JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 164.163.142.94

164.163.142.94 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 23%: ?

23%

ISP	Micropic Ltda
Usage Type	Fixed Line ISP
ASN	AS28153
Hostname(s)	164-163-142-94.cgnat.micropic.com.br
Domain Name	micropic.com.br
Country	🇧🇷 Brazil
City	Extrema, Minas Gerais

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 164.163.142.94

Whois 164.163.142.94

IP Abuse Reports for 164.163.142.94:

This IP address has been reported a total of 16 times from 14 distinct sources. 164.163.142.94 was first reported on January 27th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 filstal.org	2026-07-22 09:36:21 (2 days ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (compatible; MSIE 5.0; Windows 98; Win 9x 4.90; Trident/5.0) show less	Bad Web Bot Web App Attack
Anonymous	2026-07-22 00:35:10 (3 days ago)	unsolicited UDP packet to port 11061 (41 bytes)	Hacking
Anonymous	2026-07-17 15:34:50 (1 week ago)	denied traffic to a honeypot network. destination port 2032.	Port Scan Hacking
Anonymous	2026-02-22 07:25:29 (5 months ago)	164.163.142.94 - - [22/Feb/2026:08:25:29 +0100] "GET https://www/product/big-zone-bulletproof-eaas-5 ... show more 164.163.142.94 - - [22/Feb/2026:08:25:29 +0100] "GET https://www/product/big-zone-bulletproof-eaas-500g/ HTTP/1.1" 200 65989 "-" "Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0" show less	Hacking
🇨🇭 backslash	2026-01-21 01:25:20 (6 months ago)	block ruleset A5EE6C8F745F0934168261886A3817E5C386412A	Bad Web Bot
🇺🇸 TPI-Abuse	2026-01-19 16:31:23 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 164.163.142.94 (164-163-142-94.cgnat.micropic.c ... show more (mod_security) mod_security (id:210730) triggered by 164.163.142.94 (164-163-142-94.cgnat.micropic.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 19 11:31:16.190923 2026] [security2:error] [pid 8870:tid 8870] [client 164.163.142.94:55770] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.leothecolorman.com\|F\|2"] [data ".grovewood.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.leothecolorman.com"] [uri "/tag/mayfly/www.grovewood.com"] [unique_id "aW5cVP6SmnGplEw3SoRQpwAAAAM"], referer: https://www.leothecolorman.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 HandyTreff.de	2025-12-07 22:52:50 (7 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -49.426 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -49.426 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Sa show less	Bad Web Bot Web App Attack
Anonymous	2025-12-02 04:52:19 (7 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.02 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.02 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-20 16:44:14 (8 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-17 13:04:06 (8 months ago)	scanning http requests from known botnet	Web App Attack
🇨🇭 backslash	2025-11-03 16:45:24 (8 months ago)	block ruleset A5EE6C8F745F0934168261886A3817E5C386412A	Bad Web Bot
🇮🇩 hermawan	2025-08-08 18:35:50 (11 months ago)	[Sat Aug 09 01:35:49.535575 2025] [security2:error] [pid 392444:tid 139779551250112] [client 164.163 ... show more [Sat Aug 09 01:35:49.535575 2025] [security2:error] [pid 392444:tid 139779551250112] [client 164.163.142.94:22744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "WOW64" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: WOW64 found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.132 Safari/537.36 request_line = GET /index.php/monitoring-hari-tanpa-hujan-berturut-turut/4119-monitoring-hari-tanpa-hujan-berturut-turut-propinsi-jawa-timur/monitoring-hari-tanpa-hujan-berturut-turut-dasarian-provinsi-jawa-timur/analisis-dasarian-monitoring-hari-tanpa-hujan-berturut-turut-provinsi-jawa-timur-tahun-2022/555559700-analisis-dasarian-moni..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/monitoring-hari-tanpa-hujan ... show less	Hacking Web App Attack
🇫🇷 oonux.net	2025-08-05 03:02:16 (11 months ago)	Botnet HTTPS DDoS zombie, agent:Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) ... show more Botnet HTTPS DDoS zombie, agent:Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2117.157 Safari/537.36 show less	DDoS Attack Exploited Host Web App Attack
🇨🇦 wil.com	2025-08-04 10:15:12 (11 months ago)	GlobalProtect login attempts with user awulick.	VPN IP Brute-Force
Anonymous	2025-02-06 01:22:39 (1 year ago)	Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.46.177.174

🇲🇽 189.217.130.86

🇧🇷 187.125.176.130

🇩🇪 152.53.147.70

🇺🇸 68.67.112.215

🇺🇸 66.132.195.92

🇮🇪 34.251.70.20

🇮🇳 203.200.74.18

🇺🇸 162.216.150.41

🇳🇱 160.119.69.14

🇸🇬 159.65.2.17

🇸🇦 144.86.12.98

🇨🇳 123.123.113.194

🇮🇳 117.223.152.69

🇺🇸 100.29.192.4

🇫🇷 81.65.134.203

🇺🇸 64.62.156.116

🇳🇱 45.198.224.5

🇺🇸 43.130.53.252

🇬🇧 35.203.211.23