JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

216.219.87.194

Neutral Activity

Abuse confidence score ?

0% Low Risk

11 reports

8 reporters · latest 3 months ago

ISP	Host Department NJ, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS19318
Hostname(s)	antares.intelsrv.net
Domain Name	interserver.net
Country	🇺🇸 United States of America
City	Englewood Cliffs, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

216.219.87.194 has been reported 11 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 216.219.87.194

Export CSV

This IP address has been reported a total of 11 times from 8 distinct sources. 216.219.87.194 was first reported on February 21st 2026, and the most recent report was 3 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇱 Pavel Klaine	2026-07-01 08:56:00 (3 months ago)	This IP hosts a fraudulent SharePoint credential harvesting page (Hebrew-language fake Microsoft Sha ... show more This IP hosts a fraudulent SharePoint credential harvesting page (Hebrew-language fake Microsoft SharePoint login). The page is designed to [internal-host] corporate Microsoft 365 credentials and is actively linked from [internal-host] emails. Path observed: [internal-path] on a compromised Argentine domain. [internal-domain] ML score: 96/100. Reported July 1, 2026. show less	Port Scan Web App Attack
🇩🇰 ScamAware	2026-06-09 08:24:16 (4 months ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: block. Cloudflare source: firewallCustom. show less	Bad Web Bot
🇺🇸 lostswordfish.com	2026-06-08 22:16:03 (4 months ago)	Wordfence waf block on floridaactioncommittee	Web App Attack
🇲🇹 Malta	2026-06-08 19:06:30 (4 months ago)	216.219.87.194 - - [08/Jun/2026:21:06:30 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ... show more 216.219.87.194 - - [08/Jun/2026:21:06:30 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇫🇷 solution.it	2026-06-08 03:51:28 (4 months ago)	[Mon Jun 08 05:51:28.183771 2026] [php7:error] [pid 2017650:tid 2017650] [client 216.219.87.194:5528 ... show more [Mon Jun 08 05:51:28.183771 2026] [php7:error] [pid 2017650:tid 2017650] [client 216.219.87.194:55286] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 09:19:14 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 216.219.87.194 (antares.intelsrv.net): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 216.219.87.194 (antares.intelsrv.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 05:19:08.603209 2026] [security2:error] [pid 26741:tid 26741] [client 216.219.87.194:45248] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|matt-bechtel.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "matt-bechtel.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aiU3jC3oRr6VqoUGKhku3AAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 tecnicorioja	2026-06-06 22:00:42 (4 months ago)	wp-login attack [06/Jun/2026:10:46:04	Brute-Force Web App Attack
🇲🇹 Malta	2026-06-06 02:52:27 (4 months ago)	216.219.87.194 - - [06/Jun/2026:04:52:27 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (X11; Linux ... show more 216.219.87.194 - - [06/Jun/2026:04:52:27 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇺🇸 TPI-Abuse	2026-06-05 22:38:49 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 216.219.87.194 (antares.intelsrv.net): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 216.219.87.194 (antares.intelsrv.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 18:38:43.878248 2026] [security2:error] [pid 27778:tid 27778] [client 216.219.87.194:47012] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|hare.digitalsolutions.help\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hare.digitalsolutions.help"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aiNP8w_Z8YG7uHDpTjVoAAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-30 12:13:54 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 216.219.87.194 (antares.intelsrv.net): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 216.219.87.194 (antares.intelsrv.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 08:13:48.738449 2026] [security2:error] [pid 20608:tid 20608] [client 216.219.87.194:38088] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mail.thevillagebakeryftw.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.thevillagebakeryftw.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahrUfCqe_stLrxAXEiNcbwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 gnom4ik	2026-02-21 11:16:48 (7 months ago)	ban-reviewer auto report; ip=216.219.87.194; scenario=http:scan; verdict=valid_ban; confidence=0.85; ... show more ban-reviewer auto report; ip=216.219.87.194; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14,15,18; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for 'http:scan' scenario; Decision is based on port scan activity (category 14); IP has no active decisions in lookback window but was flagged in current decision show less	Port Scan Hacking Brute-Force

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 158.69.112.222

🇨🇳 123.145.35.42

🇰🇷 118.39.219.45

🇫🇷 91.196.152.40

🇭🇰 223.17.1.118

🇺🇸 216.25.89.137

🇺🇸 195.184.76.188

🇮🇩 182.253.205.236

🇹🇭 182.53.238.238

🇮🇳 134.209.147.61

🇺🇸 104.23.187.135

🇫🇷 91.196.152.46

🇳🇱 45.148.10.152

🇪🇸 34.175.56.74

🇷🇴 2.57.121.25

🇬🇧 200.138.46.181

🇺🇸 195.184.76.52

🇹🇭 182.52.51.245

🇺🇸 162.216.150.109

🇨🇦 148.113.255.235