This IP address has been reported a total of
26
times from
22 distinct
sources.
81.214.254.136 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 12
reports;
Canada
with 3
reports;
France
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
21
times;
Brute-Force
10
times;
Hacking
7
times;
Bad Web Bot
2
times;
DDoS Attack
1
time;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
{"ClientAddr":"81.214.254.136:52034","ClientHost":"81.214.254.136","ClientPort":"52034","ClientUsern ...
show more{"ClientAddr":"81.214.254.136:52034","ClientHost":"81.214.254.136","ClientPort":"52034","ClientUsername":"-","DownstreamContentSize":418,"DownstreamStatus":403,"Duration":202265838,"OriginContentSize":418,"OriginDuration":194521409,"OriginStatus":403,"Overhead":7744429,"RequestAddr":"www.cleveradmin.de","RequestContentSize":680,"RequestCount":2706830,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-10-15T16:16:13.700866686+02:00","StartUTC":"2026-10-15T14:16:13.700866686Z","TLSCipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLSVersion":"1.2","entryPointName":"websecure","level":"info","msg":"","time":"2026-10-15T16:16:13+02:00"}
{"ClientAddr":"81.214.254.136:54814","ClientHost":"81.214.254.13
...
show less
Automated report: source IP probed nonexistent .php paths on our web server (vulnerability scanning ...
show moreAutomated report: source IP probed nonexistent .php paths on our web server (vulnerability scanning / bad bot).
show less
