JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.160.115.12

209.160.115.12 was found in our database!

This IP was reported 104 times. Confidence of Abuse is 38%: ?

38%

ISP	Paradise Networks LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS40861
Domain Name	paradisenetworks.net
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.160.115.12

Whois 209.160.115.12

IP Abuse Reports for 209.160.115.12:

This IP address has been reported a total of 104 times from 73 distinct sources. 209.160.115.12 was first reported on February 7th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-10-05 06:40:53 (2 weeks ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local blo ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local block policy. Evidence: High Abuse + Suspicion (60, Abuse: 51) show less	Hacking Exploited Host Web App Attack
🇮🇪 AutosOnShow	2026-10-04 20:28:05 (2 weeks ago)	blocked for webapp attack \| path requested: /.git/config \| seen at 2026-10-04 20:27:23.954 \|	Web App Attack
🇳🇱 Savvii	2026-10-04 14:05:21 (2 weeks ago)	15 attempts against mh-modsecurity-ban on comet	Brute-Force Web App Attack
🇳🇱 Savvii	2026-10-04 13:47:53 (2 weeks ago)	51 attempts against mh-misbehave-ban on lime	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-10-04 13:29:22 (2 weeks ago)	15 attempts against mh-modsecurity-ban on virgo	Brute-Force Web App Attack
Anonymous	2026-10-03 21:08:18 (2 weeks ago)	209.160.115.12 - - [03/Oct/2026:22:38:00 +0200] "GET /mifs/rs/api/v2/featureusage?format=$%7b12342% ... show more 209.160.115.12 - - [03/Oct/2026:22:38:00 +0200] "GET /mifs/rs/api/v2/featureusage?format=$%7b12342%7d HTTP/1.1" 404 1281 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" IP: 209.160.112.0-209.160.127.255 IP:209.160.112.0-209.160.127.255 2026-10-03 20:38:16 209.160.115.12 - - [03/Oct/2026:22:38:00 +0200] "GET /mifs/rs/api/v2/featureusage?format=$%7b1234*2%7d HTTP/1.1" 404 1281 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" 209.160.115.12 - - [03/Oct/2026:22:38:01 +0200] "GET /lang/custom/sbin/init HTTP/1.1" 404 1281 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" show less	Hacking Brute-Force Web App Attack
🇫🇷 a.mohamed.go	2026-09-30 17:16:17 (3 weeks ago)	209.160.115.12 - - [30/Sep/2026:17:16:16 +0000] "GET /admin HTTP/1.1" 200 42501 "-" "Mozilla/5.0 (Ma ... show more 209.160.115.12 - - [30/Sep/2026:17:16:16 +0000] "GET /admin HTTP/1.1" 200 42501 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" ... show less	Hacking Web App Attack
🇩🇪 LRob	2026-09-30 16:27:02 (3 weeks ago)	Secret file probe \| method: GET \| path: /.env \| ua: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8 ... show more Secret file probe \| method: GET \| path: /.env \| ua: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-30 00:24:47 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 209.160.115.12 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.160.115.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 20:24:40.336649 2026] [security2:error] [pid 25654:tid 25654] [client 209.160.115.12:35826] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.229"] [uri "/.git/config"] [unique_id "arxWyEwE33FymoiR8k8wFQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-29 22:52:49 (3 weeks ago)	209.160.115.12 - - [30/Sep/2026:01:52:23 +0300] "GET /mifs/rs/api/v2/featureusage?format=$%7b12342% ... show more 209.160.115.12 - - [30/Sep/2026:01:52:23 +0300] "GET /mifs/rs/api/v2/featureusage?format=$%7b12342%7d HTTP/1.1" 404 294 209.160.115.12 - - [30/Sep/2026:01:52:26 +0300] "GET /server-status HTTP/1.1" 404 259 209.160.115.12 - - [30/Sep/2026:01:52:48 +0300] "GET /lang/custom/sbin/init HTTP/1.1" 404 267 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-24 19:14:49 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-08-24 19:10:28 (1 month ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in email-link.asp show less	Exploited Host Bad Web Bot
🇩🇪 Vegascosmetics	2026-08-13 19:56:12 (2 months ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): IP auto-blocked by local security policy.	Hacking Web App Attack
🇩🇪 dom4k	2026-08-11 19:17:26 (2 months ago)	209.160.115.12 - - [11/Aug/2026:19:17:25 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 ( ... show more 209.160.115.12 - - [11/Aug/2026:19:17:25 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" ... show less	Web Spam Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-10 21:59:07 (2 months ago)	Auto-ban: >3000 req/min op 2026-08-10	Web App Attack SSH Hacking

Showing 1 to 15 of 104 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇾 190.112.210.251

🇵🇱 176.53.159.197

🇺🇸 173.255.210.89

🇺🇸 91.230.168.136

🇺🇸 47.252.117.234

🇮🇳 117.97.197.8

🇷🇴 92.118.39.77

🇺🇸 91.230.168.132

🇺🇸 91.230.168.131

🇩🇿 41.111.144.42

🇬🇧 35.203.211.248

🇬🇧 35.203.210.174

🇳🇱 34.90.204.87

🇩🇪 2.28.46.205

🇿🇼 197.221.232.44

🇸🇬 145.223.150.158

🇵🇭 120.28.109.188

🇧🇩 103.20.89.114

🇳🇬 102.140.97.134

🇺🇸 91.230.168.127