JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 162.217.100.196

162.217.100.196 was found in our database!

This IP was reported 349 times. Confidence of Abuse is 100%: ?

100%

ISP	Internap Holding LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS32475
Domain Name	horizoniq.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 162.217.100.196

Whois 162.217.100.196

IP Abuse Reports for 162.217.100.196:

This IP address has been reported a total of 349 times from 198 distinct sources. 162.217.100.196 was first reported on July 9th 2026, and the most recent report was 21 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 LB Solutions	2026-07-11 14:13:35 (21 seconds ago)	2026/07/11 11:13:34 [info] 2430481#0: 545043 client sent plain HTTP request to HTTPS port while rea ... show more 2026/07/11 11:13:34 [info] 2430481#0: 545043 client sent plain HTTP request to HTTPS port while reading client request headers, client: ::ffff:162.217.100.196, server: mail.lbsolutions.tec.br, request: "GET / HTTP/1.1", host: "45.176.224.145" ... show less	Brute-Force Bad Web Bot
Anonymous	2026-07-11 14:11:38 (2 minutes ago)	2026/07/11 14:11:37 [info] 4049380#0: 6630 client sent plain HTTP request to HTTPS port while readi ... show more 2026/07/11 14:11:37 [info] 4049380#0: 6630 client sent plain HTTP request to HTTPS port while reading client request headers, client: 162.217.100.196, server: m.nims.edu.gh, request: "GET / HTTP/1.1", host: "129.122.17.235" ... show less	Brute-Force Web App Attack
🇫🇮 mnazibo	2026-07-11 14:00:13 (13 minutes ago)	Date: Jul 11 16:53:04 2026 EAT \| Reported IP: 162.217.100.196 mod_security \| id: 920350 953100 95910 ... show more Date: Jul 11 16:53:04 2026 EAT \| Reported IP: 162.217.100.196 mod_security \| id: 920350 953100 959100 \| US/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Host header is a numeric IP address; Host header is a numeric IP address; PHP Information Leakage; Outbound Anomaly Score Exceeded (Total Score: 4); Host header is a numeric IP address; Host header is a numeric IP address; PHP Information Leakage; Outbound Anomaly Score Exceeded (Total Score: 4) show less	SQL Injection Brute-Force Bad Web Bot
🇺🇸 xmission.com	2026-07-11 13:55:45 (18 minutes ago)	Blocked by UFW (TCP on 443) Source port: 49175 TTL: 245 Packet length: 40 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 443) Source port: 49175 TTL: 245 Packet length: 40 TOS: 0x00 This report (for 162.217.100.196) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 Starburst SysOp Team	2026-07-11 13:54:02 (19 minutes ago)	Request Missing a Host Header. Operator EQ matched 0 at REQUEST_HEADERS. (920280-stl2-14)	Hacking
🇹🇼 tyetriiix	2026-07-11 13:46:18 (27 minutes ago)	Wazuh Alert Evidence: 162.217.100.196 - - [11/Jul/2026:13:46:17 +0000] "GET / HTTP/1.1" 400 248 "-" ... show more Wazuh Alert Evidence: 162.217.100.196 - - [11/Jul/2026:13:46:17 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info)" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-" show less	Web App Attack
🇵🇱 IT RDC	2026-07-11 13:40:16 (33 minutes ago)	2026/07/11 15:40:16 [info] 76052#0: 29869 client sent plain HTTP request to HTTPS port while readin ... show more 2026/07/11 15:40:16 [info] 76052#0: 29869 client sent plain HTTP request to HTTPS port while reading client request headers, client: 162.217.100.196, server: zimbra, request: "GET / HTTP/1.1", host: "83.238.86.39" ... show less	Web App Attack
🇫🇷 sbocquet	2026-07-11 13:38:27 (35 minutes ago)	Port 443 scanned from 162.217.100.196:54897.	Port Scan
🇸🇪 Esko	2026-07-11 13:32:45 (41 minutes ago)	162.217.100.196 - - [11/Jul/2026:13:32:45 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatib ... show more 162.217.100.196 - - [11/Jul/2026:13:32:45 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info)" show less	Port Scan
🇺🇸 xmission.com	2026-07-11 13:25:40 (48 minutes ago)	Blocked by UFW (TCP on 443) Source port: 43128 TTL: 242 Packet length: 40 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 443) Source port: 43128 TTL: 242 Packet length: 40 TOS: 0x08 This report (for 162.217.100.196) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇳🇴 Bots.go.to.hell	2026-07-11 13:19:56 (54 minutes ago)	This IP was detected by CrowdSec triggering custom/ip-honeypot	Web App Attack Bad Web Bot
🇵🇾 armandosaucedo.me	2026-07-11 13:15:47 (58 minutes ago)	Threat Intelligence via ARMTI, Web Attack: GET /	Web App Attack
🇺🇸 chronos	2026-07-11 13:12:16 (1 hour ago)	[AUTORAVALT][[11/07/2026 - 10:12:16 -03:00 UTC] Attack from [Internap Holding LLC] [162.217.100.196] ... show more [AUTORAVALT][[11/07/2026 - 10:12:16 -03:00 UTC] Attack from [Internap Holding LLC] [162.217.100.196] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> CMS blog comment spam. Web App Attack -> Attempts to pr] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇺🇸 MPL	2026-07-11 12:46:54 (1 hour ago)	tcp ports: 443,80 (62 or more attempts)	Port Scan
🇮🇹 matthew_eli	2026-07-11 12:45:08 (1 hour ago)	Keenetic Firewall: Persistent traffic from Blacklisted IP. Blocked via Kernel/NFLOG. (126 hits in 24 ... show more Keenetic Firewall: Persistent traffic from Blacklisted IP. Blocked via Kernel/NFLOG. (126 hits in 24h). show less	Port Scan

Showing 1 to 15 of 349 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.227

🇧🇷 177.100.125.28

🇧🇷 177.75.116.145

🇬🇧 165.65.207.22

🇷🇴 94.156.152.70

🇺🇸 72.5.46.72

🇨🇦 45.56.217.116

🇹🇼 198.235.24.60

🇫🇷 172.71.118.152

🇮🇳 122.180.242.27

🇮🇳 117.217.94.194

🇻🇳 113.172.93.176

🇹🇼 111.70.38.54

🇩🇪 69.5.169.231

🇬🇧 67.208.52.212

🇩🇪 47.91.94.53

🇦🇺 45.134.20.147

🇨🇳 43.196.80.24

🇨🇳 27.18.79.119

🇺🇸 20.65.217.120