162.214.98.181 Threat Intelligence and Host Information

Jan 12, 2026 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 162.214.98.181 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 45/100

Host and Network Information

Mitre ATT&CK IDs: T1046 - Network Service Scanning, T1498 - Network Denial of Service, T1595 - Active Scanning
Tags: abuseipdb, Adbhoney, auto-generated security, blacklist, botnet, bruteforce, cisco, conpot, cowrie, cyber security, DDoS, dionaea, email, fatt, heralding, honeytrap, ioc, LAMP, mailoney, malicious, Malicious IP, mirai, mssql, Nextray, p0f, phishing, RTBH, scan, sensor-tagged, sentrypeer, sftp, sip, sipvicious, smb, ssh, suricata, tanner, tcp, tpot, vultr
View other sources: Spamhaus VirusTotal
Contained within other IP sets: ciarmy

Country: United States
Network:
Noticed: 50 times
Protocols Attacked: mssql
Countries Attacked: Australia, Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Spain, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: shatablee-api.dx-republic-otrade.com rfq-api.nostalgic-diffie.162-214-98-181.plesk.page heuristic-cerf.162-214-98-181.plesk.page www.heuristic-cerf.162-214-98-181.plesk.page shatablee.dx-republic-otrade.com spgastaticdemoportal.nostalgic-diffie.162-214-98-181.plesk.page prelive.dx-republic-otrade.com prelive-api.dx-republic-otrade.com test-api.dx-republic-otrade.com www.nostalgic-diffie.162-214-98-181.plesk.page nostalgic-diffie.162-214-98-181.plesk.page rfq.nostalgic-diffie.162-214-98-181.plesk.page dx-republic-otrade.com api.dx-republic-otrade.com eztraffic.ezwaysolucoes.com.br santarosa.dsix.com.br eztradeqa.ezwaysolucoes.com.br eztradeadmqa.ezwaysolucoes.com.br cbvampeqa.dsix.com.br cbvampeadmqa.dsix.com.br eztradeadm.ezwaysolucoes.com.br cbvampeadm.dsix.com.br rfidapi.ezwaysolucoes.com.br rfid.ezwaysolucoes.com.br ocr.ezwaysolucoes.com.br eztrade.ezwaysolucoes.com.br cbvampe.dsix.com.br adm.pronegocioampe.com.br peer.pronegocioampe.com.br socket.pronegocioampe.com.br webqa.pronegocioampe.com.br pedido.pronegocioampe.com.br web.pronegocioampe.com.br video.dsix.com.br

Open Ports Detected

110 143 1433 1801 21 25 3306 465 47001 53 587 5985 80 8443 8880 993 995

Map

Whois Information

NetRange: 162.214.0.0 - 162.215.255.255
CIDR: 162.214.0.0/15
NetName: UNIFIEDLAYER-NETWORK-15
NetHandle: NET-162-214-0-0-1
Parent: NET162 (NET-162-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Unified Layer (BLUEH-2)
RegDate: 2013-05-22
Updated: 2025-12-12
Comment: This space is statically assigned.
Comment:
Comment: —–BEGIN CERTIFICATE—–MIIDjjCCAnYCCQDwxS01pbJjyDANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAlVUMQ4wDAYDVQQHDAVQcm92bzEMMAoGA1UECgwDRUlHMQ8wDQYDVQQLDAZOZXRvcHMxEjAQBgNVBAMMCWF3c19ieW9pcDEpMCcGCSqGSIb3DQEJARYaZWlnLW5ldC10ZWFtQGVuZHVyYW5jZS5jb20wHhcNMTgxMTEyMTg1ODAwWhcNMjgxMTA5MTg1ODAwWjCBiDELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAlVUMQ4wDAYDVQQHDAVQcm92bzEMMAoGA1UECgwDRUlHMQ8wDQYDVQQLDAZOZXRvcHMxEjAQBgNVBAMMCWF3c19ieW9pcDEpMCcGCSqGSIb3DQEJARYaZWlnLW5ldC10ZWFtQGVuZHVyYW5jZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhYkPGFYv/471uwfSNRUiGwx1WiF7iM0GYbmwHBY7KAOruObkhZrgVUwFXVVlZZED1BPxigOsgGdUVQ01BYBTxcBCaxim9hnJW3dVROdZg4HS0zuHnntveWfhkalBeGJGPhsdyE7zULg8jf+18I9fRtG32Qmm6E35CuDp9HwKrHlhgqIYIQ9JQiUykkdwfgWr4ho1JSP4pl/79WFgrv+0Hw7Ml0E2ZoTLIkgacr+9kLxmg82q+xWegYmcfPRC/Eh+g5Ln4mYkyzyLlTSyuHNnGI0wi3QYUX3ITBoPeex1ly5rPxYA3KM+4boKcxFR1DGS0RU+jzZnhKbxVw6YP5VpPAgMBAAEwDQYJKoZIhvcNAQELBQADggEBAMGzeUx283P9ophMPjguepuCn+vWl+ZLh0qjCneT6vS29/COAaR97obMfpnI4XPIbdj8Jch3M10q1yvjptzkeRcSN2MXCiC6QiNG7D4yeUu+dlQz3o9vBAp8asfG/jfU7qx2wxRLkf8vi1q+v52Z5jPpnUAZ1au6urhbSTpE/VLDGcBPxVIQQeohbzJvT/0WRbUVPojZ9ixKX7lI93V79na74AOD1d5/4PzW5myxQjNZpThR/mBG7C0c9sdI04/fxDAY7XTlwHxwaTxslZYhUtEIyqztIo80P7LGdhuKNBVbPP2rvrf2z7K78gsCMnLfAtUtM4Cv62k5H/4uE7WBwKI=—–END CERTIFICATE—–
Comment:
Comment: OCITOKEN::162.214.80.0/23:2f4b29d8bc05dda0df20a0825841f2ff21c6a1e1af23501ad8fa80df6b1d768e
Comment: OCITOKEN::162.214.48.0/21:d9ac0c7f37607b5552427e818b39d475ccbea645b8f9495fba8f4f05b567b4ec
Comment: OCITOKEN::162.214.88.0/21:17738e1fce2623c223e721f62c49458284ec5495ad569bfd177d7626138d50a2
Comment: OCITOKEN::162.214.104.0/21:7eea0b280d083a1576abace27eb88114bfd8707aa25386085d654f753b0f7fbe
Comment: OCITOKEN::162.214.112.0/20:27c8bbf6ff854063b41d15e9ebe5b6cb33c90d1f024620c3c63cceb8098099ba
Comment: OCITOKEN::162.214.144.0/21:7ac8ca8a22c2469f1b3affe3616e44e9b9b88938eedb81b392d63b8af69c6257
Comment: OCITOKEN::162.214.160.0/20:eb7f01bf02730ac5b7f4b84cfe7d8ab37d7dfa5733d3285990d7893d9afdc6fe
Comment: OCITOKEN::162.214.184.0/21:3f63a084e425be4a8e8e0f2682e22bbcce3f24e77fb9776a505acbb2fc394895
Comment: OCITOKEN::162.214.192.0/21:50b1c95bbb3b52b760f319845aef1e3cae0e5c3a31b7db612b0c93ba260d49c5
Comment: OCITOKEN::162.214.208.0/21:c55e53d78ae93c06a3a2a4dff84d9dded4f5f2e6c79ef731f7d5929e6a4fb888
Comment: OCITOKEN::162.214.224.0/21:3bec5ce38f4181e3e34a9deff7a1702885d061ecf5bfbbd5bec5fd032d861d8d
Ref: https://rdap.arin.net/registry/ip/162.214.0.0
OrgName: Unified Layer
OrgId: BLUEH-2
Address: 1958 South 950 East
City: Provo
StateProv: UT
PostalCode: 84606
Country: US
RegDate: 2006-08-08
Updated: 2025-07-24
Ref: https://rdap.arin.net/registry/entity/BLUEH-2
OrgTechHandle: ENO74-ARIN
OrgTechName: EIG Network Operations
OrgTechPhone: +1-781-852-3200
OrgTechEmail: eig-noc@endurance.com
OrgTechRef: https://rdap.arin.net/registry/entity/ENO74-ARIN
OrgNOCHandle: ENO74-ARIN
OrgNOCName: EIG Network Operations
OrgNOCPhone: +1-781-852-3200
OrgNOCEmail: eig-noc@endurance.com
OrgNOCRef: https://rdap.arin.net/registry/entity/ENO74-ARIN
OrgAbuseHandle: EIGAB1-ARIN
OrgAbuseName: EIG-Abuse Mitigation
OrgAbusePhone: +1-877-659-6181
OrgAbuseEmail: IARPOC@Newfold.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/EIGAB1-ARIN
OrgAbuseHandle: NOC2320-ARIN
OrgAbuseName: Network Operations Center
OrgAbusePhone: +1-801-765-9400
OrgAbuseEmail: abuse@bluehost.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/NOC2320-ARIN

Links to attack logs

Share on: