AbuseIPDB » 204.188.197.234

204.188.197.234 was found in our database!

This IP was reported 90 times. Confidence of Abuse is 43%: ?

43%

ISP	RevGen Networks
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46844
Hostname(s)	ns1.accessrgn.net
Domain Name	revgennetworks.com
Country	United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 204.188.197.234

Whois 204.188.197.234

IP Abuse Reports for 204.188.197.234:

This IP address has been reported a total of 90 times from 55 distinct sources. 204.188.197.234 was first reported on May 24th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
JPPO	2025-05-24 16:37:46 (1 month ago)	GET /.env or GET //.env with or without prefix /api,/config ...	Web App Attack
services.org.pl	2025-05-24 16:12:48 (1 month ago)	open() "/var/www/html/.env" failed (2: No such file or directory), client: 204.188.197.234, server: ... show moreopen() "/var/www/html/.env" failed (2: No such file or directory), client: 204.188.197.234, server: api.services.org.pl, request: "GET /.env HTTP/1.1", host: "46.102.157.176" show less	Bad Web Bot Web App Attack
kosada.com	2025-05-24 15:59:54 (1 month ago)	Web vulnerability probing	Web App Attack
Anonymous	2025-05-24 15:53:15 (1 month ago)	Reported from Nginx log analysis 17. Log: 204.188.197.234 - - [24/May/2025:xx:xx:xx 0200] "GET /.en ... show moreReported from Nginx log analysis 17. Log: 204.188.197.234 - - [24/May/2025:xx:xx:xx 0200] "GET /.env HTTP/1.1" xxx xxx "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-" "US United States Chicago" "AS46844" "SHARKTECH" | 204.188.197.234 - - [24/May/2025:xx:xx:xx 0200] "GET /.env HTTP/1.1" xxx xxx "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-" "US United States Chicago" "AS46844" "SHARKTECH" | 204.188.197.234 - - [24/May/2025:xx:xx:xx 0200] "GET /.git/config HTTP/1.1" xxx xxx "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-" "US United States Chicago" "AS46844" "SHARKTECH" | 204.188.197.234 - - [24/May/2025:xx:xx:xx 0200] "GET /.git/config HTTP/1.1" xxx xxx "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-" "US United States Chicago" "AS46844" "SHARKTECH" show less	Port Scan Brute-Force SSH
boxed-it	2025-05-24 15:25:33 (1 month ago)	GET /.env (Tarpitted for 43m21s, wasted 152.46kB)	Web App Attack
Anonymous	2025-05-24 15:24:00 (1 month ago)	204.188.197.234 - - [24/May/2025:15:24:00 +0000] "GET /.env HTTP/1.1" 403 287 "-" "Mozilla/5.0; Keyd ... show more204.188.197.234 - - [24/May/2025:15:24:00 +0000] "GET /.env HTTP/1.1" 403 287 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" ... show less	Hacking Web App Attack
thedreamer.nl	2025-05-24 15:23:16 (1 month ago)	204.188.197.234 - - [24/May/2025:10:05:09 +0200] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0; Keyd ... show more204.188.197.234 - - [24/May/2025:10:05:09 +0200] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "US" "Chicago" "41.88350" "-87.63050" 204.188.197.234 - - [24/May/2025:10:05:09 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "US" "Chicago" "41.88350" "-87.63050" 204.188.197.234 - - [24/May/2025:17:23:14 +0200] "GET /.env HTTP/1.1" 200 1007 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "US" "Chicago" "41.88350" "-87.63050" 204.188.197.234 - - [24/May/2025:17:23:14 +0200] "GET /.env HTTP/1.1" 400 248 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "US" "Chicago" "41.88350" "-87.63050" ... show less	Hacking Brute-Force Bad Web Bot Web App Attack
sdos.es	2025-05-24 15:22:24 (1 month ago)	"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env"	Web App Attack
Eurofluid	2025-05-24 15:00:59 (1 month ago)	You shall not pass ! Abusive behavior blocked by EF firewall.	Port Scan Hacking Brute-Force
qwerlancer	2025-05-24 14:55:17 (1 month ago)	HTTPS anomaly: tcp_port_scan, 2 > threshold 1	Port Scan
4server	2025-05-24 14:27:29 (1 month ago)	[SatMay2416:27:25.8473092025][security2:error][pid200038:tid200043][client204.188.197.234:0]ModSecur ... show more[SatMay2416:27:25.8473092025][security2:error][pid200038:tid200043][client204.188.197.234:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\|passwd\|group\)\|www_\?acl\)\|global\\\\\\\\.asa\|httpd\\\\\\\\.conf\|boot\\\\\\\\.ini\|web.config\)\\\\\\\\b\|\(\|\^\|\\\\\\\\.\\\\\\\\.\)/etc/\|/\\\\\\\\.\(\?:history\|bash_history\|sh_history\|env\)\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"136.243.54.122\"][uri\"/.env\"][unique_id\"aDHXTR1mN9H6x4yuf757RAAAAUE\"] show less	Port Scan Brute-Force Web App Attack
MPL	2025-05-24 13:54:37 (1 month ago)	tcp/443 (6 or more attempts)	Port Scan
MPL	2025-05-24 13:09:27 (1 month ago)	tcp/443 (6 or more attempts)	Port Scan
tinect	2025-05-24 12:57:31 (1 month ago)	tries to find malicious content	Hacking Web App Attack
Anonymous	2025-05-24 12:46:33 (1 month ago)	Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1	Hacking Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩