JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.18.52.160

209.18.52.160 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 0%: ?

ISP	CLIU MIS Department
Usage Type	University/College/School
ASN	AS32162
Hostname(s)	ckr01.cliu.org
Domain Name	cliu.org
Country	🇺🇸 United States of America
City	Emmaus, Pennsylvania

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.18.52.160

Whois 209.18.52.160

IP Abuse Reports for 209.18.52.160:

This IP address has been reported a total of 30 times from 14 distinct sources. 209.18.52.160 was first reported on July 1st 2024, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Packets-Decreaser.NET	2025-09-02 18:06:34 (9 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-04-29 17:52:04 (1 year ago)	Excessive connections to http/https ports	DDoS Attack
Anonymous	2025-04-11 16:52:06 (1 year ago)	Excessive connections to http/https ports	DDoS Attack
Anonymous	2025-04-10 05:52:04 (1 year ago)	Excessive connections to http/https ports	DDoS Attack
Anonymous	2025-03-30 15:52:04 (1 year ago)	Excessive connections to http/https ports	DDoS Attack
Anonymous	2025-03-12 13:52:11 (1 year ago)	Excessive connections to http/https ports	DDoS Attack
Anonymous	2025-03-08 11:52:11 (1 year ago)	Excessive connections to http/https ports	DDoS Attack
Anonymous	2025-03-05 02:52:12 (1 year ago)	Excessive connections to http/https ports	DDoS Attack
Anonymous	2025-02-28 01:52:19 (1 year ago)	Excessive connections to http/https ports	DDoS Attack
🇪🇸 Javier Azpilicueta	2025-01-02 07:09:00 (1 year ago)	DDos Attack	DDoS Attack
🇺🇸 TPI-Abuse	2024-07-04 15:27:43 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 209.18.52.160 (ckr01.cliu.org): 1 in the last 3 ... show more (mod_security) mod_security (id:240335) triggered by 209.18.52.160 (ckr01.cliu.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 04 11:27:36.080985 2024] [security2:error] [pid 554] [client 209.18.52.160:56314] [client 209.18.52.160] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 209.18.52.160 (+1 hits since last alert)\|www.lasertherapyoc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.lasertherapyoc.com"] [uri "/xmlrpc.php"] [unique_id "Zoa_aBgoVF7wJhcSHBCqWwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-07-04 04:49:46 (1 year ago)		Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-07-04 04:18:31 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 209.18.52.160 (ckr01.cliu.org): 1 in the last 3 ... show more (mod_security) mod_security (id:240335) triggered by 209.18.52.160 (ckr01.cliu.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 04 00:18:28.818100 2024] [security2:error] [pid 23576] [client 209.18.52.160:63228] [client 209.18.52.160] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 209.18.52.160 (+1 hits since last alert)\|firebelly.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "firebelly.org"] [uri "/xmlrpc.php"] [unique_id "ZoYilOreGY5t4u-hIhKonQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 iNetWorker	2024-07-03 11:44:04 (1 year ago)	trolling for resource vulnerabilities	Web App Attack
🇺🇸 TPI-Abuse	2024-07-03 10:09:59 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 209.18.52.160 (ckr01.cliu.org): 1 in the last 3 ... show more (mod_security) mod_security (id:240335) triggered by 209.18.52.160 (ckr01.cliu.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 03 06:09:55.423887 2024] [security2:error] [pid 32226] [client 209.18.52.160:36106] [client 209.18.52.160] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 209.18.52.160 (+1 hits since last alert)\|pastorjohndunning.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "pastorjohndunning.com"] [uri "/xmlrpc.php"] [unique_id "ZoUjc3lgjiWL4DyoeWxJ0QAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.65.4.88

🇨🇳 117.89.89.30

🇨🇳 115.46.88.68

🇺🇸 103.168.66.237

🇷🇴 92.118.39.62

🇳🇱 89.21.67.153

🇩🇪 213.209.159.11

🇨🇱 200.89.69.247

🇺🇸 147.185.132.249

🇺🇸 216.25.89.136

🇨🇳 180.76.98.88

🇩🇪 178.142.228.242

🇳🇱 178.16.54.22

🇫🇮 147.185.133.8

🇸🇬 43.156.61.33

🇺🇸 170.62.8.36

🇮🇳 167.71.228.234

🇺🇸 162.216.149.36

🇭🇰 150.5.131.119

🇲🇾 121.122.119.170