JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 162.241.152.21

162.241.152.21 was found in our database!

This IP was reported 965 times. Confidence of Abuse is 100%: ?

100%

ISP	Unified Layer
Usage Type	Data Center/Web Hosting/Transit
ASN	AS19871
Hostname(s)	wpt.wptstaging.space
Domain Name	unifiedlayer.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 162.241.152.21

Whois 162.241.152.21

IP Abuse Reports for 162.241.152.21:

This IP address has been reported a total of 965 times from 205 distinct sources. 162.241.152.21 was first reported on May 11th 2026, and the most recent report was 13 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-12 04:15:31 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 162.241.152.21 (wpt.wptstaging.space): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 162.241.152.21 (wpt.wptstaging.space): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 00:15:26.061427 2026] [security2:error] [pid 1206:tid 1206] [client 162.241.152.21:43290] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|weddingmusicguitar.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "weddingmusicguitar.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agKpXkC0Zi6bX2EzjDVkxQAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 octageeks.com	2026-05-12 04:08:40 (3 weeks ago)	Wordpress malicious attack:[octawpauthor]	Web App Attack
🇧🇪 cmbplf	2026-05-12 04:03:51 (3 weeks ago)	33.163 requests in 1 hour (3mos1w5d)	Brute-Force Bad Web Bot
Anonymous	2026-05-12 03:56:03 (3 weeks ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/2.0, GET /wp-json/ultimate-member/v1/u ... show more Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/2.0, GET /wp-json/ultimate-member/v1/users HTTP/2.0 show less	Hacking Web App Attack
Anonymous	2026-05-12 03:53:54 (3 weeks ago)	2026-05-12T05:53:54.182073+02:00 aion wordpress[1584421]: Blocked user enumeration attempt from 162. ... show more 2026-05-12T05:53:54.182073+02:00 aion wordpress[1584421]: Blocked user enumeration attempt from 162.241.152.21 ... show less	Hacking Brute-Force
🇩🇪 dklueh79	2026-05-12 03:53:33 (3 weeks ago)	Probe for vulnerabilities. Path attempted: /wp-json/wp/v2/users	Web App Attack
Anonymous	2026-05-12 03:52:41 (3 weeks ago)	(caddyscan) Scanner path probe from 162.241.152.21 (US/United States/wpt.wptstaging.space): 5 in the ... show more (caddyscan) Scanner path probe from 162.241.152.21 (US/United States/wpt.wptstaging.space): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 162.241.152.21 - - [12/May/2026:03:52:38 +0000] "GET /wp-login.php HTTP/1.1" [REDACTED] 200 2627 162.241.152.21 - - [12/May/2026:03:52:39 +0000] "GET /wp-admin/ HTTP/1.1" [REDACTED] 200 2627 162.241.152.21 - - [12/May/2026:03:52:39 +0000] "GET /wp-login.php HTTP/1.1" [REDACTED] 200 2627 162.241.152.21 - - [12/May/2026:03:52:39 +0000] "GET /xmlrpc.php HTTP/1.1" [REDACTED] 200 2627 162.241.152.21 - - [12/May/2026:03:52:39 +0000] "GET /wp-admin/ HTTP/1.1" show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-12 03:48:58 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 162.241.152.21 (wpt.wptstaging.space): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 162.241.152.21 (wpt.wptstaging.space): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 23:48:55.728852 2026] [security2:error] [pid 31861:tid 31875] [client 162.241.152.21:39682] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|amazinglips.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "amazinglips.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agKjJ3JXPHgQAHL4wHOFrAAAAEw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 todix	2026-05-12 03:32:27 (3 weeks ago)	WebAttack or semilar from 162.241.152.21	Web App Attack
🇩🇪 LRob.fr	2026-05-12 03:30:04 (3 weeks ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
Anonymous	2026-05-12 03:29:04 (3 weeks ago)	(wordpress-user-enum) Failed wordpress-user-enum trigger from 162.241.152.21 (US/United States/wpt.w ... show more (wordpress-user-enum) Failed wordpress-user-enum trigger from 162.241.152.21 (US/United States/wpt.wptstaging.space) show less	Brute-Force
Anonymous	2026-05-12 03:27:49 (3 weeks ago)	(caddyscan) Scanner path probe from 162.241.152.21 (US/United States/wpt.wptstaging.space): 5 in the ... show more (caddyscan) Scanner path probe from 162.241.152.21 (US/United States/wpt.wptstaging.space): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 162.241.152.21 - - [12/May/2026:03:27:08 +0000] "GET /wp-admin/ HTTP/1.1" [REDACTED] 200 2627 162.241.152.21 - - [12/May/2026:03:27:09 +0000] "GET /xmlrpc.php HTTP/1.1" [REDACTED] 200 2627 162.241.152.21 - - [12/May/2026:03:27:09 +0000] "GET /wp-login.php HTTP/1.1" [REDACTED] 200 2627 162.241.152.21 - - [12/May/2026:03:27:45 +0000] "GET /xmlrpc.php HTTP/1.1" [REDACTED] 200 2627 162.241.152.21 - - [12/May/2026:03:27:45 +0000] "GET /wp-admin/ HTTP/1.1" show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-12 03:26:09 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 162.241.152.21 (wpt.wptstaging.space): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 162.241.152.21 (wpt.wptstaging.space): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 23:26:03.260938 2026] [security2:error] [pid 17504:tid 17504] [client 162.241.152.21:48824] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|inverzona.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "inverzona.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agKdyzhGOOViZwJX0-VG4AAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 BlueWire Hosting	2026-05-12 03:22:34 (3 weeks ago)	Probing websites for vulnerabilities	Web App Attack SQL Injection
🇩🇪 ger-stg-sifi1	2026-05-12 03:11:43 (3 weeks ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack

Showing 931 to 945 of 965 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.41.227.165

🇺🇸 35.245.239.150

🇰🇷 211.105.129.57

🇲🇩 176.123.2.115

🇺🇸 162.216.150.221

🇭🇰 154.198.162.75

🇩🇪 116.203.204.171

🇺🇸 109.105.209.9

🇳🇱 98.64.137.26

🇳🇱 81.19.216.83

🇺🇸 64.94.159.245

🇺🇸 54.89.154.242

🇮🇳 47.15.244.160

🇬🇧 35.203.211.88

🇹🇼 35.185.132.32

🇫🇷 13.105.187.15

🇭🇰 2602:80d:1004::3c

🇹🇷 212.252.39.100

🇹🇭 203.154.158.195

🇿🇼 197.221.232.44