.148.240.21 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=57413 PROTO=TCP SPT=42652 DPT=9200 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 MPL	2026-03-18 09:52:53 (2 months ago)	tcp/9200 (3 or more attempts)	Port Scan
🇺🇸 RAP	2026-03-18 09:40:43 (2 months ago)	2026-03-18 09:40:43 UTC Unauthorized activity to TCP port 9200.	Port Scan
🇺🇸 MPL	2026-03-18 09:19:10 (2 months ago)	tcp/9200 (4 or more attempts)	Port Scan
🇩🇪 arc21	2026-03-18 09:13:06 (2 months ago)	2026-03-18T09:13:05.324192+00:00 database-prodv1-game kernel: [989117.240276] [UFW BLOCK] IN=eth0 OU ... show more 2026-03-18T09:13:05.324192+00:00 database-prodv1-game kernel: [989117.240276] [UFW BLOCK] IN=eth0 OUT= MAC=92:00:06:71:5d:8a:d2:74:7f:6e:37:e3:08:00 SRC=192.241.180.104 DST=142.132.169.25 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=34225 PROTO=TCP SPT=42652 DPT=9200 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇳🇱 VMHeaven.io	2026-03-18 08:56:39 (2 months ago)	Blocked by UFW [9200/tcp] Source port: 42652 TTL: 240 Packet length: 40	Port Scan
🇺🇸 RAP	2026-03-18 08:34:50 (2 months ago)	2026-03-18 08:34:50 UTC Unauthorized activity to TCP port 9200.	Port Scan
🇺🇸 xmission.com	2026-03-18 08:33:43 (2 months ago)	Blocked by UFW (TCP on 9200) Source port: 42652 TTL: 241 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9200) Source port: 42652 TTL: 241 Packet length: 40 TOS: 0x08 This report (for 192.241.180.104) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇪 sid3windr	2025-04-04 21:28:48 (1 year ago)	GET /.env (Tarpitted for 1d15h8m25s, wasted 8.06MB)	Web App Attack
🇺🇸 TPI-Abuse	2025-04-03 06:09:15 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 192.241.180.104 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 192.241.180.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 03 02:09:09.162886 2025] [security2:error] [pid 2897899:tid 2897899] [client 192.241.180.104:35196] [client 192.241.180.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.33"] [uri "/.env"] [unique_id "Z-4mBYCTkXs6Cm84AZHCJAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 diego	2025-04-03 06:07:32 (1 year ago)	Events: TCP SYN Discovery or Flooding, Seen 6 times in the last 10800 seconds	DDoS Attack
🇻🇳 Xuan Can	2025-04-03 06:00:35 (1 year ago)	(mod_security) mod_security (id:77316757) triggered by 192.241.180.104 (US/United States/-): 1 in th ... show more (mod_security) mod_security (id:77316757) triggered by 192.241.180.104 (US/United States/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 03 13:00:27.627942 2025] [security2:error] [pid 1208:tid 1251] [client 192.241.180.104:33400] [client 192.241.180.104] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/imunify360-full-apache/007_i360_custom.conf"] [line "343"] [id "77316757"] [msg "IM360 WAF: Laravel .env file access\|\|RSV:6.33\|\|T:APACHE\|\|QS:\|\|"] [severity "CRITICAL"] [tag "service_custom"] [hostname "112.213.85.145"] [uri "/.env"] [unique_id "Z-4j-1jEWce-yXYx9jBcSAAAAE8"] show less	Brute-Force SSH
🇧🇪 voormedia	2025-04-03 05:58:18 (1 year ago)	Accessed trap at '/.env'	Web App Attack
Anonymous	2025-04-03 05:56:42 (1 year ago)	04/03/2025-08:56:41.974539 192.241.180.104 Protocol: 6 ET INFO Request to Hidden Environment File - ... show more 04/03/2025-08:56:41.974539 192.241.180.104 Protocol: 6 ET INFO Request to Hidden Environment File - Inbound show less	Hacking

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 118.70.182.193

🇧🇷 58.68.197.98

🇻🇳 14.182.11.15

🇰🇷 1.235.192.214

🇧🇬 2620:171:66:f006:9999::247

🇺🇸 216.25.89.99

🇺🇸 138.113.22.151

🇮🇳 103.180.212.135

🇺🇸 34.213.117.117

🇦🇪 2.50.239.81

🇩🇪 194.88.98.85

🇺🇸 136.49.53.226

🇨🇳 115.190.211.2

🇩🇪 47.254.177.181

🇺🇸 31.58.148.222

🇺🇸 3.142.170.60

🇨🇳 1.15.134.139

🇰🇷 218.145.181.48

🇩🇪 213.209.159.228

🇭🇰 199.45.155.111