AbuseIPDB » 206.189.142.116

206.189.142.116 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 45%: ?

45%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	India
City	Doddaballapura, Karnataka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 206.189.142.116

Whois 206.189.142.116

IP Abuse Reports for 206.189.142.116:

This IP address has been reported a total of 48 times from 28 distinct sources. 206.189.142.116 was first reported on December 8th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
myintarweb	2025-01-19 23:05:59 (3 days ago)	206.189.142.116 - - [08/Dec/2024:14:47:58 +0000] 443 "GET /.env HTTP/1.1" 404 29082 "-" "Mozilla/5.0 ... show more206.189.142.116 - - [08/Dec/2024:14:47:58 +0000] 443 "GET /.env HTTP/1.1" 404 29082 "-" "Mozilla/5.0 Keydrop" ... show less	Hacking Bad Web Bot Web App Attack
diego	2024-12-11 04:21:25 (1 month ago)	Events: TCP SYN Discovery or Flooding, Seen 13 times in the last 10800 seconds	DDoS Attack
MPL	2024-12-10 02:16:37 (1 month ago)	tcp/10000	Port Scan
Linuxmalwarehuntingnl	2024-12-08 21:11:07 (1 month ago)	Honeypot-HIT Mozilla/5.0 Keydrop	DDoS Attack Brute-Force
TPI-Abuse	2024-12-08 17:59:25 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 206.189.142.116 (-): 1 in the last 300 secs; Po ... show more(mod_security) mod_security (id:210492) triggered by 206.189.142.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 08 12:59:20.646330 2024] [security2:error] [pid 14854:tid 14854] [client 206.189.142.116:44634] [client 206.189.142.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.64"] [uri "/.env"] [unique_id "Z1XeeEkN19WWkmbN4XHxdQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
lindi	2024-12-08 17:51:43 (1 month ago)	trying to access .env file ...	Hacking Web App Attack
gumbysoft	2024-12-08 17:45:15 (1 month ago)	Too many HTTP Bad Requests	Bad Web Bot
fstap	2024-12-08 17:38:40 (1 month ago)	"GET /.env HTTP/1.1"	Bad Web Bot Web App Attack
TPI-Abuse	2024-12-08 17:25:29 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 206.189.142.116 (-): 1 in the last 300 secs; Po ... show more(mod_security) mod_security (id:210492) triggered by 206.189.142.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 08 12:25:25.156667 2024] [security2:error] [pid 12145:tid 12158] [client 206.189.142.116:49812] [client 206.189.142.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.134"] [uri "/.env"] [unique_id "Z1XWhfHYcErVHxcsy9Vs_AAAAUo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-12-08 17:11:45 (1 month ago)	Unsolicited multiport scan	Port Scan
Anonymous	2024-12-08 17:08:24 (1 month ago)	Dec 8 18:08:23 rendez-vous openvpn[1746]: 206.189.142.116:56970 Connection reset, restarting [0]	VPN IP Port Scan Web App Attack
TPI-Abuse	2024-12-08 17:04:26 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 206.189.142.116 (-): 1 in the last 300 secs; Po ... show more(mod_security) mod_security (id:210492) triggered by 206.189.142.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 08 12:04:23.484098 2024] [security2:error] [pid 27820:tid 27820] [client 206.189.142.116:46952] [client 206.189.142.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.6"] [uri "/.env"] [unique_id "Z1XRl_5Y0R773x_J3EycgQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
gurnip	2024-12-08 16:53:33 (1 month ago)	Vulnerability probe of page /.env, not found on server.	Brute-Force Web App Attack
TPI-Abuse	2024-12-08 16:44:51 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 206.189.142.116 (-): 1 in the last 300 secs; Po ... show more(mod_security) mod_security (id:210492) triggered by 206.189.142.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 08 11:44:48.327542 2024] [security2:error] [pid 3877:tid 3877] [client 206.189.142.116:55228] [client 206.189.142.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.189"] [uri "/.env"] [unique_id "Z1XNAB6YK36YMhFDhJcBHwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
sdos.es	2024-12-08 16:44:42 (1 month ago)	"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env"	Web App Attack