AbuseIPDB » 107.161.81.134

Check an IP Address, Domain Name, or Subnet

e.g. 18.206.92.240, microsoft.com, or 5.188.10.0/24

107.161.81.134 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 44%: ?

44%

ISP	QuadraNet Enterprises LLC
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	107.161.81.134.static.quadranet.com
Domain Name	quadranet.com
Country	United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 107.161.81.134

Whois 107.161.81.134

IP Abuse Reports for 107.161.81.134:

This IP address has been reported a total of 11 times from 8 distinct sources. 107.161.81.134 was first reported on March 12th 2023, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
LRNP	19 Mar 2023	_ 107.161.81.134 - - [19/Mar/2023:10:10:00 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X11 ... show more_ 107.161.81.134 - - [19/Mar/2023:10:10:00 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Bad Web Bot Web App Attack
someone	19 Mar 2023	:80 107.161.81.134 - - [19/Mar/2023:11:09:51 +0100] "GET /.env HTTP/1.1" 301 477 "-" "Mozilla/5.0 ( ... show more:80 107.161.81.134 - - [19/Mar/2023:11:09:51 +0100] "GET /.env HTTP/1.1" 301 477 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Web App Attack
WebTejo	19 Mar 2023	[19/Mar/2023:09:05:55.929962 +0000] ZBbQc4gQDmWnoSFFFlYB1AAAAEM 107.161.81.134 36028 5.135.29.222 70 ... show more[19/Mar/2023:09:05:55.929962 +0000] ZBbQc4gQDmWnoSFFFlYB1AAAAEM 107.161.81.134 36028 5.135.29.222 7080 [19/Mar/2023:09:05:59.246138 +0000] ZBbQd4gQDmWnoSFFFlYB1gAAAEA 107.161.81.134 34200 5.135.29.220 7080 [19/Mar/2023:09:05:59.375973 +0000] ZBbQd4gQDmWnoSFFFlYB1wAAAFg 107.161.81.134 37326 5.135.29.223 7080 ... show less	Brute-Force Web App Attack
Anonymous	19 Mar 2023	bot search	Port Scan Bad Web Bot
i-turnradio.nl	19 Mar 2023	2023-03-19 @ 08:57:41 (CET) ~ Blocked for trying to access: /.env	Web App Attack
oh.mg	19 Mar 2023	(mod_security) mod_security (id:949110) triggered by 107.161.81.134 (US/United States/107.161.81.134 ... show more(mod_security) mod_security (id:949110) triggered by 107.161.81.134 (US/United States/107.161.81.134.static.quadranet.com): 1 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_TRIGGER; Logs: [Sun Mar 19 03:42:47.666228 2023] [:error] [pid 2674112:tid 139646742775360] [client 107.161.81.134:50422] [client 107.161.81.134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "3.1.194.0"] [uri "/.env"] [unique_id "ZBaEt3LJC6WqGf9-z9lemAAAAFE"] show less	Brute-Force Web App Attack SSH
abuse_IP_reporter	18 Mar 2023	Mar 18 02:58:10 server UFW BLOCK SRC=107.161.81.134 DF PROTO=TCP SPT=10446	Port Scan
Anonymous	16 Mar 2023	port scan and connect, tcp 80 (http)	Port Scan
Anonymous	15 Mar 2023	port scan and connect, tcp 80 (http)	Port Scan
Anonymous	14 Mar 2023	port scan and connect, tcp 80 (http)	Port Scan
Anonymous	12 Mar 2023	port scan and connect, tcp 80 (http)	Port Scan