AbuseIPDB » 108.162.221.21

108.162.221.21 was found in our database!

This IP was reported 93 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
Domain Name	cloudflare.com
Country	Austria
City	Vienna, Vienna

Important Note: 108.162.221.21 is an IP address from within our whitelist belonging to the subnet 108.162.192.0/18, which we identify as: "Cloudflare Reverse Proxy".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 108.162.221.21

Whois 108.162.221.21

IP Abuse Reports for 108.162.221.21:

This IP address has been reported a total of 93 times from 15 distinct sources. 108.162.221.21 was first reported on May 14th 2021, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-12-01 07:06:32 (6 days ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-11-14 03:20:38 (3 weeks ago)	Automatic report - Vulnerability scan /RDWeb/Pages/en-US/login.aspx	Web App Attack
Anonymous	2024-11-13 02:46:22 (3 weeks ago)	Automatic report - Vulnerability scan /RDWeb/Pages/en-US/login.aspx	Web App Attack
Anonymous	2024-11-07 08:43:10 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
URAN Publishing Service	2024-11-03 12:36:21 (1 month ago)	108.162.221.21 - - [03/Nov/2024:14:36:12 +0200] "GET /wp-admin/maint/about.php HTTP/1.1" 404 282 "-" ... show more108.162.221.21 - - [03/Nov/2024:14:36:12 +0200] "GET /wp-admin/maint/about.php HTTP/1.1" 404 282 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 108.162.221.21 - - [03/Nov/2024:14:36:20 +0200] "GET /wp-admin/xl2023.php HTTP/1.1" 404 282 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" ... show less	Web App Attack
Anonymous	2024-11-03 04:07:16 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-10-18 07:33:10 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
TPI-Abuse	2024-10-17 13:32:26 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 108.162.221.21 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 108.162.221.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 17 09:32:14.083779 2024] [security2:error] [pid 16671:tid 16671] [client 108.162.221.21:58830] [client 108.162.221.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.infinitewashing.com"] [uri "/.git/config"] [unique_id "ZxER3uatDIXXsRhUZFRM3gAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-10-10 00:38:15 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 108.162.221.21 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 108.162.221.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 09 20:38:11.686276 2024] [security2:error] [pid 7426:tid 7426] [client 108.162.221.21:43930] [client 108.162.221.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.volga24.vip"] [uri "/.git/config"] [unique_id "Zwch80ixfD34IjwDOaMnKgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-10-04 12:04:05 (2 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
TPI-Abuse	2024-09-29 10:31:50 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 108.162.221.21 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 108.162.221.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 29 06:31:39.486363 2024] [security2:error] [pid 18185:tid 18185] [client 108.162.221.21:61090] [client 108.162.221.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.colonybet.com"] [uri "/.env"] [unique_id "Zvksi7x_KbdSrO8FcxbLjgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-09-29 05:41:48 (2 months ago)	[Sun Sep 29 07:41:11.248480 2024] [authz_core:error] [pid 346] [client 108.162.221.21:10608] AH01630 ... show more[Sun Sep 29 07:41:11.248480 2024] [authz_core:error] [pid 346] [client 108.162.221.21:10608] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Sep 29 07:41:47.424823 2024] [authz_core:error] [pid 346] [client 108.162.221.21:56016] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Sep 29 07:41:47.472489 2024] [authz_core:error] [pid 346] [client 108.162.221.21:56016] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
Anonymous	2024-09-27 08:46:46 (2 months ago)	[Fri Sep 27 10:46:40.727547 2024] [authz_core:error] [pid 20490] [client 108.162.221.21:60230] AH016 ... show more[Fri Sep 27 10:46:40.727547 2024] [authz_core:error] [pid 20490] [client 108.162.221.21:60230] AH01630: client denied by server configuration: /etc/httpd/htdocs [Fri Sep 27 10:46:41.739087 2024] [authz_core:error] [pid 20490] [client 108.162.221.21:60230] AH01630: client denied by server configuration: /etc/httpd/htdocs [Fri Sep 27 10:46:44.988059 2024] [authz_core:error] [pid 20490] [client 108.162.221.21:60230] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
Anonymous	2024-09-26 02:27:01 (2 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-08-28 07:30:01 (3 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH