JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 162.241.216.248

162.241.216.248 was found in our database!

This IP was reported 141 times. Confidence of Abuse is 100%: ?

100%

ISP	Unified Layer
Usage Type	Content Delivery Network
ASN	AS31898
Hostname(s)	box5444.bluehost.com
Domain Name	unifiedlayer.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 162.241.216.248

Whois 162.241.216.248

IP Abuse Reports for 162.241.216.248:

This IP address has been reported a total of 141 times from 78 distinct sources. 162.241.216.248 was first reported on January 7th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-24 05:46:15 (2 days ago)	Failed Wordpress Logins	Web App Attack
🇺🇸 1cyb3rpunk	2026-10-23 18:42:49 (3 days ago)	Coordinated campaign CMP-1786835248-000: 2228 IPs sharing an attack fingerprint (acme_challenge_prob ... show more Coordinated campaign CMP-1786835248-000: 2228 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-22 02:12:11 (5 days ago)	Failed Wordpress Logins	Web App Attack
🇺🇸 1cyb3rpunk	2026-10-19 20:13:02 (1 week ago)	Coordinated campaign CMP-1786835248-000: 1782 IPs sharing an attack fingerprint (acme_challenge_prob ... show more Coordinated campaign CMP-1786835248-000: 1782 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-18 20:46:11 (1 week ago)	Failed Wordpress Logins	Web App Attack
🇲🇽 octageeks.com	2026-10-17 04:06:47 (1 week ago)	Wordpress malicious attack:[octawp]	Web App Attack
🇫🇷 tecnicorioja	2026-10-16 22:01:52 (1 week ago)	wp-login attack [16/Oct/2026:04:48:24	Brute-Force Web App Attack
🇲🇹 Malta	2026-10-16 12:34:17 (1 week ago)	162.241.216.248 - - [16/Oct/2026:14:34:17 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macinto ... show more 162.241.216.248 - - [16/Oct/2026:14:34:17 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇩🇪 Marc	2026-10-16 12:08:08 (1 week ago)	162.241.216.248 - - [16/Oct/2026:13:34:27 +0200] "POST /wp-login.php HTTP/2.0" 200 3642 "https://hec ... show more 162.241.216.248 - - [16/Oct/2026:13:34:27 +0200] "POST /wp-login.php HTTP/2.0" 200 3642 "https://heckmann-elektro.de/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 162.241.216.248 - - [16/Oct/2026:13:34:29 +0200] "GET /wp-login.php?redirect_to=https%3A%2F%2Fheckmann-elektro.de%2Fwp-admin%2Fprofile.php&reauth=1 HTTP/2.0" 200 4917 "https://heckmann-elektro.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 162.241.216.248 - - [16/Oct/2026:13:34:30 +0200] "GET /wp-login.php?redirect_to=https%3A%2F%2Fheckmann-elektro.de%2Fwp-admin%2F&reauth=1 HTTP/2.0" 200 4657 "https://heckmann-elektro.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 162.241.216.248 - - [16/Oct/2026:14:08:03 +0200] "POST /wp-login.php HTTP/2.0" 200 3598 "https://alsarnsberg.eu/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (K show less	Brute-Force Web App Attack
🇳🇱 Alt255	2026-10-16 12:04:45 (1 week ago)	[ti-17al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpr ... show more [ti-17al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 162.241.216.248 - - [16/Oct/2026:14:02:30 +0200] "POST /wp-login.php HTTP/2.0" 200 3082 "https://www.maasvastgoedonderhoud.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 162.241.216.248 - - [16/Oct/2026:14:02:32 +0200] "POST /xmlrpc.php HTTP/2.0" 403 2007 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 162.241.216.248 - - [16/Oct/2026:14:04:25 +0200] "POST /wp-login.php HTTP/2.0" 200 3146 "https://www.touwtrein.nl/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 162.241.216.248 - - [16/Oct/2026:14:0 ... show less	Brute-Force Web App Attack
🇹🇷 oalver	2026-10-16 12:02:33 (1 week ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signa ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /wordpress/wp-login.php (HTTP 503). First seen: 2026-10-16. Risk score: 30/100. show less	Web App Attack
🇩🇪 ITcloud	2026-10-16 11:56:31 (1 week ago)	Credential brute-force against a web authentication endpoint: 153 failed login attempts observed bet ... show more Credential brute-force against a web authentication endpoint: 153 failed login attempts observed between 2026-10-14T16:47:01+00:00 and 2026-10-16T11:56:31+00:00 UTC. show less	Brute-Force Web App Attack
Anonymous	2026-10-16 11:49:50 (1 week ago)	Attempt to POST to xmlrpc.php at 2026-10-16T11:49:50+00:00	Brute-Force Web App Attack
🇩🇪 Hazzard	2026-10-16 09:28:37 (1 week ago)	(wordpress) Failed wordpress login from 162.241.216.248 (US/United States/Arizona/Phoenix/box5444.bl ... show more (wordpress) Failed wordpress login from 162.241.216.248 (US/United States/Arizona/Phoenix/box5444.bluehost.com/[redacted]): (CF_ENABLE) show less	Brute-Force
🇩🇪 FeG Deutschland	2026-10-16 08:38:16 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack

Showing 1 to 15 of 141 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 167.71.158.49

🇨🇳 223.80.206.2

🇺🇸 192.250.227.16

🇧🇷 177.121.221.246

🇸🇬 150.109.10.219

🇺🇸 139.100.130.153

🇺🇸 134.209.120.216

🇸🇬 128.199.158.135

🇮🇳 128.185.208.42

🇨🇳 118.122.147.195

🇫🇷 91.196.152.90

🇺🇸 71.6.245.74

🇺🇸 64.207.225.55

🇳🇱 45.148.10.240

🇳🇱 204.76.203.222

🇳🇱 204.76.203.212

🇦🇷 181.10.138.162

🇧🇷 177.154.163.142

🇩🇪 172.121.37.200

🇮🇩 163.7.1.156