JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 181.215.94.8

181.215.94.8 was found in our database!

This IP was reported 141 times. Confidence of Abuse is 36%: ?

36%

ISP	Cyber Assets FZCO
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	cyberassets.ae
Country	🇫🇷 France
City	Marseille, Provence-Alpes-Cote d'Azur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 181.215.94.8

Whois 181.215.94.8

IP Abuse Reports for 181.215.94.8:

This IP address has been reported a total of 141 times from 56 distinct sources. 181.215.94.8 was first reported on January 18th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 dineshskt4all	2026-07-18 15:26:21 (1 day ago)	181.215.94.8 - - [18/Jul/2026:15:26:18 +0000] "POST /user-register/ HTTP/1.1" 302 65267 "https://www ... show more 181.215.94.8 - - [18/Jul/2026:15:26:18 +0000] "POST /user-register/ HTTP/1.1" 302 65267 "https://www.broadwaysinnmanali.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" ... show less	IoT Targeted
🇩🇪 filstal.org	2026-07-03 03:26:35 (2 weeks ago)	Bad bot activity detected (automated scraping/probing).	Bad Web Bot Web App Attack
🇳🇱 EGP Abuse Dept	2026-07-03 02:22:30 (2 weeks ago)	Scanning for web/db/file exploits on www.technautic.nl	SQL Injection Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-07-02 22:35:51 (2 weeks ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 181.215.94.8 (FR/France/-): 1 in th ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 181.215.94.8 (FR/France/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-24 02:45:20 (3 weeks ago)	181.215.94.8 - - [24/Jun/2026:05:45:18 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 404 4675 "http:/ ... show more 181.215.94.8 - - [24/Jun/2026:05:45:18 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 404 4675 "http://znp-vo.nuou.org.ua/wp-admin/js/index.php" "Go-http-client/1.1" 181.215.94.8 - - [24/Jun/2026:05:45:18 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 404 732 "http://znp-vo.nuou.org.ua/wp-admin/css/index.php" "Go-http-client/1.1" ... show less	Web App Attack
🇬🇧 consul.to	2026-06-07 04:06:50 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-06 22:56:42 (1 month ago)	181.215.94.8 - - [07/Jun/2026:01:56:41 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 404 709 "-" "Mozi ... show more 181.215.94.8 - - [07/Jun/2026:01:56:41 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 404 709 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 181.215.94.8 - - [07/Jun/2026:01:56:41 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 404 709 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" ... show less	Web App Attack
🇫🇷 Octopuce	2026-06-06 21:20:35 (1 month ago)	Aggressive web search of vulnerable pages: /images/av.php /wp-includes/interactivity-api/interactivi ... show more Aggressive web search of vulnerable pages: /images/av.php /wp-includes/interactivity-api/interactivity-api-xml.php /wp-includes/colour.php /elp ... show less	Web App Attack
🇪🇸 librebit	2026-06-06 01:39:34 (1 month ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-06-05 10:39:19 (1 month ago)	(mod_security) mod_security (id:240000) triggered by 181.215.94.8 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 181.215.94.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 06:39:13.270031 2026] [security2:error] [pid 19291:tid 19291] [client 181.215.94.8:37597] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "87"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|watlab.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "watlab.com"] [uri "/images/stories/themes.php"] [unique_id "aiKnUU6KnEeHCzOkcraF7wAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 as211431.net	2026-06-05 00:29:00 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from FR. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from FR. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /adminfuns.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 consul.to	2026-05-26 16:33:59 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇿🇦 Tokolosh Hunters	2026-05-15 06:48:37 (2 months ago)	AutoBlockWindow-Known bad useragent query-2026-05-15 06:48:36	Bad Web Bot
Anonymous	2026-04-21 18:07:57 (2 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FR, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FR, Attack patterns: WordPress scanning, Backup file probing show less	Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-04-20 21:50:40 (2 months ago)	Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 141 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 139.19.117.197

🇹🇼 220.134.154.204

🇺🇸 209.87.169.254

🇬🇧 198.244.242.220

🇬🇧 195.206.182.195

🇺🇸 184.105.247.232

🇧🇷 170.78.122.180

🇫🇷 91.196.152.207

🇫🇷 85.25.172.249

🇬🇧 81.19.219.214

🇯🇲 67.213.148.166

🇺🇸 64.62.156.153

🇺🇸 45.138.100.250

🇪🇸 37.134.178.94

🇺🇸 34.48.102.189

🇫🇷 31.56.58.134

🇩🇪 2.241.57.217

🇩🇪 2a00:19e0:3005:2ff:4b3b:e288:e3d7:e100

🇩🇪 2a00:19e0:3005:2ff:35b9:a35a:99e0:a304

🇺🇿 213.230.87.250