JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 81.161.239.13

81.161.239.13 was found in our database!

This IP was reported 360 times. Confidence of Abuse is 100%: ?

100%

ISP	GravHosting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS219474
Domain Name	gravhosting.com
Country	🇺🇸 United States of America
City	Kansas City, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 81.161.239.13

Whois 81.161.239.13

IP Abuse Reports for 81.161.239.13:

This IP address has been reported a total of 360 times from 115 distinct sources. 81.161.239.13 was first reported on March 23rd 2026, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 myintarweb	2026-06-24 06:50:17 (17 hours ago)	81.161.239.13 - - [24/Jun/2026:07:50:16 +0100] 80 "\x16\x03\x01\x02" 400 1467 "-" "-" ...	Hacking Bad Web Bot Web App Attack
🇫🇷 Kraften	2026-06-24 02:09:34 (21 hours ago)	Web noscript attack ...	Web Spam Web App Attack
🇺🇸 drewf.ink	2026-06-23 22:42:34 (1 day ago)	[22:42] Port scanning. Port(s) scanned: TCP/8888	Port Scan
🇨🇿 Prcek	2026-06-23 11:07:23 (1 day ago)	PortScan:HOST=81.161.239.13,DPORTS=443	Port Scan
🇩🇪 Progetto1	2026-06-23 10:38:01 (1 day ago)	Detected via HAProxyScanner at 2026-06-23 10:38:01 UTC on destination port WEB (80/443). Repeated sc ... show more Detected via HAProxyScanner at 2026-06-23 10:38:01 UTC on destination port WEB (80/443). Repeated scan / connection. show less	Port Scan Hacking Brute-Force
🇩🇪 MaxMeier	2026-06-23 06:49:34 (1 day ago)	81.161.239.13 - - [23/Jun/2026:08:48:32 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 6 ... show more 81.161.239.13 - - [23/Jun/2026:08:48:32 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/536.3 (KHTML, like Gecko) Chrome/19.0.1061.0 Safari/536.3" 81.161.239.13 - - [23/Jun/2026:08:48:33 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\x98\xD3\xA0\xF8l\x09\xF0\xF0\x0F\xE4\x8C\x90i\xF3:\x9D\xDBS\xE8\xE4GG\xBCFku\x8F\x86\xAE;\xB3[ #\x13\xC6\x99\x83o\xE2\xC3_\xDCF\x9D\xE4.O" 400 150 "-" "-" 81.161.239.13 - - [23/Jun/2026:08:48:33 +0200] "GET /cgi-bin/param.cgi HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/536.3 (KHTML, like Gecko) Chrome/19.0.1061.0 Safari/536.3" 81.161.239.13 - - [23/Jun/2026:08:48:33 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\x0F\x9E\xE2\x1A\xEEp\xE1\x1B\x15\xE2~\xB5\xACD\x1B\xF5\xA2\xA7\xD4{Q\x97\xCA\xF7\xF0\x1F\xC2\xAFG\xAFV\xCC Mw`i\xC1\xBA\x8E\x08\x14~y!\xE5\x16Kl>\x99\xB7\xEDw\x15w\xBC\xC3\xF9]\xBE\|t\xD0\x85\x00>\x13\x02\x13\x03\x13\x01\xC0,\xC00\x00\x9F\xCC\xA9\xCC\xA8\xCC\xAA\xC0+\xC0/\x00\x9E\xC0$\xC0(\x0 ... show less	Bad Web Bot Web App Attack
🇺🇸 drewf.ink	2026-06-23 00:20:37 (1 day ago)	[00:20] Port scanning. Port(s) scanned: TCP/8081	Port Scan
🇩🇪 pigro	2026-06-22 13:27:39 (2 days ago)	81.161.239.13 - - [22/Jun/2026:15:27:38 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03j\x87c\x ... show more 81.161.239.13 - - [22/Jun/2026:15:27:38 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03j\x87c\xDB\xEF\xA9\xE5Y\xA3\x86\xB5\x9A'2<\x7F\x09\x09V\x97\x9C\xF7!\xAA\x0B>8\xF4\xF8+4\x8F \xD4\x06\xA4\xED\x84\x92\xF4_\xF3\x12p\xF3\xA5)\xFE{\x80Fw\x85\xC0\xC1\xC0t\x89\xA7\x9B\xD7\x13\xB2O.\x00>\x13\x02\x13\x03\x13\x01\xC0,\xC00\x00\x9F\xCC\xA9\xCC\xA8\xCC\xAA\xC0+\xC0/\x00\x9E\xC0$\xC0(\x00k\xC0#\xC0'\x00g\xC0" 400 157 "-" "-" 81.161.239.13 - - [22/Jun/2026:15:27:38 +0200] "GET /cgi-bin/param.cgi HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/536.3 (KHTML, like Gecko) Chrome/19.0.1061.0 Safari/536.3" ... show less	Web App Attack
🇺🇸 drewf.ink	2026-06-21 19:26:34 (3 days ago)	[19:26] Port scanning. Port(s) scanned: TCP/82	Port Scan
🇨🇭 GAS	2026-06-21 09:15:19 (3 days ago)	Direct IP access. 81.161.239.13 - - [21/Jun/2026:11:15:17 +0200] "GET / HTTP/1.0" 400 651 "-" "-" "- ... show more Direct IP access. 81.161.239.13 - - [21/Jun/2026:11:15:17 +0200] "GET / HTTP/1.0" 400 651 "-" "-" "-" "-" 81.161.239.13 - - [21/Jun/2026:11:15:17 +0200] "GET / HTTP/1.1" 402 4840 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/536.3 (KHTML, like Gecko) Chrome/19.0.1061.0 Safari/536.3" "REDACTED" "" ... show less	Port Scan Web App Attack
🇺🇸 drewf.ink	2026-06-21 07:36:07 (3 days ago)	[07:36] Port scanning. Port(s) scanned: TCP/83	Port Scan
🇫🇷 mouafiq	2026-06-21 03:02:13 (3 days ago)	2026-06-21 03:02:10,131 14345 INFO ? werkzeug: 81.161.239.13 - - [21/Jun/2026 03:02:10] "GET /cgi-bi ... show more 2026-06-21 03:02:10,131 14345 INFO ? werkzeug: 81.161.239.13 - - [21/Jun/2026 03:02:10] "GET /cgi-bin/param.cgi HTTP/1.0" 404 - 1 0.002 0.009 2026-06-21 03:02:10,963 14345 INFO ? werkzeug: 81.161.239.13 - - [21/Jun/2026 03:02:10] "GET /favicon.ico HTTP/1.0" 404 - 1 0.002 0.007 2026-06-21 03:02:11,330 14345 INFO ? werkzeug: 81.161.239.13 - - [21/Jun/2026 03:02:11] "GET /image/lgbg.jpg HTTP/1.0" 404 - 1 0.002 0.008 2026-06-21 03:02:12,163 14345 INFO ? werkzeug: 81.161.239.13 - - [21/Jun/2026 03:02:12] "GET /login.rsp HTTP/1.0" 404 - 1 0.002 0.008 2026-06-21 03:02:12,541 14345 INFO ? werkzeug: 81.161.239.13 - - [21/Jun/2026 03:02:12] "GET /nobody/favicon.ico HTTP/1.0" 404 - 1 0.004 0.006 show less	Brute-Force SSH
🇨🇦 Roper123	2026-06-20 17:07:00 (4 days ago)	Web exploits	Hacking Web App Attack
🇱🇹 NotACaptcha	2026-06-20 13:01:49 (4 days ago)	webserver:443 [20/Jun/2026] "GET / HTTP/1.0" 400 528 webserver:443 [20/Jun/2026] "GET /cgi-bin/par ... show more webserver:443 [20/Jun/2026] "GET / HTTP/1.0" 400 528 webserver:443 [20/Jun/2026] "GET /cgi-bin/param.cgi HTTP/1.1" 403 5697 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.7 (KHTML, like Gecko) Chrome/16.0.912.77 Safari/535.7ad-imcjapan-syosyaman-xkgi3lqg03!wgz" webserver:443 [20/Jun/2026] "GET / HTTP/1.1" 403 5697 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.7 (KHTML, like Gecko) Chrome/16.0.912.77 Safari/535.7ad-imcjapan-syosyaman-xkgi3lqg03!wgz" webserver:443 [20/Jun/2026] "GET / HTTP/1.0" 400 528 show less	Web App Attack
🇬🇧 Shadymint	2026-06-20 03:05:34 (4 days ago)	url probing from IP marked as abusive	Web App Attack

Showing 1 to 15 of 360 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.196.40.25

🇹🇼 198.235.24.75

🇺🇸 162.216.149.79

🇫🇷 155.117.233.15

🇧🇷 186.233.118.22

🇩🇪 87.106.197.138

🇮🇳 49.204.235.212

🇮🇩 36.92.41.115

🇸🇬 84.75.155.146

🇯🇵 20.78.0.33

🇺🇸 216.144.229.11

🇸🇪 178.20.28.150

🇸🇬 159.223.85.156

🇵🇭 124.105.206.79

🇨🇳 116.232.161.15

🇧🇩 103.142.184.55

🇳🇱 45.148.10.157

🇺🇸 40.76.117.18

🇮🇪 18.201.237.123

🇺🇸 216.73.160.195