JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 181.215.182.163

181.215.182.163 was found in our database!

This IP was reported 194 times. Confidence of Abuse is 0%: ?

ISP	IPXO
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	ipxo.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 181.215.182.163

Whois 181.215.182.163

IP Abuse Reports for 181.215.182.163:

This IP address has been reported a total of 194 times from 115 distinct sources. 181.215.182.163 was first reported on August 24th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 big-cloud.nl	2026-05-17 13:50:20 (1 month ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 ipblock.com	2026-05-06 09:14:00 (2 months ago)	IPBlock protected site ID [3192-af][s=06]. Exploit request, vulnerability probe.	Hacking Bad Web Bot Web App Attack
🇮🇩 Kencang.ID	2026-02-26 21:12:26 (4 months ago)	Failed Login Attempt 2026-02-26 21:12:26 \| 181.215.182.163 \| Desktop \| Mozilla Firefox \| Porto Segur ... show more Failed Login Attempt 2026-02-26 21:12:26 \| 181.215.182.163 \| Desktop \| Mozilla Firefox \| Porto Seguro, Bahia, Brazil \| SV INTERNET \| Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 show less	Brute-Force FTP Brute-Force
🇺🇸 Starburst SysOp Team	2026-02-26 19:59:07 (4 months ago)	(mod_security-custom) mod_security (id:210492) triggered by 181.215.182.163 (US/United States/Texas/ ... show more (mod_security-custom) mod_security (id:210492) triggered by 181.215.182.163 (US/United States/Texas/Mt Pleasant/-/[AS174 COGENT-174]): 1 in the last 3600 secs (0-srv1) show less	Hacking
🇧🇪 madeit	2026-02-26 19:54:24 (4 months ago)		Web App Attack
🇨🇭 teamsecure	2026-02-26 19:38:29 (4 months ago)	Banned for trying to access env	Web App Attack
🇸🇬 ipidentify	2026-02-26 19:32:35 (4 months ago)	2026-02-26T19:32:35Z GET /.env	Web App Attack
🇺🇸 Epimetheus	2026-02-26 19:04:29 (4 months ago)	Unauthorized access attempts: [GET] /.env UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77. ... show more Unauthorized access attempts: [GET] /.env UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-26 18:50:30 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 181.215.182.163 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 181.215.182.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 26 13:50:24.277170 2026] [security2:error] [pid 8386:tid 8386] [client 181.215.182.163:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "globetechsecurities.com"] [uri "/.env"] [unique_id "aaCV8Fs6cKACy0PHg2titQAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-02-26 18:18:04 (4 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
Anonymous	2026-02-26 10:02:10 (4 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Clou ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Cloud secrets probing show less	Bad Web Bot Web App Attack
🇧🇾 lns.bz	2026-02-25 11:09:25 (4 months ago)	.env scanning [BY]	Web App Attack
🇬🇧 Swiptly	2026-02-25 11:01:46 (4 months ago)	Bot scanning for environment files .env .env/\* ...	Web App Attack
🇺🇸 S.O.B.A. Dev.	2026-02-25 10:56:21 (4 months ago)	Threat Blocked by BeeHive from (ASN:174) (Network:COGENT-174 - Cogent Communications, LLC) (Host:sob ... show more Threat Blocked by BeeHive from (ASN:174) (Network:COGENT-174 - Cogent Communications, LLC) (Host:soba.dev) (Method:GET) (Protocol:HTTP/1.1) (Timestamp:2026-02-25T10:56:21Z) show less	Brute-Force Web Spam Web App Attack
🇺🇸 TPI-Abuse	2026-02-25 10:49:08 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 181.215.182.163 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 181.215.182.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 25 05:49:04.029621 2026] [security2:error] [pid 21598:tid 21598] [client 181.215.182.163:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eddysgroup.com"] [uri "/.env"] [unique_id "aZ7ToPANla6oj3190Y2aCAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 194 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 140.248.75.155

🇨🇳 139.212.59.54

🇭🇰 118.193.39.103

🇺🇸 48.214.144.100

🇺🇸 20.98.152.158

🇵🇱 83.168.110.23

🇨🇳 223.78.119.130

🇨🇳 180.184.176.74

🇲🇩 176.123.8.39

🇩🇪 172.111.80.157

🇻🇳 171.231.195.224

🇳🇱 160.119.71.11

🇨🇦 155.94.236.70

🇺🇸 147.185.132.180

🇩🇪 140.248.227.157

🇳🇱 138.226.239.7

🇺🇸 45.55.139.45

🇻🇳 36.50.134.129

🇬🇧 35.203.210.131

🇨🇳 223.74.195.239