AbuseIPDB » 196.18.165.217
196.18.165.217
This IP was reported 10 times. Confidence of
Abuse
is 36% : ?
ISP
Latitude.sh LTDA
Usage Type
Data Center/Web Hosting/Transit
ASN
AS262287
Domain Name
latitude.sh
Country
🇧🇷
Brazil
City
Sao Paulo, Sao Paulo
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 196.18.165.217 :
This IP address has been reported a total of
10
times from
7 distinct
sources.
196.18.165.217 was first reported on
July 28th 2026 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇸🇪
vaia.cloud
2026-08-21 23:10:02
(1 day ago)
crowdsecurity/http-cve-probing
Brute-Force
Web App Attack
2026-08-18 16:05:41
(4 days ago)
Attack detected: 196.18.165.217 [2026-08-18]
Categories: 21
--- wp2shell/batch exploit (3 hits) ---
...
show more
Attack detected: 196.18.165.217 [2026-08-18]
Categories: 21
--- wp2shell/batch exploit (3 hits) ---
196.18.165.217 - - [18/Aug/2026:15:27:16 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 207 4778 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
196.18.165.217 - - [18/Aug/2026:15:27:18 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 207 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
196.18.165.217 - - [18/Aug/2026:15:27:19 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 207 1030 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
show less
Web App Attack
🇸🇪
vaia.cloud
2026-08-18 14:10:02
(5 days ago)
crowdsecurity/http-cve-probing
Brute-Force
Web App Attack
🇮🇹
A000Z
2026-08-16 15:07:49
(6 days ago)
Fail2Ban: 196.18.165.217 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ...
show more
Fail2Ban: 196.18.165.217 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
show less
Bad Web Bot
🇸🇪
vaia.cloud
2026-08-09 11:00:01
(2 weeks ago)
crowdsecurity/http-cve-probing
Brute-Force
Web App Attack
🇪🇸
alferez
2026-08-03 15:55:35
(2 weeks ago)
wp2shell bug exploit
Hacking
Exploited Host
Web App Attack
🇩🇪
LRob
2026-08-02 22:14:35
(2 weeks ago)
CrowdSec: crowdsecurity/http-cve-probing | req: /wp-json/batch/v1 | UA: Mozilla/5.0 (Windows NT 10.0 ...
show more
CrowdSec: crowdsecurity/http-cve-probing | req: /wp-json/batch/v1 | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
show less
Web App Attack
🇫🇮
as211431.net
2026-07-30 22:41:22
(3 weeks ago)
Triggered Cloudflare WAF (firewallManaged) from BR.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST met ...
show more
Triggered Cloudflare WAF (firewallManaged) from BR.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /wp-json/batch/v1
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2026-07-29 07:11:07
(3 weeks ago)
Web App Attack, Hacking
Hacking
Web App Attack
🇩🇪
LRob
2026-07-28 22:48:09
(3 weeks ago)
CrowdSec: crowdsecurity/http-cve-probing | req: /wp-json/batch/v1 | UA: Mozilla/5.0 (Windows NT 10.0 ...
show more
CrowdSec: crowdsecurity/http-cve-probing | req: /wp-json/batch/v1 | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
show less
Web App Attack
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: