AbuseIPDB » 162.247.74.213

162.247.74.213 was found in our database!

This IP was reported 16,894 times. Confidence of Abuse is 93%: ?

93%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	The Calyx Institute
Usage Type	University/College/School
ASN	AS4224
Domain Name	calyxinstitute.org
Country	United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 162.247.74.213

Whois 162.247.74.213

IP Abuse Reports for 162.247.74.213:

This IP address has been reported a total of 16,894 times from 1,225 distinct sources. 162.247.74.213 was first reported on November 21st 2020, and the most recent report was 38 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
HyperSpeed	2025-04-21 00:39:27 (38 minutes ago)	Apr 21 00:39:25 SE1 sshd[2141019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show moreApr 21 00:39:25 SE1 sshd[2141019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.247.74.213 user=root Apr 21 00:39:27 SE1 sshd[2141019]: Failed password for root from 162.247.74.213 port 38346 ssh2 ... show less	Brute-Force SSH
Progetto1	2025-04-18 21:20:02 (2 days ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
Psycho Solutions LLC	2025-04-18 09:04:36 (2 days ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ... show moreDetected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 4/18/2025 9:04 am (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
MAGIC	2025-04-18 02:24:49 (2 days ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
TPI-Abuse	2025-04-14 07:45:37 (6 days ago)	(mod_security) mod_security (id:210730) triggered by 162.247.74.213 (snowden.tor-exit.calyxinstitute ... show more(mod_security) mod_security (id:210730) triggered by 162.247.74.213 (snowden.tor-exit.calyxinstitute.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 14 03:45:28.982562 2025] [security2:error] [pid 5230:tid 5276] [client 162.247.74.213:45788] [client 162.247.74.213] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||leaderoftheopposition.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "leaderoftheopposition.com"] [uri "/administrator/backups/database-sql.sql"] [unique_id "Z_y9GNnaS4LiXFE9Me41zgAAAY8"] show less	Brute-Force Bad Web Bot Web App Attack
ThreatBook.io	2025-04-14 00:38:17 (1 week ago)	ThreatBook Intelligence: Zombie,Gateway more details on https://threatbook.io/ip/162.247.74.213	SSH
Stuart Reid	2025-04-13 13:15:17 (1 week ago)	...	SSH
ipblock.com	2025-04-13 00:47:00 (1 week ago)	IPBlock protected site ID [4055-d][s=07]. Major crawler impostor. Mozilla/5.0 (compati ... show moreIPBlock protected site ID [4055-d][s=07]. Major crawler impostor. Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) show less	Bad Web Bot
ThreatBook.io	2025-04-12 00:11:54 (1 week ago)	ThreatBook Intelligence: Zombie,Gateway more details on https://threatbook.io/ip/162.247.74.213	Web App Attack
ipblock.com	2025-04-10 07:59:00 (1 week ago)	IPBlock protected site ID [4055-d][s=02]. Major crawler impostor. Mozilla/5.0 (compati ... show moreIPBlock protected site ID [4055-d][s=02]. Major crawler impostor. Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) show less	Bad Web Bot
Anonymous	2025-04-09 16:54:03 (1 week ago)	SSH Brute Force detected by Fail2Ban	Brute-Force SSH
etu brutus	2025-04-09 11:10:43 (1 week ago)	162.247.74.213 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
ipblock.com	2025-04-06 23:19:00 (2 weeks ago)	IPBlock protected site ID [4055-d][s=07]. Major crawler impostor. Mozilla/5.0 (compati ... show moreIPBlock protected site ID [4055-d][s=07]. Major crawler impostor. Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) show less	Bad Web Bot
kranem	2025-04-05 12:01:45 (2 weeks ago)	Triggered Cloudflare WAF from T1. Action taken: BLOCK ASN: 4224 (CALYX-AS) Protoco ... show moreTriggered Cloudflare WAF from T1. Action taken: BLOCK ASN: 4224 (CALYX-AS) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2025-04-05T11:59:30Z User-Agent: Mozilla/5.0 (X11; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2973.8 Safari/537.36 show less	Bad Web Bot
strzonnek	2025-04-05 07:31:04 (2 weeks ago)	attack on webform	Brute-Force Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩