AbuseIPDB » 141.98.81.81

141.98.81.81 was found in our database!

This IP was reported 140 times. Confidence of Abuse is 98%: ?

98%

ISP	FlyServers S.A.
Usage Type	Data Center/Web Hosting/Transit
Domain Name	flyservers.com
Country	Netherlands
City	Amsterdam, Noord-Holland

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 141.98.81.81

Whois 141.98.81.81

IP Abuse Reports for 141.98.81.81:

This IP address has been reported a total of 140 times from 98 distinct sources. 141.98.81.81 was first reported on January 21st 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-07-19 06:20:29 (1 month ago)	141.98.81.81 - - [19/Jul/2024:08:11:50 +0200] "GET /?p=1652&Kztr%3D2138%20AND%201%3D1%20UNION%20ALL% ... show more141.98.81.81 - - [19/Jul/2024:08:11:50 +0200] "GET /?p=1652&Kztr%3D2138%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name%20FROM%20information_schema.tables%20WHERE%202%3E1--%2F%2A%2A%2F%3B%20EXEC%20xp_cmdshell%28%27cat%20..%2F..%2F..%2Fetc%2Fpasswd%27%29%23 HTTP/1.1" 200 8216 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US) AppleWebKit/534.3 (KHTML, like Gecko) Chrome/6.0.457.0 Safari/534.3" 141.98.81.81 - - [19/Jul/2024:08:20:16 +0200] "GET /?p=1652%29%20AND%20%28SELECT%203295%20FROM%28SELECT%20COUNT%28%2A%29%2CCONCAT%280x71707a6271%2C%28SELECT%20%28ELT%283295%3D3295%2C1%29%29%29%2C0x7171706a71%2CFLOOR%28RAND%280%29%2A2%29%29x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x%29a%29%20AND%20%286963%3D6963 HTTP/1.1" 200 8214 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US) AppleWebKit/534.3 (KHTML, like Gecko) Chrome/6.0.457.0 Safari/534.3" 141.98.81.81 - - [19/Jul/2024:08:20:21 +0200] "GET /?p=1652%20AND%20%28SELECT ... show less	Bad Web Bot
en0	2024-07-19 06:03:11 (1 month ago)	141.98.81.81 was recorded 3 times by 1 hosts attempting to connect to 1 unique ports. Incident count ... show more141.98.81.81 was recorded 3 times by 1 hosts attempting to connect to 1 unique ports. Incident counter (4h, 24h, all-time): 3, 3, 25 show less	Port Scan
en0	2024-07-18 00:02:54 (1 month ago)	141.98.81.81 was recorded 3 times by 1 hosts attempting to connect to 1 unique ports. Incident count ... show more141.98.81.81 was recorded 3 times by 1 hosts attempting to connect to 1 unique ports. Incident counter (4h, 24h, all-time): 3, 3, 15 show less	Port Scan
Anonymous	2024-07-17 13:41:51 (2 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
en0	2024-07-16 23:30:45 (2 months ago)	141.98.81.81 was recorded 3 times by 1 hosts attempting to connect to 1 unique ports. Incident count ... show more141.98.81.81 was recorded 3 times by 1 hosts attempting to connect to 1 unique ports. Incident counter (4h, 24h, all-time): 3, 3, 3 show less	Port Scan
hostseries	2024-07-16 14:20:12 (2 months ago)	Trigger: LF_MODSEC	Brute-Force
RidgeStar	2024-07-16 02:58:31 (2 months ago)	2024-07-15T19:58:30-07:00: 27) UNION ALL SELECT NULL,NULL,NULL,NULL,NULL-- pAPe 2024-07-15T19: ... show more2024-07-15T19:58:30-07:00: 27) UNION ALL SELECT NULL,NULL,NULL,NULL,NULL-- pAPe 2024-07-15T19:58:29-07:00: 27) UNION ALL SELECT NULL,NULL,NULL,NULL-- kbWf 2024-07-15T19:58:28-07:00: 27) UNION ALL SELECT NULL,NULL-- husV 2024-07-15T19:58:28-07:00: 27) UNION ALL SELECT NULL,NULL,NULL-- PqSt 2024-07-15T19:58:27-07:00: 27) UNION ALL SELECT NULL-- FZez show less	Hacking Web App Attack
SCHAPPY	2024-07-14 02:46:04 (2 months ago)	Critical web app attack detected. Path Traversal Attack (/../)	Web App Attack
Anonymous	2024-07-13 14:50:10 (2 months ago)	141.98.81.81 - - [13/Jul/2024:16:49:29 +0200] "GET /?p=112&DGBB%3D4876%20AND%201%3D1%20UNION%20ALL%2 ... show more141.98.81.81 - - [13/Jul/2024:16:49:29 +0200] "GET /?p=112&DGBB%3D4876%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name%20FROM%20information_schema.tables%20WHERE%202%3E1--%2F%2A%2A%2F%3B%20EXEC%20xp_cmdshell%28%27cat%20..%2F..%2F..%2Fetc%2Fpasswd%27%29%23 HTTP/1.1" 301 5073 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.205.0 Safari/532.0" 141.98.81.81 - - [13/Jul/2024:16:50:05 +0200] "GET /?p=112%29%20AND%20%28SELECT%202421%20FROM%28SELECT%20COUNT%28%2A%29%2CCONCAT%280x7171627071%2C%28SELECT%20%28ELT%282421%3D2421%2C1%29%29%29%2C0x71706b7671%2CFLOOR%28RAND%280%29%2A2%29%29x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x%29a%29%20AND%20%287406%3D7406 HTTP/1.1" 301 4835 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.205.0 Safari/532.0" 141.98.81.81 - - [13/Jul/2024:16:50:06 +0200] "GET /?p=112%20AND%20%28SELECT%20 ... show less	Bad Web Bot
XICTRON	2024-07-13 14:50:02 (2 months ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
octageeks.com	2024-07-13 04:06:44 (2 months ago)	Wordpress malicious attack:[octainjection]	Web App Attack
ChamberofCommerce.com	2024-07-13 03:05:43 (2 months ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show moreUnauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
gabry gabry	2024-07-12 13:14:00 (2 months ago)	1%\' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL-- DFLy	SQL Injection
octageeks.com	2024-07-12 04:06:43 (2 months ago)	Wordpress malicious attack:[octainjection]	Web App Attack
4server	2024-07-11 23:08:38 (2 months ago)	[FriJul1201:08:21.0301692024][security2:error][pid2909874:tid2910070][client141.98.81.81:0][client14 ... show more[FriJul1201:08:21.0301692024][security2:error][pid2909874:tid2910070][client141.98.81.81:0][client141.98.81.81]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"/etc/passwd\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"141\"][id\"347009\"][rev\"1\"][msg\"Atomicorp.comWAFRules:ProtectedFileaccessdenied\"][severity\"CRITICAL\"][hostname\"www.r102.ch\"][uri\"/wp-login.php\"][unique_id\"ZpBl5Y2ytrafilkGVUlPkAAAAIk\"][FriJul1201:08:25.0667722024][security2:error][pid2909832:tid2909936][client141.98.81.81:0][client141.98.81.81]ModSecurity:Accessdeniedwithcode501\(phase2\).Patternmatch\"\(\?:\\\\\\\\\(\(\?:\\\\\\\\W\\?\(\?:objectc\(\?:ategory\\|lass\)\\|homedirectory\\|[gu]idnumber\\|cn\)\\\\\\\\b\\\\\\\\W\\?=\\|[\^\\\\\\\\w\\\\\\\\x80-\\\\\\\\xFF]\*\?[\\\\\\\\\!\\\\\\\\\ show less	Blog Spam