AbuseIPDB » 162.144.106.118

Check an IP Address, Domain Name, or Subnet

e.g. 34.239.147.7, microsoft.com, or 5.188.10.0/24

162.144.106.118 was found in our database!

This IP was reported 69 times. Confidence of Abuse is 100%: ?

100%

ISP	Unified Layer
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	server.ospreyuw.com
Domain Name	unifiedlayer.com
Country	United States of America
City	Provo, Utah

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 162.144.106.118

Whois 162.144.106.118

IP Abuse Reports for 162.144.106.118:

This IP address has been reported a total of 69 times from 25 distinct sources. 162.144.106.118 was first reported on May 4th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
4server	01 Jul 2022	[FriJul0116:33:25.0277532022][:error][pid11633:tid47906390386432][client162.144.106.118:58654][clien ... show more[FriJul0116:33:25.0277532022][:error][pid11633:tid47906390386432][client162.144.106.118:58654][client162.144.106.118]ModSecurity:Accessdeniedwithcode403$phase2$.Found1byte$s$inARGS_NAMES:000K\\\\xc9L\\\\xd5\\\\xc8M1\\\\xd506\\\\x01BMMk\\\\x00outsiderange:1-255.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"101\"][id\"390626\"][rev\"23\"][msg\"Atomicorp.comWAFRules:NullByteAttackBlocked$NullbytecharacterinArgumentName$\"][severity\"ALERT\"][hostname\"freiraumhaus.ch\"][uri\"/xmlrc.php\"][unique_id\"Yr8FtAyaF2uq6XRs2hToUAAAAFY\"]\,referer:freiraumhaus.ch[FriJul0116:33:30.8973612022][:error][pid11821:tid47906379880192][client162.144.106.118:59486][client162.144.106.118]ModSecurity:Accessdeniedwithcode403$phase2$.Found1byte$s$inARGS_NAMES:000K\\\\xc9L\\\\xd5\\\\xc8M1\\\\xd506\\\\x01BMMk\\\\x00outsiderange:1-255.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"101\"][id\"390626\"][rev\"23\"][msg\"Atomicorp.comWAFRules:NullByteAttackBlocked\(NullbytecharacterinArgumen show less	Port Scan Brute-Force Web App Attack
Maykson	30 Jun 2022	162.144.106.118 - - [30/Jun/2022:08:44:23 -0300] "GET /old-index.php?daksldlkdsadas=1 HTTP/1.1" 301 ... show more162.144.106.118 - - [30/Jun/2022:08:44:23 -0300] "GET /old-index.php?daksldlkdsadas=1 HTTP/1.1" 301 597 "definews.today" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.75 Safari/537.36" ... show less	Exploited Host Web App Attack
Maykson	30 Jun 2022	162.144.106.118 - - [30/Jun/2022:07:52:04 -0300] "GET /oldsite/old-index.php?daksldlkdsadas=1 HTTP/1 ... show more162.144.106.118 - - [30/Jun/2022:07:52:04 -0300] "GET /oldsite/old-index.php?daksldlkdsadas=1 HTTP/1.1" 404 10290 "beatloko.com.br" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.75 Safari/537.36" ... show less	Exploited Host Web App Attack
Maykson	29 Jun 2022	162.144.106.118 - - [30/Jun/2022:00:31:15 -0300] "GET /web/old-index.php?daksldlkdsadas=1 HTTP/1.1" ... show more162.144.106.118 - - [30/Jun/2022:00:31:15 -0300] "GET /web/old-index.php?daksldlkdsadas=1 HTTP/1.1" 404 512 "iecastanhal.com" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.75 Safari/537.36" ... show less	Exploited Host Web App Attack
gerensat	28 Jun 2022	2022-06-28 14:31:24 \| /radio.txt \| [] \| Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTM ... show more2022-06-28 14:31:24 \| /radio.txt \| [] \| Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.75 Safari/537.36 show less	Web App Attack
Anonymous	27 Jun 2022	Malicious activity detected	Hacking Brute-Force
Maykson	27 Jun 2022	162.144.106.118 - - [27/Jun/2022:14:49:26 -0300] "GET /old-index.php?daksldlkdsadas=1 HTTP/1.1" 301 ... show more162.144.106.118 - - [27/Jun/2022:14:49:26 -0300] "GET /old-index.php?daksldlkdsadas=1 HTTP/1.1" 301 625 "www.santuarionsgracas.com.br" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.75 Safari/537.36" ... show less	Exploited Host Web App Attack
iNetWorker	27 Jun 2022	trolling for resource vulnerabilities	Web App Attack
Anonymous	23 Jun 2022	Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probin ... show moreAttacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools show less	Brute-Force Web App Attack
Maykson	23 Jun 2022	162.144.106.118 - - [23/Jun/2022:12:44:25 -0300] "GET /old-index.php?daksldlkdsadas=1 HTTP/1.1" 404 ... show more162.144.106.118 - - [23/Jun/2022:12:44:25 -0300] "GET /old-index.php?daksldlkdsadas=1 HTTP/1.1" 404 53381 "adssolucoesfinanceiras.com.br" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.75 Safari/537.36" ... show less	Exploited Host Web App Attack
Maykson	23 Jun 2022	162.144.106.118 - - [23/Jun/2022:11:04:48 -0300] "GET /website/old-index.php?daksldlkdsadas=1 HTTP/1 ... show more162.144.106.118 - - [23/Jun/2022:11:04:48 -0300] "GET /website/old-index.php?daksldlkdsadas=1 HTTP/1.1" 301 633 "www.gauchoeventos.com.br" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.75 Safari/537.36" ... show less	Exploited Host Web App Attack
Maykson	23 Jun 2022	162.144.106.118 - - [23/Jun/2022:09:03:19 -0300] "GET /wordpress/old-index.php?daksldlkdsadas=1 HTTP ... show more162.144.106.118 - - [23/Jun/2022:09:03:19 -0300] "GET /wordpress/old-index.php?daksldlkdsadas=1 HTTP/1.1" 301 615 "scirre.com.br" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.75 Safari/537.36" ... show less	Exploited Host Web App Attack
4server	22 Jun 2022	[WedJun2209:09:47.7666172022][:error][pid14908:tid47096967264000][client162.144.106.118:39238][clien ... show more[WedJun2209:09:47.7666172022][:error][pid14908:tid47096967264000][client162.144.106.118:39238][client162.144.106.118]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\$mozilla\^\\|mozilla/[45]\\\\\\\\.[1-9]\\|\^mozilla/4\\\\\\\\.0\$$\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"334\"][id\"330131\"][rev\"3\"][msg\"Atomicorp.comWAFRules:MaliciousBotBlocked$FakeMozillaUserAgentStringDetected$\"][severity\"CRITICAL\"][hostname\"eimeko.ch\"][uri\"/.atime\"][unique_id\"YrLAOy8wHD47UMn9Zv2hgwAAAI8\"]\,referer:eimeko.ch[WedJun2209:09:49.3112312022][:error][pid14813:tid47096977770240][client162.144.106.118:43340][client162.144.106.118]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\$mozilla\^\\|mozilla/[45]\\\\\\\\.[1-9]\\|\^mozilla/4\\\\\\\\.0\$$\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"334\"][id\"330131\"][rev\"3\"][msg\"Atomicorp.comWAFRules:MaliciousBotBlocked\(Fak show less	Port Scan Brute-Force Web App Attack
jasperedv.de	22 Jun 2022	Apache Login - Brutforcing	Brute-Force Web App Attack
Maykson	20 Jun 2022	162.144.106.118 - - [20/Jun/2022:22:29:35 -0300] "GET /old-index.php?daksldlkdsadas=1 HTTP/1.1" 301 ... show more162.144.106.118 - - [20/Jun/2022:22:29:35 -0300] "GET /old-index.php?daksldlkdsadas=1 HTTP/1.1" 301 593 "amdev.com.br" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.75 Safari/537.36" ... show less	Exploited Host Web App Attack