JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 163.123.142.197

163.123.142.197 was found in our database!

This IP was reported 232 times. Confidence of Abuse is 0%: ?

ISP	Des Equity LLC
Usage Type	Commercial
ASN	AS154323
Domain Name	des.capital
Country	🇮🇳 India
City	Muradnagar, Uttar Pradesh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 163.123.142.197

Whois 163.123.142.197

IP Abuse Reports for 163.123.142.197:

This IP address has been reported a total of 232 times from 97 distinct sources. 163.123.142.197 was first reported on January 22nd 2022, and the most recent report was 3 years ago.

Old Reports: The most recent abuse report for this IP address is from 3 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 mxinfra	2023-05-13 11:36:42 (3 years ago)	Fail2Ban triggered by apache-auth Sat 13 May 2023 01:36:42 PM CEST	Hacking Brute-Force Web App Attack
🇨🇿 akac	2022-12-10 04:52:22 (3 years ago)	Added into the Abuse.ch URLHaus IOC database by @abuse_ch for distributing malware with tags: exe, L ... show more Added into the Abuse.ch URLHaus IOC database by @abuse_ch for distributing malware with tags: exe, Loki, opendir. Source: https://urlhaus.abuse.ch/url/2453394/ show less	Hacking Exploited Host
🇨🇿 akac	2022-12-07 07:32:40 (3 years ago)	Added into the Abuse.ch URLHaus IOC database by @abuse_ch for distributing malware with tags: exe, L ... show more Added into the Abuse.ch URLHaus IOC database by @abuse_ch for distributing malware with tags: exe, Loki, opendir. Source: https://urlhaus.abuse.ch/url/2449553/ show less	Hacking Exploited Host
🇨🇿 akac	2022-12-06 02:59:17 (3 years ago)	Added into the Abuse.ch URLHaus IOC database by @abuse_ch for distributing malware with tags: exe, L ... show more Added into the Abuse.ch URLHaus IOC database by @abuse_ch for distributing malware with tags: exe, Loki, opendir. Source: https://urlhaus.abuse.ch/url/2447262/ show less	Hacking Exploited Host
🇨🇿 akac	2022-11-29 02:36:05 (3 years ago)	Added into the Abuse.ch URLHaus IOC database by @abuse_ch for distributing malware with tags: exe, L ... show more Added into the Abuse.ch URLHaus IOC database by @abuse_ch for distributing malware with tags: exe, Loki, opendir. Source: https://urlhaus.abuse.ch/url/2437791/ show less	Hacking Exploited Host
🇨🇿 akac	2022-11-28 03:05:52 (3 years ago)	Added into the Abuse.ch URLHaus IOC database by @abuse_ch for distributing malware with tags: exe, L ... show more Added into the Abuse.ch URLHaus IOC database by @abuse_ch for distributing malware with tags: exe, Loki, opendir. Source: https://urlhaus.abuse.ch/url/2435570/ show less	Hacking Exploited Host
🇪🇸 Cognisant-Security	2022-06-29 04:20:33 (4 years ago)	Known malicious User-Agents	Bad Web Bot Web App Attack
🇩🇪 lthde	2022-06-28 01:26:26 (4 years ago)	19/Jun/22 14:16:21 #1999414 CRITICAL - 163.123.142.197 POST /index.php - BASE64-encoded inje ... show more 19/Jun/22 14:16:21 #1999414 CRITICAL - 163.123.142.197 POST /index.php - BASE64-encoded injection - [POST:l = ICRzeXN0ZW0gPSAkX0dFVFsnYWRyaXYnXTsgaWYoJHN5c3RlbSA9PSAndnonKXskc2F3MSA9ICRfRklMRVNbJ2ZpbGUnXVsndG1wX25hbWUnXTskc2F3MiA9ICRfRklMRVNbJ2ZpbGUnXVsnbmFtZSddO2VjaG8gIjxmb3JtIG1ldGhvZD0nUE9TVCcgZW5...] show less	Web App Attack
🇺🇸 ut-addicted.com	2022-06-22 07:30:06 (4 years ago)	\[Wed Jun 22 13:30:03.258945 2022\] \[:error\] \[pid 7974:tid 139915289380608\] \[client 163.123.142 ... show more \[Wed Jun 22 13:30:03.258945 2022\] \[:error\] \[pid 7974:tid 139915289380608\] \[client 163.123.142.197:65123\] \[client 163.123.142.197\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "ut-addicted.com"\] \[uri "/wp-plain.php"\] \[unique_id "YrL9O-7b3-wwfBONeIIShAAAAMw"\], referer: www.google.com show less	Brute-Force Web App Attack
Anonymous	2022-06-21 14:00:37 (4 years ago)	WordPress Brute Force Attack	Hacking Brute-Force Web App Attack
🇩🇪 expandmade.com	2022-06-20 03:00:16 (4 years ago)	[bie] - trolling for installation vulnerabilities [20/Jun/2022:07:00:16 "GET /wp-plain.php"]	Web App Attack
🇩🇪 expandmade.com	2022-06-19 01:08:11 (4 years ago)	[tia] - trolling for installation vulnerabilities [19/Jun/2022:05:08:11 "GET /wp-plain.php"]	Web App Attack
🇩🇪 expandmade.com	2022-06-18 17:04:26 (4 years ago)	[the] - trolling for installation vulnerabilities [18/Jun/2022:21:04:26 "GET /wp-plain.php"]	Web App Attack
🇺🇸 expandmade.com	2022-06-18 10:37:15 (4 years ago)	[nut] - trolling for installation vulnerabilities [18/Jun/2022:14:37:14 "GET /wp-plain.php"]	Web App Attack
Anonymous	2022-06-17 13:18:07 (4 years ago)	163.123.142.197 - - [17/Jun/2022:19:15:54 +0200] "GET /wp-plain.php HTTP/1.1" 404 4870 "www.google.c ... show more 163.123.142.197 - - [17/Jun/2022:19:15:54 +0200] "GET /wp-plain.php HTTP/1.1" 404 4870 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 163.123.142.197 - - [17/Jun/2022:19:17:04 +0200] "GET /f8be3.php?adriv=vz HTTP/1.1" 404 4870 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 163.123.142.197 - - [17/Jun/2022:19:17:31 +0200] "POST /wp-plain.php HTTP/1.1" 404 4870 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 163.123.142.197 - - [17/Jun/2022:19:18:06 +0200] "GET /f8be3.php?adriv=vz HTTP/1.1" 404 4870 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Versio ... show less	Hacking Bad Web Bot

Showing 1 to 15 of 232 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 178.94.231.174

🇺🇸 206.189.233.36

🇮🇩 202.155.157.145

🇦🇷 201.234.106.215

🇺🇸 195.184.76.64

🇺🇸 195.184.76.61

🇧🇷 190.89.137.104

🇳🇱 188.166.10.27

🇺🇸 184.105.3.43

🇩🇪 167.94.146.46

🇺🇸 147.185.132.199

🇺🇸 147.185.132.192

🇺🇸 146.190.63.48

🇨🇳 120.48.11.36

🇺🇸 47.89.241.203

🇧🇷 45.164.251.106

🇺🇸 8.39.235.18

🇧🇷 190.89.137.240

🇲🇽 187.190.35.163

🇫🇷 146.59.183.16