JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

162.241.6.97

Neutral Activity

Abuse confidence score ?

0% Low Risk

75 reports

34 reporters · latest 1 year ago

ISP	Unified Layer
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Hostname(s)	server01.novoselementos.com
Domain Name	unifiedlayer.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

162.241.6.97 has been reported 75 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 162.241.6.97

Export CSV

This IP address has been reported a total of 75 times from 34 distinct sources. 162.241.6.97 was first reported on July 24th 2023, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 cheatmaster.store	2025-04-20 12:00:00 (1 year ago)	Detected as VPN or Open Proxy used for abusive activity	Brute-Force SSH
Anonymous	2024-05-23 21:50:37 (2 years ago)	"Proxies that are used for attacking https://pastebin.com/JZr9dSDT"	Open Proxy
Anonymous	2024-05-23 21:50:37 (2 years ago)	"Proxies that are used for attacking https://pastebin.com/JZr9dSDT"	Open Proxy
🇷🇸 Smel	2024-03-31 22:04:32 (2 years ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇨🇿 plzenskypruvodce.cz	2024-03-31 19:51:38 (2 years ago)	[Sun Mar 31 21:51:33.898914 2024] [access_compat:error] [pid 3185634:tid 140687156705024] [client 16 ... show more [Sun Mar 31 21:51:33.898914 2024] [access_compat:error] [pid 3185634:tid 140687156705024] [client 162.241.6.97:48449] AH01797: client denied by server configuration: /var/www/opusarium.cz/www/xmlrpc.php, referer: https://opusarium.cz/ [Sun Mar 31 21:51:37.430064 2024] [access_compat:error] [pid 3185634:tid 140687114741504] [client 162.241.6.97:54437] AH01797: client denied by server configuration: /var/www/opusarium.cz/www/xmlrpc.php, referer: https://opusarium.cz/ ... show less	Web App Attack
🇨🇦 Peter Chargen	2024-03-28 19:39:17 (2 years ago)	PHP email form abuse/SPAM attempt	Email Spam
🇦🇺 MAGIC	2024-03-28 09:01:45 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇨🇿 unhfree.net	2024-03-20 10:15:13 (2 years ago)	Mar 20 09:53:16 canopus postfix/smtpd[3845876]: NOQUEUE: reject: RCPT from server01.novoselementos.c ... show more Mar 20 09:53:16 canopus postfix/smtpd[3845876]: NOQUEUE: reject: RCPT from server01.novoselementos.com[162.241.6.97]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost.> Mar 20 09:55:57 canopus postfix/smtpd[3848403]: NOQUEUE: reject: RCPT from server01.novoselementos.com[162.241.6.97]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost.> Mar 20 10:01:24 canopus postfix/smtpd[3848553]: NOQUEUE: reject: RCPT from server01.novoselementos.com[162.241.6.97]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost.> Mar 20 10:42:37 ... show less	Brute-Force Exploited Host
🇦🇺 oncord	2024-03-19 23:36:20 (2 years ago)	Form spam	Web Spam
Anonymous	2024-03-14 10:15:33 (2 years ago)	Ports: 25,465,587; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-03-14 01:40:17 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 162.241.6.97 (server01.novoselementos.com): 1 i ... show more (mod_security) mod_security (id:210730) triggered by 162.241.6.97 (server01.novoselementos.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 13 21:40:13.121757 2024] [security2:error] [pid 25697] [client 162.241.6.97:42286] [client 162.241.6.97] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|puduspoems.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "puduspoems.com"] [uri "/web/20140107222105/http:/wwp.icq.com/scripts/WWPMsg.dll"] [unique_id "ZfJVfUmNSyI6S58y1h7A3gAAABI"], referer: http://puduspoems.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-03-13 18:10:05 (2 years ago)		Web App Attack
🇨🇿 unhfree.net	2024-03-13 02:28:29 (2 years ago)	Mar 12 17:04:01 canopus postfix/smtpd[1303811]: NOQUEUE: reject: RCPT from server01.novoselementos.c ... show more Mar 12 17:04:01 canopus postfix/smtpd[1303811]: NOQUEUE: reject: RCPT from server01.novoselementos.com[162.241.6.97]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost.> Mar 12 18:56:23 canopus postfix/smtpd[1299825]: NOQUEUE: reject: RCPT from server01.novoselementos.com[162.241.6.97]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost.> Mar 13 02:02:55 canopus postfix/smtpd[1382832]: NOQUEUE: reject: RCPT from server01.novoselementos.com[162.241.6.97]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost.> Mar 13 02:38:09 canopus postfix/smtpd[1436791]: NOQ ... show less	Brute-Force Exploited Host
🇪🇸 10dencehispahard SL	2024-03-10 19:00:22 (2 years ago)	Unauthorized login attempts [ accesslogs]	Brute-Force
Anonymous	2024-03-10 06:49:01 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 75 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 195.191.104.67

🇩🇪 172.69.151.228

🇺🇸 162.216.150.188

🇺🇸 198.23.213.7

🇰🇷 119.192.128.163

🇨🇳 117.27.135.84

🇩🇪 109.160.32.148

🇺🇸 70.167.235.205

🇺🇸 66.132.172.227

🇮🇳 66.116.207.168

🇫🇷 51.75.253.68

🇺🇸 45.33.84.124

🇮🇳 2409:40e4:4a:5d03:fc53:a224:fa2c:b062

🇨🇱 200.112.84.151

🇳🇱 195.178.110.30

🇳🇱 195.178.110.26

🇦🇷 190.230.219.208

🇳🇱 158.173.21.90

🇺🇸 143.42.1.34

🇨🇦 35.203.70.174