JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

209.97.160.248

Neutral Activity

Abuse Confidence Score

0% Low Risk

43 reports

28 reporters · latest 1 year ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

209.97.160.248 has been reported 43 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

43 from 28 distinct reporters

First reported

June 7th 2023

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 Gem	2025-01-31 23:55:59 UTC · (1 year ago)	Unauthorized web scan.	Web App Attack
🇧🇪 sid3windr	2025-01-29 04:18:35 UTC · (1 year ago)	GET /.env (Tarpitted for 1d15h8m28s, wasted 8.06MB)	Web App Attack
🇫🇷 geot	2025-01-28 12:41:51 UTC · (1 year ago)	GET /.env HTTP/1.1	Hacking Web App Attack
🇨🇭 Peter-Johann Sarbach	2025-01-28 10:30:19 UTC · (1 year ago)	hacking	Hacking
🇳🇱 JCB	2025-01-27 15:35:00 UTC · (1 year ago)	209.97.160.248 - - [27/Jan/2025:15:52:26 +0200] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 Keydrop" 209.97.160.248 - - [27/Jan/2025:15:52:27 +0200] "GET / HTTP/1.0" 400 226 "-" "-"	Hacking Web App Attack
🇳🇱 BlueWire Hosting	2025-01-27 15:10:08 UTC · (1 year ago)	Scanning for Laravel vulnerabilities	Web App Attack
🇺🇸 jkhorvath	2025-01-27 13:35:04 UTC · (1 year ago)	Request for URL /.env	Phishing Brute-Force Web App Attack
Anonymous	2025-01-27 13:27:33 UTC · (1 year ago)	209.97.160.248 - - [27/Jan/2025:14:27:32 +0100] "GET /.env HTTP/1.1" 403 4715 "-" "Mozilla/5.0 Keydrop" ...	Web App Attack
🇳🇱 Study Bitcoin 🤗	2025-01-27 13:20:49 UTC · (1 year ago)	Port probe to tcp/443 (https) [srv126]	Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-01-27 13:12:34 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 209.97.160.248 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 27 08:12:27.828042 2025] [security2:error] [pid 24155:tid 24155] [client 209.97.160.248:33058] ... show more (mod_security) mod_security (id:210492) triggered by 209.97.160.248 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 27 08:12:27.828042 2025] [security2:error] [pid 24155:tid 24155] [client 209.97.160.248:33058] [client 209.97.160.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.143"] [uri "/.env"] [unique_id "Z5eGO1bCAj3DQR8JHzq-PAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 GoodOldTOS	2025-01-27 12:39:23 UTC · (1 year ago)	Bad keywords detected in request: /.env	Web App Attack
🇮🇹 Rosh	2025-01-27 12:33:20 UTC · (1 year ago)	[01/27/25 13:33:20] Unauthorized request HTTP/1.1 404 on port 443	Hacking Web App Attack
🇺🇸 kosada.com	2025-01-27 12:32:58 UTC · (1 year ago)	Web vulnerability probing	Web App Attack
🇺🇸 TPI-Abuse	2025-01-27 12:25:54 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 209.97.160.248 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 27 07:25:49.564513 2025] [security2:error] [pid 9727:tid 9727] [client 209.97.160.248:47732] [ ... show more (mod_security) mod_security (id:210492) triggered by 209.97.160.248 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 27 07:25:49.564513 2025] [security2:error] [pid 9727:tid 9727] [client 209.97.160.248:47732] [client 209.97.160.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.28"] [uri "/.env"] [unique_id "Z5d7TU-drEJqlH1I5uv-sAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-01-27 11:56:42 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 209.97.160.248 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 27 06:56:36.949132 2025] [security2:error] [pid 19007:tid 19007] [client 209.97.160.248:37476] ... show more (mod_security) mod_security (id:210492) triggered by 209.97.160.248 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 27 06:56:36.949132 2025] [security2:error] [pid 19007:tid 19007] [client 209.97.160.248:37476] [client 209.97.160.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.5"] [uri "/.env"] [unique_id "Z5d0dNxZskUIuJRw42-n7QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 195.178.110.217

🇨🇳 121.227.152.250

🇳🇱 200.138.46.34

🇻🇳 171.234.75.18

🇸🇪 128.127.105.184

🇨🇳 106.75.152.101

🇷🇴 80.94.92.128

🇸🇪 62.93.166.184

🇩🇪 37.221.195.225

🇫🇷 176.177.193.61

🇯🇵 164.52.120.14

🇯🇵 160.251.206.106

🇺🇸 137.184.185.11

🇻🇳 123.16.178.214

🇸🇬 94.231.206.252

🇷🇴 92.118.39.64

🇺🇸 192.178.6.196

🇺🇸 172.70.94.59

🇧🇷 170.245.198.33

🇧🇲 104.218.173.131