AbuseIPDB » 217.160.42.149

Check an IP Address, Domain Name, or Subnet

e.g. 3.238.36.32, microsoft.com, or 5.188.10.0/24

217.160.42.149 was found in our database!

This IP was reported 137 times. Confidence of Abuse is 100%: ?

100%

ISP	1&1 IONOS SE
Usage Type	Data Center/Web Hosting/Transit
Domain Name	ionos.com
Country	Germany
City	Karlsruhe, Baden-Wurttemberg

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 217.160.42.149

Whois 217.160.42.149

IP Abuse Reports for 217.160.42.149:

This IP address has been reported a total of 137 times from 71 distinct sources. 217.160.42.149 was first reported on January 15th 2021, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
Urmarcht Horzain	21 Feb 2021	Bot attack detected : webscan vurnerability	Web App Attack
bmino.pl	20 Feb 2021	Autoban 217.160.42.149 REJECT JAN	Web App Attack
MortimerCat	20 Feb 2021	Looking for a phpunit exploit	Web App Attack
Anonymous	19 Feb 2021	"GET /.env HTTP/1.1" about 30 times	Hacking Web App Attack
el-brujo	18 Feb 2021	19/Feb/2021:03:40:39 +0100Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 217.160 ... show more19/Feb/2021:03:40:39 +0100Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 217.160.42.149] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "140"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.elhacker.net"] [uri "/.env"] [unique_id "YC8lJ7vOfXuuW7SiMZ7V3AAAAYA"] ... show less	Hacking Web App Attack
conseilgouz	18 Feb 2021	cae-17 : Block hidden directories=>/.env(/)	Hacking
Database.red	18 Feb 2021	[2021-02-18 17:36:42] Exploit probing - /.env	Hacking Brute-Force Web App Attack
SvrAdmin	18 Feb 2021	TIME: Thu, 18 Feb 2021 16:04:09 -0300 REQUEST: /.env	Bad Web Bot Exploited Host Web App Attack
el-brujo	18 Feb 2021	18/Feb/2021:19:00:01 +0100Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 217.160 ... show more18/Feb/2021:19:00:01 +0100Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 217.160.42.149] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "140"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.elhacker.net"] [uri "/.env"] [unique_id "YC6rIai8yDC4bYQ7DrLsXwAAAE0"] ... show less	Hacking Web App Attack
Nicsena	18 Feb 2021	Automated Report (nicsena-pinger.tk): Tried to access environmental variable file (/.env file)	Hacking Bad Web Bot
SvrAdmin	18 Feb 2021	TIME: Thu, 18 Feb 2021 13:28:56 -0300 REQUEST: /.env	Bad Web Bot Exploited Host Web App Attack
SvrAdmin	18 Feb 2021	TIME: Thu, 18 Feb 2021 13:07:51 -0200 REQUEST: /.env	Bad Web Bot Exploited Host Web App Attack
HJ5Ss4Ju	18 Feb 2021	Forbidden directory scan :: 2021/02/18 12:58:37 [error] 1075#1075: 101324 access forbidden by rule, ... show moreForbidden directory scan :: 2021/02/18 12:58:37 [error] 1075#1075: 101324 access forbidden by rule, client: 217.160.42.149, server: static.[censored_1], request: "GET /.env HTTP/1.1", host: "static.[censored_1]" show less	Hacking
el-brujo	18 Feb 2021	18/Feb/2021:12:26:13 +0100Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 217.160 ... show more18/Feb/2021:12:26:13 +0100Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 217.160.42.149] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "140"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "oriolhostench.net"] [uri "/.env"] [unique_id "YC5O1XZSZRukfRvBe7JMKQAAAQc"] ... show less	Hacking Web App Attack
NXTwoThou	18 Feb 2021	/.env	Web App Attack