181.215.65.56

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
38% Elevated
72 reports
54 reporters ยท latest 3 days ago
ISP
Cyber Assets FZCO
Usage Type
Data Center/Web Hosting/Transit
ASN
AS212238
Domain Name
cyberassets.ae
Country
๐Ÿ‡บ๐Ÿ‡ธ United States of America
City
Chicago, Illinois
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
72 from 54 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ง๐Ÿ‡ท Brazil 3 ๐Ÿ‡ง๐Ÿ‡ช Belgium 2 ๐Ÿ‡ฉ๐Ÿ‡ช Germany 2
Most common categories Bad Web Bot 8 Web App Attack 5 Brute-Force 4 Hacking 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ช๐Ÿ‡ธ raiolanetworks.com
Honeypot detection: web application attack. 6 events observed. Reported automatically from a honeypot sensor.
Web App Attack
๐Ÿ‡บ๐Ÿ‡ฆ URAN Publishing Service
[12/Oct/2026:21:00:52 +0300] -- 181.215.65.56 Ban reason: Scanner [CMS_GENERIC] | Request: POST /wp-admin/admin-ajax.php HTTP/1.1
Bad Web Bot Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ wbsouza
CrowdSec: infra/bad-path-probe โ€” automated firewall drops on self-hosted IDS sensor
Hacking
๐Ÿ‡ช๐Ÿ‡ธ librebit
Brute force
Brute-Force
๐Ÿ‡บ๐Ÿ‡ฆ URAN Publishing Service
[12/Oct/2026:17:37:30 +0300] -- 181.215.65.56 Ban reason: Scanner [CMS_GENERIC] | Request: POST /wp-admin/admin-ajax.php HTTP/1.1
Bad Web Bot Web App Attack
๐Ÿ‡ง๐Ÿ‡ช cmbplf
1.778 POST requests with url.path */wp-login.php
Brute-Force Bad Web Bot
๐Ÿ‡บ๐Ÿ‡ธ integrantservices.com
(wordpress) Failed wordpress login from 181.215.65.56 (US/United States/-)
Brute-Force
Anonymous
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช neckaralb-admin.de
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐Ÿ‡ซ๐Ÿ‡ท mrcrassi
Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
Bad Web Bot
๐Ÿ‡ง๐Ÿ‡ช cmbplf
3.502 POST requests with url.path */wp-login.php
Brute-Force Bad Web Bot
๐Ÿ‡ง๐Ÿ‡ท Peregrine
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 181.215.65.56 104.22.62.193 - - [01/Sep/2026:01:54:03 -0300] "GET /wp-login.php HTTP/1.1" 404 18193
Bad Web Bot
๐Ÿ‡ง๐Ÿ‡ท Peregrine
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 181.215.65.56 104.22.62.193 - - [01/Sep/2026:01:54:03 -0300] "GET /wp-login.php HTTP/1.1" 404 18193
Bad Web Bot
๐Ÿ‡ง๐Ÿ‡ท Peregrine
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 181.215.65.56 104.22.62.193 - - [01/Sep/2026:01:54:03 -0300] "GET /wp-login.php HTTP/1.1" 404 18193
Bad Web Bot
๐Ÿ‡น๐Ÿ‡ท neron
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ณ๐Ÿ‡ฑ 45.148.10.121
๐Ÿ‡บ๐Ÿ‡ธ 193.202.12.144
๐Ÿ‡บ๐Ÿ‡ฆ 185.212.251.39
๐Ÿ‡ณ๐Ÿ‡ฑ 138.226.239.21
๐Ÿ‡บ๐Ÿ‡ธ 129.121.78.84
๐Ÿ‡จ๐Ÿ‡ณ 120.83.231.210
๐Ÿ‡จ๐Ÿ‡ฆ 85.217.149.7
๐Ÿ‡ณ๐Ÿ‡ฑ 64.205.72.138
๐Ÿ‡ณ๐Ÿ‡ฑ 64.205.72.52
๐Ÿ‡ฎ๐Ÿ‡ท 62.60.134.210
๐Ÿ‡ฉ๐Ÿ‡ช 46.101.111.185
๐Ÿ‡ฒ๐Ÿ‡ฝ 38.22.170.10
๐Ÿ‡จ๐Ÿ‡ณ 117.151.24.223
๐Ÿ‡ช๐Ÿ‡ธ 109.167.70.68
๐Ÿ‡จ๐Ÿ‡ฆ 85.217.149.13
๐Ÿ‡ณ๐Ÿ‡ฑ 77.91.71.90
๐Ÿ‡บ๐Ÿ‡ธ 70.183.226.49
๐Ÿ‡จ๐Ÿ‡ฎ 41.66.19.205
๐Ÿ‡น๐Ÿ‡ผ 198.235.24.117
๐Ÿ‡ซ๐Ÿ‡ท 194.26.129.64