This IP address has been reported a total of
102
times from
65 distinct
sources.
181.215.65.165 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 15
reports;
United States of America
with 8
reports;
France
with 6
reports.
The most common categories in these recent reports were:
Web App Attack
31
times;
Hacking
9
times;
Bad Web Bot
9
times;
Brute-Force
8
times;
SSH
3
times;
Other
4
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Probing of sensitive web paths and exposed admin/config endpoints. Captured by a web honeypot.
Web App Attack
Anonymous
{"reqId":"lV1jLIXeTH0v6QlGrhYr","level":1,"time":"2026-10-03T18:50:32+02:00","remoteAddr":"181.215.6 ...
show more{"reqId":"lV1jLIXeTH0v6QlGrhYr","level":1,"time":"2026-10-03T18:50:32+02:00","remoteAddr":"181.215.65.165","user":"--","app":"core","method":"GET","url":"/static/js/config.js","scriptName":"/index.php","message":"Trusted domain error. \"181.215.65.165\" tried to access using \"82.67.148.87\" as host.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36","version":"35.0.1.1","data":{"app":"core"}}
{"reqId":"YLUvFVFqS4lKv0GIBXjx","level":1,"time":"2026-10-03T18:50:34+02:00","remoteAddr":"181.215.65.165","user":"--","app":"core","method":"GET","url":"/static/config.js","scriptName":"/index.php","message":"Trusted domain error. \"181.215.65.165\" tried to access using \"82.67.148.87\" as host.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36","version":"35.0.1.1","data":{"app":"core"}}
{"reqId":"kLVRCm4QaZtWTYPp7HLu","level":1,"ti
...
show less
\[Sat Oct 03 14:52:43.126902 2026\] \[:error\] \[pid 11137\] \[client 181.215.65.165:28499\] script ...
show more\[Sat Oct 03 14:52:43.126902 2026\] \[:error\] \[pid 11137\] \[client 181.215.65.165:28499\] script \'/home/www/www_panelsrv/__info.php\' not found or unable to stat
...
show less
FTP Brute-Force
Port Scan
Brute-Force
Web App Attack
SSH
Anonymous
[Sat Oct 03 14:00:22.201596 2026] [access_compat:error] [pid 1016211:tid 1016211] [client 181.215.65 ...
show more[Sat Oct 03 14:00:22.201596 2026] [access_compat:error] [pid 1016211:tid 1016211] [client 181.215.65.165:59345] AH01797: client denied by server configuration: /var/www/html/enviroments
[Sat Oct 03 14:00:24.963570 2026] [access_compat:error] [pid 1016211:tid 1016211] [client 181.215.65.165:59345] AH01797: client denied by server configuration: /var/www/html/debug
...
show less
