AbuseIPDB » 162.214.90.26

162.214.90.26 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 28%: ?

28%

ISP	Unified Layer
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	vps-7266259.mgaplay.com.br
Domain Name	unifiedlayer.com
Country	United States of America
City	Provo, Utah

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 162.214.90.26

Whois 162.214.90.26

IP Abuse Reports for 162.214.90.26:

This IP address has been reported a total of 15 times from 8 distinct sources. 162.214.90.26 was first reported on June 13th 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
vestibtech	2024-09-10 07:38:34 (1 week ago)	Sep 10 01:38:34 Host-KLAX-C amavis[3651471]: (3651471-01) Blocked SPAM {RejectedInternal}, AM.PDP-SO ... show moreSep 10 01:38:34 Host-KLAX-C amavis[3651471]: (3651471-01) Blocked SPAM {RejectedInternal}, AM.PDP-SOCK LOCAL [162.214.90.26] [162.214.90.26] <[email protected]> -> <[email protected]>, Queue-ID: 3E4381BCD9A, Message-ID: <[email protected]>, mail_id: PxTan9cFMMRj, Hits: 12.647, size: 6664, 800 ms ... show less	Email Spam
VHosting	2024-09-02 05:53:56 (2 weeks ago)	Attempt from 162.214.90.26, reason: FailedCaptchaVerify	DDoS Attack Bad Web Bot
RidgeStar	2024-08-15 19:42:09 (1 month ago)	2024-08-15T12:37:53-07:00: http://fwsra.org/phpmyadmin2021/ 2024-08-15T12:37:19-07:00: http:// ... show more2024-08-15T12:37:53-07:00: http://fwsra.org/phpmyadmin2021/ 2024-08-15T12:37:19-07:00: http://fwsra.org/phpmyadmin2018/ 2024-08-15T12:34:21-07:00: http://fwsra.org/phpmyadmin2024/ 2024-08-15T12:31:53-07:00: http://fwsra.org/wp-includes.tar 2024-08-15T12:30:59-07:00: http://fwsra.org/phpmyadmin2/ 2024-08-15T12:29:58-07:00: http://fwsra.org/wp-admin.zip 2024-08-15T12:27:35-07:00: http://fwsra.org/phpmyadmin2022/ show less	Hacking Web App Attack
RidgeStar	2024-08-15 19:25:08 (1 month ago)	2024-08-15T12:22:50-07:00: http://fwsra.org/wp-includes.bz 2024-08-15T12:15:38-07:00: http://f ... show more2024-08-15T12:22:50-07:00: http://fwsra.org/wp-includes.bz 2024-08-15T12:15:38-07:00: http://fwsra.org/wp-includes.tar.gz show less	Hacking Web App Attack
RidgeStar	2024-08-15 19:09:04 (1 month ago)	2024-08-15T12:04:00-07:00: http://fwsra.org/phpmyadmin2023/ 2024-08-15T11:58:40-07:00: http:// ... show more2024-08-15T12:04:00-07:00: http://fwsra.org/phpmyadmin2023/ 2024-08-15T11:58:40-07:00: http://fwsra.org/etc/phpmyadmin/ 2024-08-15T11:57:06-07:00: http://fwsra.org/phpmyadmin2017/ 2024-08-15T11:55:51-07:00: http://fwsra.org/phpmyadmin/ 2024-08-15T11:54:19-07:00: http://fwsra.org/blog/phpmyadmin 2024-08-15T11:52:12-07:00: http://fwsra.org/wp-admin.bz show less	Hacking Web App Attack
RidgeStar	2024-08-15 18:50:02 (1 month ago)		Hacking Web App Attack
w-e-c-l-o-u-d-i-t	2024-08-11 22:21:36 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 162.214.90.26 (US/United States/vps-7266259.mga ... show more(mod_security) mod_security (id:210492) triggered by 162.214.90.26 (US/United States/vps-7266259.mgaplay.com.br): 1 in the last 600 secs; Ports: *; Direction: 0; Trigger: LF_MODSEC show less	Brute-Force SSH
VHosting	2024-08-11 16:37:31 (1 month ago)	Attempt from 162.214.90.26, reason: FailedCaptchaVerify	DDoS Attack Bad Web Bot
VHosting	2024-08-11 14:43:35 (1 month ago)	Attempt from 162.214.90.26, reason: OverConnLimit	DDoS Attack Bad Web Bot
TPI-Abuse	2024-08-11 05:20:07 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 162.214.90.26 (vps-7266259.mgaplay.com.br): 1 i ... show more(mod_security) mod_security (id:210730) triggered by 162.214.90.26 (vps-7266259.mgaplay.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 11 01:20:00.257025 2024] [security2:error] [pid 665230:tid 665230] [client 162.214.90.26:33244] [client 162.214.90.26] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|alphaplanning.com\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "alphaplanning.com"] [uri "/data.bak"] [unique_id "ZrhKAMKTOS7kFTnzIyVm0AAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-08-10 18:48:07 (1 month ago)	wordpress-trap	Web App Attack
TPI-Abuse	2024-08-10 13:33:58 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 162.214.90.26 (vps-7266259.mgaplay.com.br): 1 i ... show more(mod_security) mod_security (id:210730) triggered by 162.214.90.26 (vps-7266259.mgaplay.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 10 09:33:55.074135 2024] [security2:error] [pid 26036:tid 26036] [client 162.214.90.26:33974] [client 162.214.90.26] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ferhardi.com\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ferhardi.com"] [uri "/wp-admin.bak"] [unique_id "ZrdsQ7MVUAd2ljuhjdZYCwAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-08-07 00:16:52 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 162.214.90.26 (vps-7266259.mgaplay.com.br): 1 i ... show more(mod_security) mod_security (id:225170) triggered by 162.214.90.26 (vps-7266259.mgaplay.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 06 20:16:44.921612 2024] [security2:error] [pid 22400:tid 22400] [client 162.214.90.26:58908] [client 162.214.90.26] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|puckerbottombikinis.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "puckerbottombikinis.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZrK87D-Ab92innaYT7trcwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
neo72	2024-08-06 17:32:16 (1 month ago)	Spam	Email Spam
Anonymous	2022-06-13 06:20:03 (2 years ago)	spam source	Email Spam Exploited Host