This IP address has been reported a total of
32
times from
20 distinct
sources.
181.214.164.169 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 181.214.164.169 (US/United States/- ...
show moreLF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 181.214.164.169 (US/United States/-): 1 in the last 3600 secs
show less
(mod_security) mod_security (id:217210) triggered by 181.214.164.169 (-): 1 in the last 300 secs; Po ...
show more(mod_security) mod_security (id:217210) triggered by 181.214.164.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 08:43:57.193637 2026] [security2:error] [pid 31208:tid 31208] [client 181.214.164.169:26814] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||www.roadhaus.com|F|4"] [data "GET http://www.roadhaus.com HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.roadhaus.com"] [uri "/"] [unique_id "abFjjT2t_QDimqD15qutFwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-02-23 22:22:13.321 [463086] no host name found for IP address 181.214.164.169
2026-02-23 22:22: ...
show more2026-02-23 22:22:13.321 [463086] no host name found for IP address 181.214.164.169
2026-02-23 22:22:14.769 [463085] no host name found for IP address 181.214.164.169
2026-02-23 22:22:14.772 [463085] no MAIL in SMTP connection from [181.214.164.169]:40127 I=[217.197.86.168]:587 Ci=463085 D=1.807s
...
show less
(smtpauth) Failed SMTP AUTH login from 181.214.164.169 (US/United States/-): 5 in the last 3600 secs ...
show more(smtpauth) Failed SMTP AUTH login from 181.214.164.169 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-01-07 23:41:42 dovecot_login authenticator failed for H=(ADMIN) [181.214.164.169]:5447: 535 Incorrect authentication data ([email protected])
2026-01-07 23:42:21 dovecot_login authenticator failed for H=(ADMIN) [181.214.164.169]:32342: 535 Incorrect authentication data ([email protected])
2026-01-07 23:42:26 dovecot_login authenticator failed for H=(ADMIN) [181.214.164.169]:63949: 535 Incorrect authentication data ([email protected])
2026-01-07 23:42:27 dovecot_login authenticator failed for H=(ADMIN) [181.214.164.169]:8031: 535 Incorrect authentication data ([email protected])
2026-01-07 23:42:40 dovecot_login authenticator failed for H=(ADMIN) [181.214.164.169]:15599: 535 Incorrect authentication data ([email protected])
show less
Port Scan
Anonymous
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.01 is noted in report tim ...
show moreAttempted brute force login to web vpn 2 time(s); last attempt for 2025.12.01 is noted in report timestamp
show less
Blocked by UFW (TCP on 1)
Source port: 57446
TTL: 119
Packet length: 52
TOS: 0x08
This report (for ...
show moreBlocked by UFW (TCP on 1)
Source port: 57446
TTL: 119
Packet length: 52
TOS: 0x08
This report (for 181.214.164.169) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
06-06-2025 09:17:14.6 ERROR util.AccessViolations - 181.214.164.169 report to fail2ban - action: blo ...
show more06-06-2025 09:17:14.6 ERROR util.AccessViolations - 181.214.164.169 report to fail2ban - action: block
...
show less