JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 181.214.164.224

181.214.164.224 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 0%: ?

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	netutils.io
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 181.214.164.224

Whois 181.214.164.224

IP Abuse Reports for 181.214.164.224:

This IP address has been reported a total of 21 times from 14 distinct sources. 181.214.164.224 was first reported on July 14th 2023, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-04-01 00:55:29 (2 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇮🇱 spd.co.il	2026-03-27 00:03:41 (3 months ago)	Web application attack detected	Hacking Web App Attack
🇹🇷 rtbh.com.tr	2026-03-25 20:12:15 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇳🇿 Antinson	2026-03-25 16:50:46 (3 months ago)	Scraping with a high error ratio and request rate	Bad Web Bot
Anonymous	2026-03-24 18:32:44 (3 months ago)	Mar 24 11:32:40 mvscweb sshd[1871358]: Failed password for invalid user xkadrrgn from 181.214.164.22 ... show more Mar 24 11:32:40 mvscweb sshd[1871358]: Failed password for invalid user xkadrrgn from 181.214.164.224 port 17648 ssh2 Mar 24 11:32:41 mvscweb sshd[1871407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.214.164.224 user=root Mar 24 11:32:43 mvscweb sshd[1871407]: Failed password for root from 181.214.164.224 port 46247 ssh2 ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-03-24 10:20:12 (3 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-02-18 22:46:18 (4 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇦🇺 oncord	2025-06-22 00:43:25 (1 year ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2025-03-05 05:29:39 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 181.214.164.224 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 181.214.164.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 05 00:29:33.964489 2025] [security2:error] [pid 1344078:tid 1344078] [client 181.214.164.224:59368] [client 181.214.164.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thebradleyclinic.com"] [uri "/.env"] [unique_id "Z8fhPZ4RBiFDR9RhWSFcuwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-04 05:33:07 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 181.214.164.224 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 181.214.164.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 04 00:33:01.791840 2025] [security2:error] [pid 9073:tid 9073] [client 181.214.164.224:63225] [client 181.214.164.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yogitunes.com"] [uri "/.env"] [unique_id "Z8aQjXS3tPI4ky3bsqUMpgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-03 14:16:56 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 181.214.164.224 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 181.214.164.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 03 09:16:50.731341 2025] [security2:error] [pid 1013:tid 1013] [client 181.214.164.224:54487] [client 181.214.164.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "booksforpoets.com"] [uri "/.env"] [unique_id "Z8W50qUCPVIECTO0pfTU-QAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-03-02 09:10:26 (1 year ago)	Infected user bad webscan	Exploited Host
🇧🇪 cmbplf	2024-11-18 08:33:54 (1 year ago)	110 requests to */wp-comments-post.php	Brute-Force Bad Web Bot
🇦🇺 MAGIC	2024-11-02 21:00:23 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇹🇷 rtbh.com.tr	2024-10-17 20:53:45 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 210.95.176.243

🇧🇴 190.129.122.12

🇲🇾 137.59.109.132

🇮🇳 103.158.40.65

🇫🇷 85.217.140.4

🇯🇵 8.221.141.39

🇳🇱 185.226.197.48

🇰🇷 121.135.119.71

🇹🇷 81.214.75.248

🇬🇧 35.203.211.206

🇮🇷 5.116.70.251

🇨🇳 223.112.224.198

🇬🇧 35.203.210.136

🇧🇷 205.210.31.214

🇳🇱 195.178.110.232

🇬🇧 194.50.235.134

🇩🇪 118.193.58.125

🇻🇳 116.109.234.203

🇨🇳 115.223.143.140

🇰🇷 106.251.244.178