154.12.231.56
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Contabo Inc
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS40021
- Hostname(s)
- vmi2894484.contaboserver.net
- Domain Name
- contabo.com
- Country
- 🇺🇸 United States of America
- City
- St. Louis, Missouri
No reports in the last 60 days
154.12.231.56 has been reported 37 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
37 from
32 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇸🇬 azminawwar |
154.12.231.56 Probing for vulnerable code from 2025-11-12 19:51:40 WIB, evidence: tienabled|0|0|0|azmi.my.id/postnews.php
|
Web App Attack Hacking | |
| 🇺🇸 octageeks.com |
Wordpress malicious attack:[octa404]
|
Web App Attack | |
| Anonymous |
wordpress-trap
|
Web App Attack | |
| 🇮🇩 BPS-StatisticsIndonesia |
WP Login Scan Activities
|
Web App Attack | |
| 🇬🇧 findlab |
Backdrop CMS module - malicious activity detected
|
Bad Web Bot Web App Attack | |
| 🇦🇺 2000cn.com.au |
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
|
Bad Web Bot Web App Attack | |
| Anonymous |
Automated report (2025-11-12T12:47:50+00:00). User agent cited by various attack tools, rootkits, backdoors, webshells, and malware detected.
|
Open Proxy Hacking Bad Web Bot Exploited Host Web App Attack | |
| 🇬🇧 CrystalMaker |
PHP vulnerability scan - GET /postnews.php; GET /postnews.php
|
Web App Attack | |
| 🇷🇴 INTEQ |
Web attack from 154.12.231.56
|
Web App Attack | |
| 🇭🇺 bcsaba |
BadBot
154.12.231.56 - - [12/Nov/2025:09:10:22 +0100] "GET /postnews.php HTTP/1.1" 404 548 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
|
Web App Attack | |
| Anonymous |
IP banned by Fail2Ban in jail nginx-abusive-ips
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇺🇸 Epimetheus |
|
Web App Attack | |
| 🇩🇪 jasperedv.de |
Apache Login - Brutforcing
|
Brute-Force Web App Attack | |
| 🇫🇷 rellik |
Mass Scanning Critical Files
|
Hacking Brute-Force Web App Attack | |
| 🇨🇭 backslash |
|
Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown