AbuseIPDB » 108.165.243.164

108.165.243.164 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 49%: ?

49%

ISP	Ace Data Centers Inc.
Usage Type	Data Center/Web Hosting/Transit
Domain Name	acedatacenter.com
Country	United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 108.165.243.164

Whois 108.165.243.164

IP Abuse Reports for 108.165.243.164:

This IP address has been reported a total of 50 times from 21 distinct sources. 108.165.243.164 was first reported on May 3rd 2024, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
wil.com	2024-09-05 21:34:02 (5 days ago)	GlobalProtect login attempts with user sstarr.	VPN IP Brute-Force
Anonymous	2024-09-05 16:22:05 (5 days ago)	wordpress-trap	Web App Attack
uhlhosting	2024-09-05 15:49:39 (5 days ago)	omnis.contact 108.165.243.164 - - [05/Sep/2024:17:49:36.505098 +0200] "GET /wp-l0gin.php HTTP/1.1" 4 ... show moreomnis.contact 108.165.243.164 - - [05/Sep/2024:17:49:36.505098 +0200] "GET /wp-l0gin.php HTTP/1.1" 403 199 "-" "-" ZtnTEKf5NynIK183N2zOZwAAARI "-" /apache/20240905/20240905-1749/20240905-174936-ZtnTEKf5NynIK183N2zOZwAAARI 0 1665 md5:6b82dc3028a3a6d7e8882262a637ed22 omnis.contact 108.165.243.164 - - [05/Sep/2024:17:49:37.176124 +0200] "GET /s.php HTTP/1.1" 403 199 "-" "-" ZtnTEaf5NynIK183N2zOagAAAQI "-" /apache/20240905/20240905-1749/20240905-174937-ZtnTEaf5NynIK183N2zOagAAAQI 0 1651 md5:bf758936faf5c09a3a730b61b055ad1e omnis.contact 108.165.243.164 - - [05/Sep/2024:17:49:37.675262 +0200] "GET /lock360.php HTTP/1.1" 403 199 "-" "-" ZtnTEaf5NynIK183N2zOawAAAQM "-" /apache/20240905/20240905-1749/20240905-174937-ZtnTEaf5NynIK183N2zOawAAAQM 0 1663 md5:be4ddf2c73c22bd53c3a99c6cb63c806 omnis.contact 108.165.243.164 - - [05/Sep/2024:17:49:38.374409 +0200] "GET /ioxi-rex3.php7 HTTP/1.1" 403 199 "-" "-" ZtnTEqf5NynIK183N2zObAAAAQU "-" /apache/20240905/20240905-1749/20240905-174938-ZtnTEqf5Nyn ... show less	DDoS Attack Brute-Force
paulshipley.com.au	2024-09-05 14:20:19 (5 days ago)	paulshipley.id.au:443 108.165.243.164 - - [06/Sep/2024:00:19:53 +1000] "GET /wp-includes/images/wp-l ... show morepaulshipley.id.au:443 108.165.243.164 - - [06/Sep/2024:00:19:53 +1000] "GET /wp-includes/images/wp-login.php HTTP/1.1" 404 69012 "http://paulshipley.id.au/wp-includes/images/wp-login.php" "Go-http-client/1.1" paulshipley.id.au:443 108.165.243.164 - - [06/Sep/2024:00:19:56 +1000] "GET /.well-known/pki-validation/ HTTP/1.1" 404 65763 "http://paulshipley.id.au/.well-known/pki-validation/" "Go-http-client/1.1" paulshipley.id.au:443 108.165.243.164 - - [06/Sep/2024:00:20:02 +1000] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 892 "https://paulshipley.id.au/wp-includes/SimplePie/index.php" "Go-http-client/1.1" paulshipley.id.au:443 108.165.243.164 - - [06/Sep/2024:00:20:03 +1000] "GET /inc.php HTTP/1.1" 404 65721 "http://paulshipley.id.au/inc.php" "Go-http-client/1.1" paulshipley.id.au:443 108.165.243.164 - - [06/Sep/2024:00:20:05 +1000] "GET /wp-includes/item.php HTTP/1.1" 404 65749 "http://paulshipley.id.au/wp-includes/item.php" "Go-http-client/1.1" paulshipley.id.au:443 108.165.243.164 - - [ ... show less	Web App Attack
Anonymous	2024-09-05 00:54:37 (6 days ago)	wordpress-trap	Web App Attack
Anonymous	2024-09-04 08:42:48 (6 days ago)	wordpress-trap	Web App Attack
paulshipley.com.au	2024-08-15 08:26:53 (3 weeks ago)	underconstruction.paulshipley.info:443 108.165.243.164 - - [15/Aug/2024:18:23:19 +1000] "GET /wp-con ... show moreunderconstruction.paulshipley.info:443 108.165.243.164 - - [15/Aug/2024:18:23:19 +1000] "GET /wp-content/classwithtostring.php HTTP/1.1" 404 3690 "http://whoson2day.com/wp-content/classwithtostring.php" "Go-http-client/1.1" underconstruction.paulshipley.info:443 108.165.243.164 - - [15/Aug/2024:18:24:42 +1000] "GET /ova.phpalfa HTTP/1.1" 404 3689 "http://whoson2day.com/ova.phpalfa" "Go-http-client/1.1" underconstruction.paulshipley.info:443 108.165.243.164 - - [15/Aug/2024:18:24:45 +1000] "GET /wp-content/mah.php HTTP/1.1" 404 450 "http://whoson2day.com/wp-content/mah.php" "Go-http-client/1.1" underconstruction.paulshipley.info:443 108.165.243.164 - - [15/Aug/2024:18:24:46 +1000] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 404 450 "http://whoson2day.com/wp-includes/IXR/wp-login.php" "Go-http-client/1.1" underconstruction.paulshipley.info:443 108.165.243.164 - - [15/Aug/2024:18:24:49 +1000] "GET /wp-includes/mah.php HTTP/1.1" 404 450 "http://whoson2day.com/wp-includes/mah.php" "Go-http ... show less	Web App Attack
Anonymous	2024-08-14 12:51:39 (3 weeks ago)	wordpress-trap	Web App Attack
TPI-Abuse	2024-08-14 08:05:49 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 108.165.243.164 (-): 1 in the last 300 secs; Po ... show more(mod_security) mod_security (id:210492) triggered by 108.165.243.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 14 04:05:42.154984 2024] [security2:error] [pid 17920:tid 17920] [client 108.165.243.164:44219] [client 108.165.243.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zoboz.com"] [uri "/wp-config.php"] [unique_id "ZrxlVmULIc6Rt0w7LX0hNAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-08-14 04:45:39 (3 weeks ago)	wordpress-trap	Web App Attack
TPI-Abuse	2024-08-12 05:31:04 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 108.165.243.164 (-): 1 in the last 300 secs; Po ... show more(mod_security) mod_security (id:210492) triggered by 108.165.243.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 12 01:30:56.044288 2024] [security2:error] [pid 4885:tid 4885] [client 108.165.243.164:6767] [client 108.165.243.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vaezi.com"] [uri "/wp-content/plugins/wp-config.php"] [unique_id "ZrmeEKhpwUUIBRxWY3YYrwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-08-12 01:12:21 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 108.165.243.164 (-): 1 in the last 300 secs; Po ... show more(mod_security) mod_security (id:210492) triggered by 108.165.243.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 11 21:12:17.538602 2024] [security2:error] [pid 6077:tid 6077] [client 108.165.243.164:38203] [client 108.165.243.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xirin.org"] [uri "/wp-config.php"] [unique_id "ZrlhcSbwxKf_G0NvQduSmQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
girlbossceo	2024-08-12 00:19:12 (4 weeks ago)	This IP accessed a banned path "/wp-admin/network/editor.php" with User Agent "Go-http-client/2.0". ... show moreThis IP accessed a banned path "/wp-admin/network/editor.php" with User Agent "Go-http-client/2.0". (ListenCaddy) show less	Bad Web Bot Web App Attack
Anonymous	2024-08-11 23:47:51 (4 weeks ago)	wordpress-trap	Web App Attack
TPI-Abuse	2024-08-11 22:00:58 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 108.165.243.164 (-): 1 in the last 300 secs; Po ... show more(mod_security) mod_security (id:210492) triggered by 108.165.243.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 11 18:00:51.618697 2024] [security2:error] [pid 2056:tid 2056] [client 108.165.243.164:41239] [client 108.165.243.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tekbit.com"] [uri "/wp-content/plugins/wp-config.php"] [unique_id "Zrk0k7YNWe3jCZJEtfNncAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack