JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.117.134.103

216.117.134.103

Neutral Activity

45 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Advanced Internet Technologies, Inc.

Usage Type

Data Center/Web Hosting/Transit

ASN

AS10843

Hostname(s)

mail2.iconpcug.org

Domain Name

ait.com

Country

🇺🇸 United States of America

City

Fayetteville, North Carolina

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

216.117.134.103 has been reported 45 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 216.117.134.103:

This IP address has been reported a total of 45 times from 15 distinct sources. 216.117.134.103 was first reported on August 20th 2021, and the most recent report was 4 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 raymarron.com	2021-09-14 09:28:54 (4 years ago)	GET /wp-content/plugins/google-mp3-audio-player/direct_download.php?file=../../../wp-config.php GET ... show more GET /wp-content/plugins/google-mp3-audio-player/direct_download.php?file=../../../wp-config.php GET /wp-content/plugins/simple-image-manipulator/controller/download.php?filepath=../../../wp-config.php (x2) GET /wp-content/plugins/recent-backups/download-file.php?file_link=../../../wp-config.php GET /wp-content/plugins/wptf-image-gallery/lib-mbox/ajax_load.php?url=../../../../wp-config.php GET /wp-content/themes/mTheme-Unus/css/css.php?files=../../../../wp-config.php GET /wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php GET /wp-config.php show less	Exploited Host Web App Attack
🇺🇸 danleepre	2021-09-14 09:18:28 (4 years ago)	[Tue Sep 14 10:04:01.778496 2021] [:error] [pid 11316] [client 216.117.134.103:6606] [client 216.117 ... show more [Tue Sep 14 10:04:01.778496 2021] [:error] [pid 11316] [client 216.117.134.103:6606] [client 216.117.134.103] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 20)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "***.com"] [uri "/wp-content/plugins/recent-backups/download-file.php"] [unique_id "YUBzkWtoS8aC1E8b8OSxMAAAABk"] show less	Hacking Web App Attack
🇲🇾 syokadmin	2021-09-14 07:37:54 (4 years ago)	(mod_security) mod_security (id:949110) triggered by 216.117.134.103 (US/United States/sha1.ordermca ... show more (mod_security) mod_security (id:949110) triggered by 216.117.134.103 (US/United States/sha1.ordermcafeeupdates.com): 1 in the last 3600 secs show less	Brute-Force
🇦🇺 clapper	2021-09-14 05:25:45 (4 years ago)	(mod_security) mod_security (id:949110) triggered by 216.117.134.103 (US/United States/sha1.ordermca ... show more (mod_security) mod_security (id:949110) triggered by 216.117.134.103 (US/United States/sha1.ordermcafeeupdates.com): 5 in the last 14400 secs; ID: zul show less	Brute-Force Bad Web Bot
🇬🇧 headwall	2021-09-14 04:55:52 (4 years ago)	Probe for WordPress internals file wp-config.php by client 216.117.134.103 on local port 443	Web App Attack
🇬🇧 UKFast Security	2021-09-14 04:33:11 (4 years ago)	Common web attack.	Web App Attack
🇺🇸 jean	2021-09-14 01:45:04 (4 years ago)	GET /wp-config.php 404 GET /wp-config.php 404	Web App Attack
🇺🇸 Rocky Mountain Bioengineering Symposium	2021-09-13 23:06:08 (4 years ago)	216.117.134.103 - - [13/Sep/2021:21:06:07 -0600] "GET /wp-admin/admin-ajax.php?action=revslider_show ... show more 216.117.134.103 - - [13/Sep/2021:21:06:07 -0600] "GET /wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php HTTP/1.1" 404 17955 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0" ... show less	Web App Attack
🇲🇾 syokadmin	2021-09-13 21:47:32 (4 years ago)	(cpanel) Failed cPanel login from 216.117.134.103 (US/United States/sha1.ordermcafeeupdates.com): 1 ... show more (cpanel) Failed cPanel login from 216.117.134.103 (US/United States/sha1.ordermcafeeupdates.com): 1 in the last 3600 secs show less	Brute-Force Web App Attack
🇲🇾 syokadmin	2021-09-12 21:36:59 (4 years ago)	(cpanel) Failed cPanel login from 216.117.134.103 (US/United States/sha1.ordermcafeeupdates.com): 1 ... show more (cpanel) Failed cPanel login from 216.117.134.103 (US/United States/sha1.ordermcafeeupdates.com): 1 in the last 3600 secs show less	Brute-Force Web App Attack
🇸🇬 whirlpoole	2021-09-12 20:11:10 (4 years ago)	(cpanel,mod_security) Login failure/trigger from 216.117.134.103 (US/United States/sha1.ordermcafeeu ... show more (cpanel,mod_security) Login failure/trigger from 216.117.134.103 (US/United States/sha1.ordermcafeeupdates.com): 10 in the last 3600 secs show less	Brute-Force Web App Attack
🇺🇸 GeekOnTheHill	2021-09-12 15:31:02 (4 years ago)	Multiple failed cPanel logins	Web App Attack
🇬🇧 UKFast Security	2021-09-09 10:16:55 (5 years ago)	Suspicious URL access.	Web App Attack
🇸🇬 whirlpoole	2021-09-08 23:11:01 (5 years ago)	(mod_security) mod_security (id:949110) triggered by 216.117.134.103 (US/United States/sha1.ordermca ... show more (mod_security) mod_security (id:949110) triggered by 216.117.134.103 (US/United States/sha1.ordermcafeeupdates.com): 10 in the last 3600 secs show less	Brute-Force
🇲🇾 syokadmin	2021-09-08 16:17:17 (5 years ago)	(mod_security) mod_security (id:949110) triggered by 216.117.134.103 (US/United States/sha1.ordermca ... show more (mod_security) mod_security (id:949110) triggered by 216.117.134.103 (US/United States/sha1.ordermcafeeupdates.com): 1 in the last 3600 secs show less	Brute-Force

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 223.204.223.135

🇺🇸 216.189.159.208

🇷🇺 185.253.186.150

🇨🇳 180.76.226.129

🇫🇮 178.20.210.197

🇨🇳 115.56.157.163

🇫🇷 91.196.152.12

🇩🇿 41.111.198.172

🇻🇪 190.142.97.50

🇨🇳 182.242.169.71

🇲🇩 178.175.167.68

🇺🇸 152.32.205.228

🇯🇵 139.162.78.6

🇮🇳 122.166.122.111

🇯🇵 118.194.228.101

🇹🇼 104.199.176.250

🇩🇪 69.5.169.197

🇵🇰 59.103.230.194

🇳🇱 45.148.10.157

🇷🇴 2.57.122.53