JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 181.215.182.202

181.215.182.202 was found in our database!

This IP was reported 123 times. Confidence of Abuse is 0%: ?

ISP	Cyber Assets FZCO
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	cyberassets.ae
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 181.215.182.202

Whois 181.215.182.202

IP Abuse Reports for 181.215.182.202:

This IP address has been reported a total of 123 times from 73 distinct sources. 181.215.182.202 was first reported on December 14th 2023, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-14 03:05:28 (2 months ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇺🇸 TPI-Abuse	2026-04-14 03:05:13 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 181.215.182.202 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 181.215.182.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 23:05:08.907873 2026] [security2:error] [pid 410685:tid 410685] [client 181.215.182.202:48831] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.xarq.es"] [uri "/.env"] [unique_id "ad2u5Ln0hH9GO378m8IP7QAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 myintarweb	2026-04-14 02:45:47 (2 months ago)	181.215.182.202 - - [14/Apr/2026:03:45:45 +0100] 80 "GET /.env HTTP/1.1" 403 1480 "-" "Mozilla/5.0 ( ... show more 181.215.182.202 - - [14/Apr/2026:03:45:45 +0100] 80 "GET /.env HTTP/1.1" 403 1480 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Hacking Bad Web Bot Web App Attack
Anonymous	2026-04-14 02:42:08 (2 months ago)	Excessive 404 Traffic Wordpress	Web App Attack
🇺🇸 TPI-Abuse	2026-04-14 02:23:20 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 181.215.182.202 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 181.215.182.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 22:23:14.539888 2026] [security2:error] [pid 1181549:tid 1181673] [client 181.215.182.202:7177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "greaternorthmiami.org"] [uri "/.env"] [unique_id "ad2lEsPr0fMBV_0qgjzElgAAAhY"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 Detmach	2026-04-14 02:16:41 (2 months ago)	Security attack detected. Multiple failed attempts from 181.215.182.202. IP banned for 1440 minutes ... show more Security attack detected. Multiple failed attempts from 181.215.182.202. IP banned for 1440 minutes at 14.04.2026 05:15:56. Failed attempts: 1 show less	Brute-Force
🇳🇱 e.fierstra	2026-04-14 01:56:07 (2 months ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇨🇭 zynex	2026-04-14 01:42:41 (2 months ago)	URL Probing: /.env	Web App Attack
🇩🇪 mondor.ro	2026-04-14 01:12:11 (2 months ago)	Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 181.215.182.202, Reaso ... show more Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 181.215.182.202, Reason:[(mod_security) mod_security (id:210492) triggered by 181.215.182.202 (US/United States/-): 3 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs: show less	Port Scan
🇺🇸 TPI-Abuse	2026-04-14 01:11:35 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 181.215.182.202 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 181.215.182.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 21:11:28.600884 2026] [security2:error] [pid 1108790:tid 1108790] [client 181.215.182.202:31020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.title15.com"] [uri "/.env"] [unique_id "ad2UQI8V39Ujb1Si6zXA5QAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting	2026-04-14 00:54:55 (2 months ago)	(modsecurity) srv103 ModSecurity 181.215.182.202 (US/United States/-): 10 in the last 3600 secs; Por ... show more (modsecurity) srv103 ModSecurity 181.215.182.202 (US/United States/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇬🇧 Aetherweb Ark	2026-04-14 00:51:45 (2 months ago)	(mod_security) mod_security (id:949110) triggered by 181.215.182.202 (US/United States/-): N in the ... show more (mod_security) mod_security (id:949110) triggered by 181.215.182.202 (US/United States/-): N in the last X secs show less	Web App Attack
Anonymous	2026-04-14 00:50:08 (2 months ago)	181.215.182.202 - - [14/Apr/2026:02:50:08 +0200] "GET /.env HTTP/1.1" 403 440 "-" "Mozilla/5.0 (Maci ... show more 181.215.182.202 - - [14/Apr/2026:02:50:08 +0200] "GET /.env HTTP/1.1" 403 440 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Web App Attack
🇱🇻 garmtech.com	2026-04-14 00:39:00 (2 months ago)	Attempted access to sensitive endpoint (/.env) detected. Automated scan or unauthorized probing.	Web App Attack
🇺🇸 TPI-Abuse	2026-04-14 00:36:25 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 181.215.182.202 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 181.215.182.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 20:36:20.850104 2026] [security2:error] [pid 2459636:tid 2459636] [client 181.215.182.202:14183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.dc406.org"] [uri "/.env"] [unique_id "ad2MBJwCCXxIbwbQcc3VUgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 123 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.88.98.124

🇬🇧 193.176.29.22

🇺🇸 147.185.132.226

🇺🇸 147.185.132.195

🇺🇸 104.243.42.167

🇺🇸 66.132.186.201

🇺🇸 34.60.124.173

🇸🇬 23.98.64.117

🇺🇸 20.127.185.37

🇳🇱 213.177.179.91

🇬🇧 188.240.71.195

🇻🇳 183.81.61.132

🇩🇪 69.5.169.59

🇧🇷 20.197.238.124

🇰🇷 222.104.76.94

🇧🇷 179.43.9.2

🇺🇸 172.253.15.213

🇳🇱 144.124.244.136

🇸🇬 114.119.140.71

🇵🇭 112.210.209.95