AbuseIPDB » 162.214.164.200

162.214.164.200 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 14%: ?

14%

ISP	Unified Layer
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	vps-5537521.jpeduca.com.br
Domain Name	unifiedlayer.com
Country	United States of America
City	Provo, Utah

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 162.214.164.200

Whois 162.214.164.200

IP Abuse Reports for 162.214.164.200:

This IP address has been reported a total of 19 times from 16 distinct sources. 162.214.164.200 was first reported on January 16th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
idshield.pro	2024-08-26 10:58:34 (3 weeks ago)	[WAF] Multiple requests to /.env	Web App Attack
packets-decreaser.net	2024-08-14 22:28:37 (1 month ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
moohric.com	2024-08-12 02:47:22 (1 month ago)	This IP has been identified to be the exit IP of an open proxy.	Open Proxy
packets-decreaser.net	2024-08-05 15:25:02 (1 month ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
TPI-Abuse	2024-07-19 00:36:48 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 162.214.164.200 (vps-5537521.jpeduca.com.br): 1 ... show more(mod_security) mod_security (id:240335) triggered by 162.214.164.200 (vps-5537521.jpeduca.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 18 20:36:44.692347 2024] [security2:error] [pid 30875:tid 30875] [client 162.214.164.200:38969] [client 162.214.164.200] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 162.214.164.200 (+1 hits since last alert)\|www.spacebooger.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.spacebooger.com"] [uri "/xmlrpc.php"] [unique_id "Zpm1HFOY1mmNdzFmKEpzmwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
RLDD	2024-07-18 21:43:39 (2 months ago)	WP login attempts -mob	Brute-Force
el-brujo	2024-07-18 11:24:09 (2 months ago)	Cloudflare WAF: Request Path: /ddos/ Request Query: ?t205255270908(181829688487G7100670306192Q362484 ... show moreCloudflare WAF: Request Path: /ddos/ Request Query: ?t205255270908(181829688487G7100670306192Q362484339900 Host: www.elhacker.net userAgent: Mozilla/5.0 (compatible; MSIE 51.0; Intel Mac OS X; .NET CLR; Trident/91.0) Action: block Source: l7ddos ASN Description: UNIFIEDLAYER-AS-1 Country: US Method: GET Timestamp: 2024-07-18T11:24:09Z ruleId: 21c5b4a19c444e7687a8f570d3ac2d1e. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
Anonymous	2024-07-11 11:10:49 (2 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
myagent.site	2024-07-08 22:44:05 (2 months ago)	Banned for posting to wp-login.php without referer {"log":"admin","pwd":"emmagaskins2014","wp-submit ... show moreBanned for posting to wp-login.php without referer {"log":"admin","pwd":"emmagaskins2014","wp-submit":"Log In","redirect_to":"http:\/\/emmagaskins.com\/wp-admin\/","testcookie":"1"} show less	Hacking
HoneyPotEU02	2024-07-05 11:58:23 (2 months ago)	botnet 90k rps	DDoS Attack
CommanderRoot	2024-07-05 05:08:57 (2 months ago)	HTTP request flood	DDoS Attack Web Spam
10dencehispahard SL	2024-07-05 00:17:44 (2 months ago)	Unauthorized login attempts [ wordpress-xmlrpc, wordpress]	Brute-Force Web App Attack
VSM Networks	2024-03-10 13:07:27 (6 months ago)	Credential Stuffing	Brute-Force
CommanderRoot	2024-03-06 19:38:03 (6 months ago)	HTTP request flood	DDoS Attack Web Spam
sms.ru	2024-02-29 19:55:03 (6 months ago)	SMS pumping attack from foreign country	DDoS Attack