JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.181.42.183

66.181.42.183 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 100%: ?

100%

ISP	UnReal Servers, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS64236
Domain Name	unrealservers.net
Country	🇺🇸 United States of America
City	Kansas City, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.181.42.183

Whois 66.181.42.183

IP Abuse Reports for 66.181.42.183:

This IP address has been reported a total of 32 times from 24 distinct sources. 66.181.42.183 was first reported on July 17th 2026, and the most recent report was 39 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 big-cloud.nl	2026-07-28 14:24:10 (39 minutes ago)	Try to access /.env	Web App Attack
🇺🇸 Al Coholic	2026-07-28 07:12:58 (7 hours ago)	Detected By Fail2ban	Hacking Bad Web Bot Web App Attack
🇫🇷 ✨	2026-07-28 01:10:15 (13 hours ago)	Domain : redirect.netenergy.uk Rule : env 2026-07-28 00:54:02 217.194.210.152 GET /.env - 80 - 66.18 ... show more Domain : redirect.netenergy.uk Rule : env 2026-07-28 00:54:02 217.194.210.152 GET /.env - 80 - 66.181.42.183 HTTP/1.1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 - 217.194.210.152 404 0 2 1503 210 105 - - show less	Hacking SQL Injection
🇮🇪 AutosOnShow	2026-07-27 21:28:05 (17 hours ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-07-27 21:27:09.385 \|	Web App Attack
🇺🇸 jfz-abuse	2026-07-27 17:53:04 (21 hours ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇺🇸 HamSammich	2026-07-27 11:49:27 (1 day ago)	Automated sensor: 1 HTTP connection/probe attempts over the last 24h (latest 2026-07-27T11:49Z).	Brute-Force Web App Attack
🇬🇧 Andrew	2026-07-27 00:12:54 (1 day ago)	Blocked by UFW (TCP on port 80). Source port: 63347 TTL: 114 Packet length: 52 TOS: 0x00 This repor ... show more Blocked by UFW (TCP on port 80). Source port: 63347 TTL: 114 Packet length: 52 TOS: 0x00 This report (for 66.181.42.183) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 22:41:25 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 66.181.42.183 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 66.181.42.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 18:41:20.537056 2026] [security2:error] [pid 28577:tid 28577] [client 66.181.42.183:57651] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.9"] [uri "/.env"] [unique_id "amaNELL9aVYM4-9txboa1QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 17:24:18 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 66.181.42.183 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 66.181.42.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 13:24:14.794582 2026] [security2:error] [pid 3144650:tid 3144650] [client 66.181.42.183:50212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.15"] [uri "/.env"] [unique_id "amZCvtXiW84cawSCR6xH0AAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-07-23 03:11:55 (5 days ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: - 66.181.42.183 - - [19/Jul/2026:11:10:58 -0300] "GET /.e ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: - 66.181.42.183 - - [19/Jul/2026:11:10:58 -0300] "GET /.env HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-07-22 03:11:27 (6 days ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: - 66.181.42.183 - - [19/Jul/2026:11:10:58 -0300] "GET /.e ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: - 66.181.42.183 - - [19/Jul/2026:11:10:58 -0300] "GET /.env HTTP/1.1" 404 414 show less	Bad Web Bot
🇦🇺 paulshipley.com.au	2026-07-21 18:59:15 (6 days ago)	[Wed Jul 22 04:59:15.172614 2026] [security2:error] [pid 270856] [client 66.181.42.183:49297] [clien ... show more [Wed Jul 22 04:59:15.172614 2026] [security2:error] [pid 270856] [client 66.181.42.183:49297] [client 66.181.42.183] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/.env"] [unique_id "al_BgyJg1N-P2TGYLpJHCgAAAAc"] ... show less	Web App Attack
Anonymous	2026-07-21 18:28:24 (6 days ago)	Fail2Ban triggered	Web App Attack
🇨🇦 polycoda	2026-07-21 17:23:03 (6 days ago)	AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based)	Hacking Web App Attack
🇫🇷 LRNP	2026-07-21 13:47:53 (1 week ago)	_:80 66.181.42.183 - - [21/Jul/2026:13:47:53 +0000] "GET /.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 (M ... show more _:80 66.181.42.183 - - [21/Jul/2026:13:47:53 +0000] "GET /.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a09:bac1:76c0:480::11:1ba

🇺🇸 159.65.223.164

🇧🇩 114.130.97.15

🇧🇬 79.124.62.134

🇺🇸 18.190.15.50

🇫🇮 147.185.133.8

🇨🇳 118.212.121.55

🇻🇳 116.99.254.222

🇺🇿 95.46.68.14

🇳🇱 93.174.93.12

🇫🇷 85.217.140.54

🇫🇷 51.75.253.68

🇺🇸 20.106.56.201

🇮🇩 157.10.182.14

🇨🇳 123.245.84.178

🇨🇳 123.191.140.203

🇨🇳 120.48.177.102

🇸🇬 111.221.44.115

🇧🇩 103.183.62.1

🇳🇱 89.248.167.131