JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 181.214.206.166

181.214.206.166 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 0%: ?

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Fixed Line ISP
ASN	AS3257
Domain Name	netutils.io
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 181.214.206.166

Whois 181.214.206.166

IP Abuse Reports for 181.214.206.166:

This IP address has been reported a total of 21 times from 12 distinct sources. 181.214.206.166 was first reported on October 23rd 2021, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bitblockit	2026-04-21 06:50:48 (1 month ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. D ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. Decoy listen port: 37167/tcp. Observed event time: 2026-04-21 06:50:48 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 bitblockit	2026-04-21 03:43:11 (1 month ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. D ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. Decoy listen port: 1859/tcp. Observed event time: 2026-04-21 03:43:11 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 bitblockit	2026-04-20 13:38:29 (1 month ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. D ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. Decoy listen port: 37167/tcp. Observed event time: 2026-04-20 13:38:29 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 bitblockit	2026-04-19 09:32:17 (1 month ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. D ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. Decoy listen port: 5718/tcp. Observed event time: 2026-04-19 09:32:17 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 bitblockit	2026-04-18 20:16:32 (1 month ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. D ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. Decoy listen port: 37167/tcp. Observed event time: 2026-04-18 20:16:32 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 bitblockit	2026-04-17 17:45:09 (1 month ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. D ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. Decoy listen port: 43029/tcp. Observed event time: 2026-04-17 17:45:09 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 bitblockit	2026-04-17 01:22:07 (1 month ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. D ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. Decoy listen port: 20061/tcp. Observed event time: 2026-04-17 01:22:07 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (6 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
Anonymous	2025-08-04 15:24:33 (10 months ago)	Botnet - login attempts with leaked random user/pass lists	Hacking Brute-Force Web App Attack
Anonymous	2025-07-27 14:46:25 (10 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-06-14 01:59:40 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-04-13 00:26:30 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇨🇳 ThreatBook.io	2023-08-26 00:58:56 (2 years ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/181.214.206.166 2023-0 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/181.214.206.166 2023-08-25 23:01:04 /../images/logo.png 2023-08-25 23:00:57 /login show less	Web App Attack
Anonymous	2023-08-14 19:27:26 (2 years ago)		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack
🇨🇦 Justmee	2023-04-01 01:47:04 (3 years ago)	Mar 31 19:46:48 RT-AX58U-50D8-8E617D2-C kernel: DROP IN=eth4 OUT=br0 MAC=d4:be:d9:99:6f:95:00:01:5c: ... show more Mar 31 19:46:48 RT-AX58U-50D8-8E617D2-C kernel: DROP IN=eth4 OUT=br0 MAC=d4:be:d9:99:6f:95:00:01:5c:98:34:45:08:00 SRC=181.214.206.166 DST=192.168.100.108 LEN=52 TOS=0x00 PREC=0x00 TTL=122 ID=58302 DF PROTO=TCP SPT=54109 DPT=8892 SEQ=2613631896 ACK=0 WINDOW=64768 RES=0x00 SYN URGP=0 OPT (020405060103030801010402) MARK=0x8000000 Mar 31 19:46:49 RT-AX58U-50D8-8E617D2-C kernel: DROP IN=eth4 OUT=br0 MAC=d4:be:d9:99:6f:95:00:01:5c:98:34:45:08:00 SRC=181.214.206.166 DST=192.168.100.108 LEN=52 TOS=0x00 PREC=0x00 TTL=122 ID=58303 DF PROTO=TCP SPT=54109 DPT=8892 SEQ=2613631896 ACK=0 WINDOW=64768 RES=0x00 SYN URGP=0 OPT (020405060103030801010402) MARK=0x8000000 Mar 31 19:46:51 RT-AX58U-50D8-8E617D2-C kernel: DROP IN=eth4 OUT=br0 MAC=d4:be:d9:99:6f:95:00:01:5c:98:34:45:08:00 SRC=181.214.206.166 DST=192.168.100.108 LEN=52 TOS=0x00 PREC=0x00 TTL=122 ID=58304 DF PROTO=TCP SPT=54109 DPT=8892 SEQ=2613631896 ACK=0 WINDOW=64768 RES=0x00 SYN URGP=0 OPT (020405060103030801010402) MARK=0x8000000 ... show less	Hacking Brute-Force

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 219.138.46.5

🇨🇳 116.25.92.60

🇱🇹 91.224.92.147

🇸🇬 43.134.27.142

🇺🇸 34.168.246.2

🇲🇽 189.194.140.170

🇮🇳 182.95.234.6

🇺🇸 172.182.224.163

🇮🇩 103.151.140.97

🇵🇹 85.240.193.104

🇺🇦 82.24.224.159

🇲🇾 49.124.149.49

🇦🇺 35.189.21.197

🇨🇱 34.176.33.15

🇫🇷 34.155.31.208

🇦🇺 34.151.150.29

🇺🇸 34.150.171.47

🇺🇸 34.20.176.42

🇮🇹 34.17.202.51

🇺🇸 20.40.216.117