AbuseIPDB » 81.49.94.180
81.49.94.180
This IP was reported 3 times. Confidence of
Abuse
is 20% : ?
ISP
Orange S.A.
Usage Type
Mobile ISP
ASN
AS3215
Hostname(s)
lfbn-lil-1-507-180.w81-49.abo.wanadoo.fr
Domain Name
orange.com
Country
🇫🇷
France
City
Dunkirk, Hauts-de-France
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 81.49.94.180 :
This IP address has been reported a total of
3
times from
3 distinct
sources.
81.49.94.180 was first reported on
August 1st 2026 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇪🇸
pipeline.es
2026-09-01 16:52:18
(1 day ago)
Web attack attempts | URL: /template/_responsive/pdf.php?viaje_id=60140&agencia=5468%25%27%20AND%20E ...
show more
Web attack attempts | URL: /template/_responsive/pdf.php?viaje_id=60140&agencia=5468%25%27%20AND%20EXTRACTVALUE%289727%2CCONCAT%280x7e%2C%28%28SELECT%20%28ELT%289727%3D9727%2C1%29%29%29%29%2C0x7e%29%29--%20-&lang=es&origen=http | Evidence: calebtravelsl.com 81.49.94.180 - - [01/Sep/2026:18:51:22 +0200] \"GET /template/_responsive/pdf.php?viaje_id=60140&agencia=5468%25%27%20AND%20EXTRACTVALUE%289727%2CCONCAT%280x7e%2C%28%28SELECT%20%28ELT%289727%3D9727%2C1%29%29%29%29%2C0x7e%29%29--%20-&lang=es&origen=http%3A%2F%2Fwww.calebtravelsl.com%2Foferta%2Fviaje%2Fecuador%2F60140%2Fgalapagos_voluntariado HTTP/1.1\" 404 4392 \"-\" \"Mozilla/5.0 | ASN: Orange | Country: FR
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-08-30 18:19:38
(3 days ago)
(mod_security) mod_security (id:220150) triggered by 81.49.94.180 (lfbn-lil-1-507-180.w81-49.abo.wan ...
show more
(mod_security) mod_security (id:220150) triggered by 81.49.94.180 (lfbn-lil-1-507-180.w81-49.abo.wanadoo.fr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 14:19:32.656839 2026] [security2:error] [pid 31902:tid 31902] [client 81.49.94.180:35760] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:union(?:\\\\/\\\\*.*\\\\*\\\\/)?select)" at ARGS:fromwhat. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5671"] [id "220150"] [rev "4"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)||entertainmentcapitol.com|F|2"] [data "')/**/and/**/('cisiln'='cisiln'/**/union/**/all/**/select/**/'tpdqkqzjhahqixvtulridrdgoelhfdso'--/**/dfozel"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "entertainmentcapitol.com"] [uri "/g12store.php"] [unique_id "apR0NFWLqlEcO6tu91tlLQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-01 09:06:00
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
Showing 1 to
3
of 3 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: