JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 162.4.112.4

162.4.112.4 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 63%: ?

63%

ISP	Nur Host
Usage Type	Data Center/Web Hosting/Transit
ASN	AS154671
Hostname(s)	bdix.nurhostserver.com
Domain Name	nurhost.com.bd
Country	🇧🇩 Bangladesh
City	Dhaka, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 162.4.112.4

Whois 162.4.112.4

IP Abuse Reports for 162.4.112.4:

This IP address has been reported a total of 20 times from 12 distinct sources. 162.4.112.4 was first reported on June 25th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Hazzard	2026-07-02 07:18:28 (6 days ago)	(wordpress) Failed wordpress login from 162.4.112.4 (BD/Bangladesh/-/-/bdix.nurhostserver.com/[redac ... show more (wordpress) Failed wordpress login from 162.4.112.4 (BD/Bangladesh/-/-/bdix.nurhostserver.com/[redacted]): (CF_ENABLE) show less	Brute-Force
🇲🇽 octageeks.com	2026-07-02 04:18:55 (6 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 ger-stg-sifi1	2026-07-01 13:09:17 (6 days ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 neckaralb-admin.de	2026-07-01 12:59:12 (6 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 Hazzard	2026-06-30 21:18:33 (1 week ago)	(wordpress) Failed wordpress login from 162.4.112.4 (BD/Bangladesh/-/-/bdix.nurhostserver.com/[redac ... show more (wordpress) Failed wordpress login from 162.4.112.4 (BD/Bangladesh/-/-/bdix.nurhostserver.com/[redacted]): (CF_ENABLE) show less	Brute-Force
🇺🇸 cwytech	2026-06-29 22:46:51 (1 week ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-login-lockdown-high.	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-29 16:24:25 (1 week ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 162.4.112.4 (BD/Bangladesh/bdix.nurhostserver ... show more (modsec_5040) ModSec 5040: API Basic Auth blocked from 162.4.112.4 (BD/Bangladesh/bdix.nurhostserver.com): 1 in the last 3600 secs (0-196) show less	Hacking
🇺🇸 TPI-Abuse	2026-06-29 05:01:30 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 162.4.112.4 (bdix.nurhostserver.com): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 162.4.112.4 (bdix.nurhostserver.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 01:01:24.738717 2026] [security2:error] [pid 10021:tid 10021] [client 162.4.112.4:49172] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|d365geek.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "d365geek.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akH8JKIyMxWircwD0lcCyQAAAIc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-06-29 00:05:03 (1 week ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 23:55:55 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 162.4.112.4 (bdix.nurhostserver.com): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 162.4.112.4 (bdix.nurhostserver.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 19:55:50.118211 2026] [security2:error] [pid 12503:tid 12521] [client 162.4.112.4:59698] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|rawhabitat.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rawhabitat.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akG0hseIsQSXwvBDvKlXsAAAAVA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 18:40:16 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 162.4.112.4 (bdix.nurhostserver.com): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 162.4.112.4 (bdix.nurhostserver.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 14:40:08.500292 2026] [security2:error] [pid 2333:tid 2333] [client 162.4.112.4:39450] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bikinitweets.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bikinitweets.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akFqiBgn7-9RKQtK-5UPngAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-06-28 10:34:43 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
Anonymous	2026-06-27 23:27:59 (1 week ago)	WordPress Brute Force	Brute-Force
🇲🇽 octageeks.com	2026-06-27 04:15:15 (1 week ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇫🇷 ingroscart.it	2026-06-27 02:56:32 (1 week ago)	(wordpress) Failed wordpress login from 162.4.112.4 (BD/Bangladesh/-/-/bdix.nurhostserver.com/[redac ... show more (wordpress) Failed wordpress login from 162.4.112.4 (BD/Bangladesh/-/-/bdix.nurhostserver.com/[redacted]) show less	Brute-Force

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 161.35.65.86

🇻🇳 125.212.244.35

🇨🇦 89.251.0.237

🇧🇬 79.124.62.230

🇺🇸 66.132.172.126

🇸🇬 35.187.231.181

🇺🇦 31.42.184.158

🇺🇸 184.168.21.211

🇸🇬 178.128.51.84

🇻🇳 171.244.39.95

🇺🇸 159.65.217.156

🇻🇳 157.66.47.86

🇩🇪 148.251.33.198

🇵🇰 103.26.82.65

🇳🇱 45.148.10.141

🇳🇱 195.178.110.137

🇺🇸 192.227.138.254

🇳🇱 185.223.235.44

🇺🇿 185.191.141.115

🇮🇳 182.95.185.158