AbuseIPDB » 5.182.110.138

5.182.110.138 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 51%: ?

51%

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Data Center/Web Hosting/Transit
Domain Name	cyberassets.ae
Country	United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 5.182.110.138

Whois 5.182.110.138

IP Abuse Reports for 5.182.110.138:

This IP address has been reported a total of 39 times from 25 distinct sources. 5.182.110.138 was first reported on February 8th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
MHuiG	2024-08-08 02:30:28 (1 month ago)	The IP has triggered Cloudflare WAF. action: block source: firewallCustom clientAsn: 174 clientASNDe ... show moreThe IP has triggered Cloudflare WAF. action: block source: firewallCustom clientAsn: 174 clientASNDescription: COGENT-174 clientCountryName: US clientIP: 5.182.110.138 clientRequestHTTPHost: mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: /.env clientRequestQuery: datetime: 2024-08-08T01:18:28Z rayName: 8afbac33680ec01d ruleId: 62370dc6b7504b8c983f836ea0faec20 userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
Cloudkul Cloudkul	2024-08-08 00:54:09 (1 month ago)	Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ... show moreAttempted Not Found (404 status code) requests on our application, more than 30% of their total requests. show less	Brute-Force Web App Attack
Anonymous	2024-08-08 00:20:38 (1 month ago)	(mod_security) mod_security triggered on hostname [redacted] 5.182.110.138 (US/United States/-)	SQL Injection
TPI-Abuse	2024-08-07 22:56:11 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 5.182.110.138 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 5.182.110.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 07 18:55:56.310146 2024] [security2:error] [pid 8100:tid 8100] [client 5.182.110.138:58883] [client 5.182.110.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aaaansweringservice.com"] [uri "/.env"] [unique_id "ZrP7fEBMD1DPRA3ygzJp8gAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-08-07 22:21:47 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 5.182.110.138 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 5.182.110.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 07 18:21:29.459464 2024] [security2:error] [pid 19970:tid 19970] [client 5.182.110.138:51366] [client 5.182.110.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aguitas.com"] [uri "/.env"] [unique_id "ZrPzafUixswQN-gz1sA9sgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-08-07 22:04:02 (1 month ago)	Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1	Hacking Web App Attack
axllent	2024-08-07 21:51:48 (1 month ago)	Scanning for exploits - /.env	Web App Attack
TPI-Abuse	2024-08-07 21:46:20 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 5.182.110.138 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 5.182.110.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 07 17:46:04.498676 2024] [security2:error] [pid 2827294:tid 2827294] [client 5.182.110.138:64093] [client 5.182.110.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.moversandshakers.org"] [uri "/.env"] [unique_id "ZrPrHLEeQ_XIU6NIYhqPyQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-08-07 21:28:55 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 5.182.110.138 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 5.182.110.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 07 17:28:38.798252 2024] [security2:error] [pid 7349:tid 7349] [client 5.182.110.138:53986] [client 5.182.110.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.technolumiere.com"] [uri "/.env"] [unique_id "ZrPnBkOuREaWrmixQw_kUQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Gwyneth Llewelyn	2024-08-07 21:26:30 (1 month ago)	2024/08/07 22:26:18 [error] 331011#331011: 1053413 access forbidden by rule, client: 5.182.110.138, ... show more2024/08/07 22:26:18 [error] 331011#331011: 1053413 access forbidden by rule, client: 5.182.110.138, server: forums.slcds.info, request: "GET /.env HTTP/2.0", host: "forums.slcds.info" 5.182.110.138 - - [07/Aug/2024:22:26:18 +0100] "GET /.env HTTP/2.0" 403 1166 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 2024/08/07 22:26:28 [error] 331018#331018: *1053449 access forbidden by rule, client: 5.182.110.138, server: feminina.eu, request: "GET /.env HTTP/2.0", host: "feminina.eu" show less	Web App Attack
zynex	2024-08-07 21:05:36 (1 month ago)	URL Probing: /.env	Web App Attack
MAGIC	2024-08-07 21:01:03 (1 month ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
MortimerCat	2024-08-07 20:30:24 (1 month ago)	Attempting to download environment file	Web App Attack
conseilgouz	2024-08-07 19:59:06 (1 month ago)	mae-17 : Block hidden directories=>/.env(/)	Hacking
TPI-Abuse	2024-08-07 19:48:40 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 5.182.110.138 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 5.182.110.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 07 15:48:26.759864 2024] [security2:error] [pid 32246:tid 32246] [client 5.182.110.138:59242] [client 5.182.110.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vitalitywebb.com"] [uri "/.env"] [unique_id "ZrPPiuL0WE3GBp80avpJOgAAACU"] show less	Brute-Force Bad Web Bot Web App Attack