JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 181.214.218.152

181.214.218.152 was found in our database!

This IP was reported 95 times. Confidence of Abuse is 0%: ?

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Unknown
ASN	Unknown
Domain Name	netutils.io
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 181.214.218.152

Whois 181.214.218.152

IP Abuse Reports for 181.214.218.152:

This IP address has been reported a total of 95 times from 50 distinct sources. 181.214.218.152 was first reported on June 10th 2022, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-02-09 22:42:21 (4 months ago)	Shorewall log file match.	Port Scan
Anonymous	2026-02-09 14:09:15 (4 months ago)	Feb 9 09:07:21 localhost kernel: [98991579.945508] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91 ... show more Feb 9 09:07:21 localhost kernel: [98991579.945508] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=181.214.218.152 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=0 DF PROTO=TCP SPT=57293 DPT=43108 WINDOW=65535 RES=0x00 SYN URGP=0 Feb 9 09:07:21 localhost kernel: [98991579.945545] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=181.214.218.152 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=0 DF PROTO=TCP SPT=57293 DPT=43108 SEQ=3478443708 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B40402080A31E626CC0000000001030307) Feb 9 09:09:14 localhost kernel: [98991693.436651] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=181.214.218.152 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=0 DF PROTO=TCP SPT=41962 DPT=14790 WINDOW=65535 RES=0x00 SYN URGP=0 Feb 9 09:09:14 localhost kernel: [98991693.436677] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08: show less	Port Scan
🇨🇳 ThreatBook.io	2025-03-20 00:21:34 (1 year ago)	ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/181.214.218.152	Brute-Force
🇨🇦 JuicyJ	2024-11-04 20:19:00 (1 year ago)	Excessive crawling/scraping	Web App Attack
🇳🇱 frits west	2024-10-30 03:25:07 (1 year ago)	(mod_security) mod_security triggered on hostname [redacted] 181.214.218.152 (BE/Belgium/-)	SQL Injection
Anonymous	2024-10-30 03:01:33 (1 year ago)		Web App Attack
🇺🇸 quicksand	2024-10-30 00:28:31 (1 year ago)	Malicious query string [GET /guestbook/add.php?lang=../../../../../../../../../etc/profile%00] [Mozi ... show more Malicious query string [GET /guestbook/add.php?lang=../../../../../../../../../etc/profile%00] [Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.164 Safari/537.36] show less	Bad Web Bot Web App Attack
🇨🇭 zynex	2024-10-29 19:27:23 (1 year ago)	URL Probing: /phpwt/core/editor.php	Web App Attack
🇳🇱 NSCA-ISEU	2024-10-29 14:47:19 (1 year ago)	Linux System Files Information Disclosure. 181.214.218.152 is part of Cyber Ghost VPN and Zenmate VP ... show more Linux System Files Information Disclosure. 181.214.218.152 is part of Cyber Ghost VPN and Zenmate VPN VT: Malicious: 3 - Suspicious: 0. AS174 Cogent Communications. Ipxo. show less	VPN IP Port Scan Web App Attack
Anonymous	2024-10-29 14:42:45 (1 year ago)	Aggressive web scan	Web App Attack
🇧🇷 diego	2024-08-06 21:05:06 (1 year ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack
🇳🇱 Cyber SOC	2024-08-06 10:09:05 (1 year ago)	Peaksys - 2024-08-06 11:06:42 UTC+01	Hacking SQL Injection Bad Web Bot Web App Attack
🇺🇸 quicksand	2024-08-03 12:45:38 (1 year ago)	Malicious query string [GET /?q=/%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../e ... show more Malicious query string [GET /?q=/%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../etc/profile&s=/%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../etc/profile&search=/%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../etc/profile&id=/%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../etc/profile&action=/%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../etc/profile&keyword=/%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../etc/profile&query=/%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../etc/profile&page=/%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../etc/profile&keywords=/%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../etc/profile&url=/%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../etc/profile&view=/%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../etc/profile&cat=/%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C..... show less	Bad Web Bot Web App Attack
Anonymous	2024-08-03 10:02:42 (1 year ago)		Web App Attack
Anonymous	2024-08-03 05:47:12 (1 year ago)	Aggressive web scan	Web App Attack

Showing 1 to 15 of 95 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 172.71.164.175

🇨🇦 85.217.149.53

🇳🇱 45.148.10.157

🇬🇪 188.92.213.13

🇨🇦 172.69.130.38

🇷🇴 141.98.83.240

🇸🇬 118.139.164.171

🇱🇦 115.84.76.82

🇭🇰 103.112.173.212

🇺🇸 96.78.175.36

🇳🇱 45.148.10.147

🇯🇵 8.216.7.215

🇺🇸 2604:a940:301:225:0:11::

🇨🇦 172.69.130.39

🇺🇸 167.99.4.252

🇱🇹 141.98.11.41

🇵🇱 87.251.64.149

🇮🇳 103.111.228.36

🇰🇪 2c0f:6300:2:103:9999::132

🇺🇸 216.25.89.117