JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 181.215.182.102

181.215.182.102 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 47%: ?

47%

ISP	Cyber Assets FZCO
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	cyberassets.ae
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 181.215.182.102

Whois 181.215.182.102

IP Abuse Reports for 181.215.182.102:

This IP address has been reported a total of 28 times from 22 distinct sources. 181.215.182.102 was first reported on January 25th 2023, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-07-02 04:05:40 (4 days ago)	Abuse Detected (4)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 03:38:37 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 181.215.182.102 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 181.215.182.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 23:38:32.862339 2026] [security2:error] [pid 19468:tid 19468] [client 181.215.182.102:59072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mobiletitleclerk.com"] [uri "/.env"] [unique_id "akXdOEk3BaCvJCBya0JvogAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-07-02 03:37:32 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /.env \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 Mundo Bueno	2026-07-02 03:34:23 (4 days ago)	[ISILIA Protection v2.1] Tentative d'accès: /.env \| Pays: US \| UA: Mozilla/5.0 (Macintosh; Intel Mac ... show more [ISILIA Protection v2.1] Tentative d'accès: /.env \| Pays: US \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 show less	Hacking Web App Attack
🇪🇸 pipeline.es	2026-07-02 03:33:26 (4 days ago)	Web scanning / probing for vulnerable paths \| URL: /.env \| Evidence: hotrawo.com 181.215.182.102 - - ... show more Web scanning / probing for vulnerable paths \| URL: /.env \| Evidence: hotrawo.com 181.215.182.102 - - [02/Jul/2026:05:32:56 +0200] \"GET /.env HTTP/1.1\" 404 18796 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0\" GEOIP_COUNTRY_CODE=US \| ASN: COGENT-174 \| Country: US show less	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 03:21:38 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 181.215.182.102 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 181.215.182.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 23:21:31.902895 2026] [security2:error] [pid 5012:tid 5012] [client 181.215.182.102:18084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uhfcfoundation.org"] [uri "/.env"] [unique_id "akXZO1yq31krsRE84tP6twAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-02 03:10:18 (4 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 03:02:44 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 181.215.182.102 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 181.215.182.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 23:02:39.515762 2026] [security2:error] [pid 21509:tid 21509] [client 181.215.182.102:58696] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigislandhawaiirealty.com"] [uri "/.env"] [unique_id "akXUz19sC-2_Mb42jFwf7AAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Phenix Info	2026-07-02 02:47:59 (4 days ago)	SmallGuard.fr - Forbidden Ext.	Web App Attack
🇩🇪 Hagen Schoebel	2026-07-02 02:42:29 (4 days ago)	Blocked by CrowdSec - crowdsecurity/vpatch-env-access (US)	Port Scan Brute-Force Web App Attack SSH
🇺🇸 TPI-Abuse	2026-07-02 02:24:15 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 181.215.182.102 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 181.215.182.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 22:24:09.408678 2026] [security2:error] [pid 27735:tid 27735] [client 181.215.182.102:9979] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mitchellart.com"] [uri "/.env"] [unique_id "akXLyYQ0Mwh9LPDkq-_wOwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-04-24 02:28:17 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇰 TransAdvice-Abuse	2025-12-26 16:15:36 (6 months ago)	IRC SPAM/Flood	DDoS Attack
Anonymous	2025-12-15 08:37:35 (6 months ago)	botnet	DDoS Attack
🇳🇱 maxxsense	2025-11-03 02:26:01 (8 months ago)	(smtpauth) Failed SMTP AUTH login from 181.215.182.102 (US/United States/-)	Brute-Force

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 103.143.231.2

🇵🇱 95.214.53.157

🇹🇷 91.151.95.146

🇺🇸 2600:1f14:1285:4503:abec:2999:d70:ee64

🇩🇪 139.19.117.130

🇳🇱 93.123.109.128

🇷🇴 92.118.39.50

🇩🇪 87.106.29.151

🇫🇷 62.210.189.225

🇺🇸 38.148.249.2

🇻🇳 14.248.82.157

🇺🇸 4.150.201.26

🇰🇷 222.108.109.37

🇲🇰 185.233.210.164

🇲🇰 185.233.210.131

🇺🇸 165.245.167.227

🇺🇸 162.144.105.39

🇫🇮 77.105.161.120

🇺🇸 62.132.18.142

🇳🇱 45.148.10.151