JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 181.214.166.138

181.214.166.138 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 0%: ?

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	netutils.io
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 181.214.166.138

Whois 181.214.166.138

IP Abuse Reports for 181.214.166.138:

This IP address has been reported a total of 14 times from 11 distinct sources. 181.214.166.138 was first reported on June 13th 2022, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bigscoots.com	2026-03-02 20:54:12 (3 months ago)	(smtpauth) Failed SMTP AUTH login from 181.214.166.138 (US/United States/-): 5 in the last 3600 secs ... show more (smtpauth) Failed SMTP AUTH login from 181.214.166.138 (US/United States/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-03-02 15:53:44 dovecot_plain authenticator failed for H=([10.39.18.55]) [181.214.166.138]:32590: 535 Incorrect authentication data ([email protected]) 2026-03-02 15:53:50 dovecot_login authenticator failed for H=([10.39.18.55]) [181.214.166.138]:32590: 535 Incorrect authentication data ([email protected]) 2026-03-02 15:53:56 dovecot_plain authenticator failed for H=([10.39.18.55]) [181.214.166.138]:53128: 535 Incorrect authentication data ([email protected]) 2026-03-02 15:54:02 dovecot_login authenticator failed for H=([10.39.18.55]) [181.214.166.138]:53128: 535 Incorrect authentication data ([email protected]) 2026-03-02 15:54:10 dovecot_plain authenticator failed for H=([10.39.18.55]) [181.214.166.138]:60704: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇨🇿 huginet	2026-03-02 20:53:20 (3 months ago)	2026-03-02T21:53:10.660331 hugo.huginet.net auth[3711427]: pam_unix(dovecot:auth): authentication fa ... show more 2026-03-02T21:53:10.660331 hugo.huginet.net auth[3711427]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=frantisek.tauterman rhost=181.214.166.138 user=frantisek.tauterman 2026-03-02T21:53:19.605476 hugo.huginet.net auth[3711427]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=frantisek.tauterman rhost=181.214.166.138 user=frantisek.tauterman ... show less	Hacking Brute-Force
🇮🇹 alph44	2026-02-21 10:03:20 (3 months ago)	(smtpauth) Failed SMTP AUTH login from 181.214.166.138 (US/United States/-): 5 in the last 3600 secs ... show more (smtpauth) Failed SMTP AUTH login from 181.214.166.138 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: show less	Brute-Force
🇮🇹 VHosting	2026-02-18 23:10:22 (3 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
Anonymous	2025-12-10 08:26:50 (6 months ago)	botnet	DDoS Attack
🇺🇸 xmission.com	2025-10-06 02:48:24 (8 months ago)	Blocked by UFW (TCP on 62736) Source port: 57666 TTL: 119 Packet length: 52 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 62736) Source port: 57666 TTL: 119 Packet length: 52 TOS: 0x08 This report (for 181.214.166.138) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇲🇾 Rizzy	2025-04-17 00:51:34 (1 year ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇧🇷 SvrAdmin	2025-03-30 10:24:17 (1 year ago)	[101] (smtpauth) Failed SMTP AUTH login from 181.214.166.138 (US/United States/-): 5 in the last 360 ... show more [101] (smtpauth) Failed SMTP AUTH login from 181.214.166.138 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2025-03-30 07:21:06 dovecot_login authenticator failed for (ADMIN) [181.214.166.138]:43926: 535 Incorrect authentication data ([email protected]) 2025-03-30 07:21:11 dovecot_login authenticator failed for (ADMIN) [181.214.166.138]:43934: 535 Incorrect authentication data ([email protected]) 2025-03-30 07:21:53 dovecot_login authenticator failed for (ADMIN) [181.214.166.138]:46104: 535 Incorrect authentication data ([email protected]) 2025-03-30 07:22:07 dovecot_login authenticator failed for (ADMIN) [181.214.166.138]:46072: 535 Incorrect authentication data ([email protected]) 2025-03-30 07:24:15 dovecot_login authenticator failed for (ADMIN) [181.214.166.138]:39158: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
🇺🇸 ChamberofCommerce.com	2024-09-25 14:02:12 (1 year ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2024-09-21 19:32:36 (1 year ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2024-09-20 17:32:16 (1 year ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2024-08-15 22:47:17 (1 year ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2023-12-10 14:49:40 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 181.214.166.138 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 181.214.166.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 10 09:49:33.276598 2023] [security2:error] [pid 1614372] [client 181.214.166.138:38121] [client 181.214.166.138] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|hawarcenter.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hawarcenter.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZXXP_UH_390hzYOoQ0JVugAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 EGP Abuse Dept	2022-06-13 15:36:44 (4 years ago)	Unauthorized connection to proxy port 8118	Port Scan Hacking

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 204.76.203.80

🇳🇱 104.23.172.56

🇺🇸 34.144.180.216

🇷🇴 2.57.122.177

🇺🇸 207.90.244.26

🇩🇪 178.128.207.138

🇧🇷 45.205.1.247

🇺🇸 35.197.5.132

🇨🇳 182.244.0.150

🇳🇬 165.154.11.52

🇺🇸 162.217.163.27

🇺🇸 152.32.183.209

🇩🇪 144.31.218.74

🇨🇳 112.86.225.124

🇧🇪 104.199.33.147

🇮🇳 103.127.30.137

🇹🇷 89.252.131.17

🇸🇬 47.79.207.38

🇰🇭 43.230.195.244

🇺🇸 34.168.172.94