JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 181.214.164.80

181.214.164.80 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 11%: ?

11%

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	netutils.io
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 181.214.164.80

Whois 181.214.164.80

IP Abuse Reports for 181.214.164.80:

This IP address has been reported a total of 29 times from 24 distinct sources. 181.214.164.80 was first reported on February 8th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-06-10 03:04:02 (1 week ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-04.181.214.164.80.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-04.181.214.164.80.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇫🇮 Ticlem	2026-05-27 16:52:08 (3 weeks ago)	2026-05-27T18:22:07.329801+02:00 clement-turlure kernel: [905092.728610] [UFW BLOCK] IN=enp0s31f6 OU ... show more 2026-05-27T18:22:07.329801+02:00 clement-turlure kernel: [905092.728610] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=181.214.164.80 DST=95.216.21.136 LEN=132 TOS=0x00 PREC=0x00 TTL=49 ID=18396 PROTO=UDP SPT=1355 DPT=6881 LEN=112 2026-05-27T18:37:07.369866+02:00 clement-turlure kernel: [905992.775831] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=181.214.164.80 DST=95.216.21.136 LEN=132 TOS=0x00 PREC=0x00 TTL=49 ID=32999 PROTO=UDP SPT=32130 DPT=6881 LEN=112 2026-05-27T18:52:07.328012+02:00 clement-turlure kernel: [906892.741174] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=181.214.164.80 DST=95.216.21.136 LEN=132 TOS=0x00 PREC=0x00 TTL=49 ID=47254 PROTO=UDP SPT=32648 DPT=6881 LEN=112 ... show less	Port Scan
Anonymous	2026-02-28 15:30:09 (3 months ago)	(smtpauth) Failed SMTP AUTH login from 181.214.164.80 (US/United States/Illinois/Chicago/-/[redacted ... show more (smtpauth) Failed SMTP AUTH login from 181.214.164.80 (US/United States/Illinois/Chicago/-/[redacted]) show less	Brute-Force
🇫🇷 UM3	2026-02-26 02:10:52 (3 months ago)	Exim Auth Failed	Brute-Force
Anonymous	2026-02-24 06:24:15 (3 months ago)	Port scanning: unknown[181.214.164.80] unknown[181.214.164.80] unknown[181.214.164.80]	Brute-Force
🇮🇹 VHosting	2026-02-18 23:14:38 (4 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
Anonymous	2026-01-09 19:44:32 (5 months ago)	botnet	DDoS Attack
🇺🇸 bigscoots.com	2026-01-09 18:00:09 (5 months ago)	(smtpauth) Failed SMTP AUTH login from 181.214.164.80 (US/United States/-): 5 in the last 3600 secs; ... show more (smtpauth) Failed SMTP AUTH login from 181.214.164.80 (US/United States/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-01-09 12:58:54 dovecot_plain authenticator failed for H=([10.29.201.227]) [181.214.164.80]:46856: 535 Incorrect authentication data ([email protected]) 2026-01-09 12:59:00 dovecot_login authenticator failed for H=([10.29.201.227]) [181.214.164.80]:46856: 535 Incorrect authentication data ([email protected]) 2026-01-09 12:59:07 dovecot_plain authenticator failed for H=([10.29.201.227]) [181.214.164.80]:54746: 535 Incorrect authentication data ([email protected]) 2026-01-09 12:59:09 dovecot_login authenticator failed for H=([10.29.201.227]) [181.214.164.80]:54746: 535 Incorrect authentication data ([email protected]) 2026-01-09 13:00:06 dovecot_plain authenticator failed for H=([10.29.201.227]) [181.214.164.80]:58311: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
Anonymous	2025-11-01 22:30:18 (7 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇨🇿 lp	2025-10-10 04:55:00 (8 months ago)	Email account brute force: 1 attempts were recorded from 181.214.164.80 2025-10-10T06:19:23+02:00 wa ... show more Email account brute force: 1 attempts were recorded from 181.214.164.80 2025-10-10T06:19:23+02:00 warning: unknown[181.214.164.80]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
Anonymous	2025-10-10 04:30:26 (8 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇮🇩 Burayot	2025-06-24 23:13:42 (11 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 181.214.164.80 (US/United States/-) ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 181.214.164.80 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
🇩🇪 stalker.to	2025-05-22 01:51:29 (1 year ago)	Datacenter Proxy	Web Spam
Anonymous	2025-05-18 14:47:26 (1 year ago)	Blocked by UFW [3389/tcp] Source port: 61664 TTL: 119 Packet length: 52 TOS: 0x02	Port Scan Hacking Brute-Force
🇩🇪 Lazentis	2025-05-18 14:39:23 (1 year ago)	Unauthorized access attempt to port 3389 (tcp)	Brute-Force SSH

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 212.111.193.14

🇨🇳 59.66.17.203

🇺🇸 57.141.0.6

🇩🇿 41.99.154.118

🇮🇳 223.181.84.42

🇷🇺 213.180.203.114

🇵🇱 172.253.13.209

🇺🇸 152.32.205.153

🇵🇰 139.135.44.214

🇵🇰 103.179.241.157

🇸🇮 102.220.160.29

🇩🇪 64.89.163.48

🇺🇸 20.40.216.95

🇯🇵 8.209.229.251

🇶🇦 2600:1900:4260:40e::e1

🇷🇼 196.216.81.126

🇦🇷 190.112.138.104

🇦🇷 186.56.30.130

🇧🇷 181.189.112.199

🇺🇸 172.202.117.125