JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 192.241.192.240

192.241.192.240 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 85%: ?

85%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 192.241.192.240

Whois 192.241.192.240

IP Abuse Reports for 192.241.192.240:

This IP address has been reported a total of 21 times from 15 distinct sources. 192.241.192.240 was first reported on August 27th 2026, and the most recent report was 33 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 Francisco Vallejo	2026-09-01 17:19:36 (33 minutes ago)	[Tue Sep 01 19:19:35.799830 2026] [core:info] [pid 41964:tid 133721625704128] [client 192.241.192.24 ... show more [Tue Sep 01 19:19:35.799830 2026] [core:info] [pid 41964:tid 133721625704128] [client 192.241.192.240:57654] AH00128: File does not exist: /var/www/franvallejo/js/breakpoints.min.js [Tue Sep 01 19:19:35.949121 2026] [core:info] [pid 41964:tid 133722313578176] [client 192.241.192.240:57654] AH00128: File does not exist: /var/www/franvallejo/js/util.js [Tue Sep 01 19:19:36.060223 2026] [core:info] [pid 41963:tid 133722095466176] [client 192.241.192.240:57688] AH00128: File does not exist: /var/www/franvallejo/js/browser.min.js [Tue Sep 01 19:19:36.097763 2026] [core:info] [pid 41964:tid 133722305185472] [client 192.241.192.240:57654] AH00128: File does not exist: /var/www/franvallejo/js/main.js [Tue Sep 01 19:19:36.356700 2026] [core:info] [pid 41964:tid 133722649122496] [client 192.241.192.240:57666] AH00128: File does not exist: /var/www/franvallejo/js/jquery.min.js ... show less	Brute-Force SSH
🇫🇷 Octopuce	2026-09-01 16:59:47 (53 minutes ago)	Aggressive web search of vulnerable pages: /.env /phpinfo.php /info.php /test.php /backup.sql /backu ... show more Aggressive web search of vulnerable pages: /.env /phpinfo.php /info.php /test.php /backup.sql /backup.sql.gz /backup.zip ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 16:50:55 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 192.241.192.240 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 192.241.192.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 12:50:48.772038 2026] [security2:error] [pid 1055256:tid 1055275] [client 192.241.192.240:40850] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nicholsinvest.com"] [uri "/wp-config.php.bak"] [unique_id "apcCaLYtqIWjTapRdbV26QAAAU4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-09-01 12:05:06 (5 hours ago)	Too many Status 40X (16)	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-09-01 10:07:21 (7 hours ago)	Excessive multi-domain requests	Brute-Force
🇵🇱 mscode.pl	2026-09-01 06:33:35 (11 hours ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 14061 (DigitalOcean, LLC ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 14061 (DigitalOcean, LLC) Protocol: HTTP/1.1 (GET method) Zone: wiki.mscode.pl Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-01 00:44:16 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 192.241.192.240 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 192.241.192.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:44:11.684541 2026] [security2:error] [pid 8837:tid 8841] [client 192.241.192.240:60880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "104ventures.com"] [uri "/.git/config"] [unique_id "apYf2znVa2Qq39OCx1VxzwAAAIE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-08-30 05:26:02 (2 days ago)	CrowdSec: crowdsecurity/http-cve-probing	Port Scan Hacking
🇬🇧 consul.to	2026-08-30 04:55:19 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-08-30 03:36:23 (2 days ago)	Blocked by ModSec and CSF	Port Scan
🇪🇸 alferez	2026-08-30 02:52:42 (2 days ago)	wp2shell bug exploit	Hacking Exploited Host Web App Attack
🇺🇸 mnsf	2026-08-30 00:05:17 (2 days ago)	Abuse Detected (39)	Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-29 22:02:16 (2 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-28. show less	Web App Attack SSH Hacking
🇺🇸 mnsf	2026-08-29 12:05:02 (3 days ago)	Abuse Detected (30)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 17:49:40 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 192.241.192.240 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 192.241.192.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 13:49:35.019194 2026] [security2:error] [pid 12767:tid 12767] [client 192.241.192.240:59672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.doctoredwinalvarez.com"] [uri "/.env"] [unique_id "apHKL3i5BF_xphNBeqfiUAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 180.111.30.131

🇺🇸 18.217.208.51

🇮🇳 2404:6800:4000:1000::12b

🇺🇸 213.108.0.161

🇳🇱 185.223.235.7

🇺🇸 172.253.213.27

🇺🇸 162.0.209.217

🇬🇧 159.65.94.135

🇩🇪 157.90.243.44

🇮🇳 103.183.71.197

🇲🇾 49.124.152.242

🇸🇬 47.128.29.70

🇺🇸 45.56.84.110

🇭🇰 40.83.95.133

🇺🇸 20.102.109.160

🇧🇷 205.210.31.217

🇧🇷 177.20.224.222

🇺🇸 159.223.97.218

🇭🇰 152.32.130.155

🇩🇪 69.5.169.227