JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.12.230.95

154.12.230.95 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 45%: ?

45%

ISP	Contabo Inc
Usage Type	Data Center/Web Hosting/Transit
ASN	AS40021
Hostname(s)	vmi1750425.contaboserver.net
Domain Name	contabo.com
Country	🇺🇸 United States of America
City	St. Louis, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.12.230.95

Whois 154.12.230.95

IP Abuse Reports for 154.12.230.95:

This IP address has been reported a total of 12 times from 9 distinct sources. 154.12.230.95 was first reported on August 22nd 2026, and the most recent report was 56 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Savvii	2026-09-17 17:50:51 (56 minutes ago)	20 attempts against mh-misbehave-ban on ozone	Brute-Force Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-09-17 04:10:13 (14 hours ago)		Web App Attack
🇳🇱 Savvii	2026-09-16 22:52:01 (19 hours ago)	20 attempts against mh-misbehave-ban on mensa	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-09-16 12:40:09 (1 day ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇳🇱 Savvii	2026-09-11 06:54:49 (6 days ago)	20 attempts against mh-misbehave-ban on eris	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-11 02:32:59 (6 days ago)	(config_exploit_scan) Configuratie Scanner / Nep GPTBot 154.12.230.95 (US/United States/vmi1750425.c ... show more (config_exploit_scan) Configuratie Scanner / Nep GPTBot 154.12.230.95 (US/United States/vmi1750425.contaboserver.net): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 154.12.230.95 - - [11/Sep/2026:04:32:57 +0200] "GET /collibra.properties HTTP/1.1" 406 4816 "-" "finger_web-nuclei/1.0" 154.12.230.95 - - [11/Sep/2026:04:32:57 +0200] "GET /.drone.yml HTTP/1.1" 406 4814 "-" "finger_web-nuclei/1.0" 154.12.230.95 - - [11/Sep/2026:04:32:57 +0200] "GET /config.properties HTTP/1.1" 406 4815 "-" "finger_web-nuclei/1.0" show less	Port Scan
🇩🇪 updown.io	2026-08-23 06:25:36 (3 weeks ago)	{"level":"info","ts":1787466335.4662993,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1787466335.4662993,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"154.12.230.95","remote_port":"44388","client_ip":"154.12.230.95","proto":"HTTP/1.1","method":"GET","host":"status.vecchioconvento.it","uri":"/.git/description","headers":{"Accept-Encoding":["gzip"],"User-Agent":["Mozilla/5.0 (compatible; finger_web-leak/1.0)"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"status.vecchioconvento.it","ech":false}},"bytes_read":0,"user_id":"","duration":0.00010503,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}} {"level":"info","ts":1787466335.467514,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"154.12.230.95","remote_port":"44372","client_ip":"154.12.230.95","proto":"HTTP/1.1","method":"GET","host":"status.vecchioconvento.it","uri":"/.git/config","headers":{"User-Agent":["Mozilla/5.0 (compatible; fi ... show less	DDoS Attack Web App Attack
🇧🇪 cmbplf	2026-08-22 17:36:32 (3 weeks ago)	218 requests with url.path .git/	Brute-Force Bad Web Bot
🇪🇸 pipeline.es	2026-08-22 15:35:33 (3 weeks ago)	Web scanning / probing for vulnerable paths \| URL: /ofertravel.es.sql.gz \| Evidence: ofertravel.es 1 ... show more Web scanning / probing for vulnerable paths \| URL: /ofertravel.es.sql.gz \| Evidence: ofertravel.es 154.12.230.95 - - [22/Aug/2026:17:35:13 +0200] \"GET /ofertravel.es.sql.gz HTTP/1.1\" 404 19549 \"-\" \"Mozilla/5.0 (compatible; finger_web-leak/1.0)\" GEOIP_COUNTRY_CODE=US \| ASN: CONTABO-40021 \| Country: US show less	Port Scan Web App Attack
🇮🇹 VHosting	2026-08-22 10:15:06 (3 weeks ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇬🇧 masterguru	2026-08-22 01:38:29 (3 weeks ago)	. Matched phrase "wp-config.php" at REQUEST_URI. (210492-185)	Web App Attack
🇩🇪 DocNetzwerk	2026-08-22 00:44:41 (3 weeks ago)	(mod_security) mod_security triggered on hostname [redacted] 154.12.230.95 (US/United States/-)	SQL Injection

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇧 212.40.140.201

🇵🇾 181.94.225.235

🇫🇷 91.196.152.188

🇺🇸 66.132.172.119

🇺🇸 66.132.172.114

🇺🇿 213.230.127.104

🇩🇪 206.81.20.67

🇭🇰 199.45.155.18

🇨🇴 190.99.216.7

🇳🇱 176.65.148.29

🇬🇧 139.59.189.39

🇺🇸 51.81.119.252

🇺🇸 205.210.31.107

🇺🇸 205.210.31.82

🇨🇳 111.18.230.42

🇺🇸 65.49.20.89

🇳🇱 45.153.34.87

🇳🇱 34.90.238.223

🇸🇬 172.70.142.213

🇺🇸 164.90.157.22