JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.127.53.19

154.127.53.19 was found in our database!

This IP was reported 68 times. Confidence of Abuse is 0%: ?

ISP	Digital Energy Technologies Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396073
Domain Name	hivelocity.net
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.127.53.19

Whois 154.127.53.19

IP Abuse Reports for 154.127.53.19:

This IP address has been reported a total of 68 times from 33 distinct sources. 154.127.53.19 was first reported on February 20th 2023, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 initsol	2025-03-03 12:31:14 (1 year ago)	2025-03-03T13:31:08.373321hermes2 postfix/smtpd[1197759]: NOQUEUE: reject: RCPT from unknown[154.127 ... show more 2025-03-03T13:31:08.373321hermes2 postfix/smtpd[1197759]: NOQUEUE: reject: RCPT from unknown[154.127.53.19]: 554 5.7.1 Service unavailable; Client host [154.127.53.19] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/154.127.53.19 / Listed by PBL, see https://check.spamhaus.org/query/ip/154.127.53.19; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<dhl.com> 2025-03-03T13:31:08.426616hermes2 postfix/smtpd[1197760]: NOQUEUE: reject: RCPT from unknown[154.127.53.19]: 554 5.7.1 Service unavailable; Client host [154.127.53.19] blocked using zen.spamhaus.org; Listed by PBL, see https://check.spamhaus.org/query/ip/154.127.53.19 / Listed by CSS, see https://check.spamhaus.org/query/ip/154.127.53.19; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<dhl.com> 2025-03-03T13:31:09.256513hermes2 postfix/smtpd[1196420]: NOQUEUE: reject: RCPT from unknown[154.127.53.19]: 554 5.7.1 Service unavailabl ... show less	Brute-Force
🇩🇪 initsol	2025-02-27 13:20:20 (1 year ago)	2025-02-27T14:20:19.679019hermes2 postfix/smtpd[4185925]: NOQUEUE: reject: RCPT from unknown[154.127 ... show more 2025-02-27T14:20:19.679019hermes2 postfix/smtpd[4185925]: NOQUEUE: reject: RCPT from unknown[154.127.53.19]: 554 5.7.1 Service unavailable; Client host [154.127.53.19] blocked using zen.spamhaus.org; Listed by PBL, see https://check.spamhaus.org/query/ip/154.127.53.19 / Listed by CSS, see https://check.spamhaus.org/query/ip/154.127.53.19; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<dhl.com> 2025-02-27T14:20:19.679021hermes2 postfix/smtpd[4185927]: NOQUEUE: reject: RCPT from unknown[154.127.53.19]: 554 5.7.1 Service unavailable; Client host [154.127.53.19] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/154.127.53.19 / Listed by PBL, see https://check.spamhaus.org/query/ip/154.127.53.19; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<dhl.com> 2025-02-27T14:20:19.679040hermes2 postfix/smtpd[4185924]: NOQUEUE: reject: RCPT from unknown[154.127.53.19]: 554 5.7.1 Serv ... show less	Brute-Force
🇩🇪 H. Hampel	2025-02-27 08:02:56 (1 year ago)	Phishing: DHL	Phishing Email Spam
🇬🇧 Joe-Mark	2025-02-27 06:18:08 (1 year ago)	Found PAllebone Blocklist . proto=tcp . spt=62832 . dpt=25 . NFTABLES . (CXI)	Email Spam
🇺🇸 DJGrillmaster	2024-11-12 16:29:00 (1 year ago)	Sending out Adobe-based spam and phishing	Email Spam
🇩🇪 ps-center	2024-04-04 17:42:39 (2 years ago)	MYH: Web Attack GET /wp-content/	Web Spam Hacking Bad Web Bot Web App Attack
🇬🇧 findlab	2024-04-04 17:40:02 (2 years ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
Anonymous	2024-04-04 14:49:33 (2 years ago)	Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1, POST / HTTP/1.1	Hacking Web App Attack
🇪🇪 Unwasted	2024-04-04 13:33:51 (2 years ago)	File scanning	Hacking Web App Attack
🇦🇺 weblite	2024-04-04 13:07:32 (2 years ago)	WP_EXPLOIT_PROBE WP_MALWARE_PROBE	Hacking Web App Attack
🇺🇸 TPI-Abuse	2024-04-04 10:49:59 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 154.127.53.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 154.127.53.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 04 06:49:53.462776 2024] [security2:error] [pid 31752] [client 154.127.53.19:61380] [client 154.127.53.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yakarinc.com"] [uri "/.env"] [unique_id "Zg6F0RukV_NGIUcsFtC8vgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-04-04 09:18:33 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 154.127.53.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 154.127.53.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 04 05:18:29.343519 2024] [security2:error] [pid 9201] [client 154.127.53.19:50851] [client 154.127.53.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "turn-keyit.com"] [uri "/.env"] [unique_id "Zg5wZfhpZN2e6iK7giwooQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-04-04 07:52:41 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 154.127.53.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 154.127.53.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 04 03:52:33.458382 2024] [security2:error] [pid 6044] [client 154.127.53.19:54463] [client 154.127.53.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aden.us"] [uri "/.env"] [unique_id "Zg5cQQX78RsBuXd016x7lgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-04-04 07:11:07 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 154.127.53.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 154.127.53.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 04 03:11:03.915682 2024] [security2:error] [pid 404] [client 154.127.53.19:49321] [client 154.127.53.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "armstrongpartnersllc.com"] [uri "/.env"] [unique_id "Zg5Shz4c3wU01LMUdtUe-AAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-04-04 06:47:22 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 154.127.53.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 154.127.53.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 04 02:47:16.768236 2024] [security2:error] [pid 6237] [client 154.127.53.19:55620] [client 154.127.53.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "commonthreadsvt.org"] [uri "/.env"] [unique_id "Zg5M9MHVUXQzFUT-hLQmzwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 68 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.152

🇧🇪 198.235.24.241

🇳🇱 160.119.76.41

🇻🇳 103.104.122.245

🇰🇪 102.68.78.179

🇺🇸 66.132.172.186

🇧🇷 45.205.1.242

🇳🇱 185.93.89.79

🇮🇩 182.253.89.118

🇳🇱 176.65.148.84

🇵🇭 161.49.217.5

🇳🇱 160.119.71.136

🇮🇳 103.228.147.194

🇮🇩 103.190.214.241

🇺🇸 91.230.168.153

🇩🇪 69.5.169.56

🇳🇱 45.148.10.147

🇻🇳 45.119.81.245

🇷🇺 45.74.3.37

🇺🇸 44.188.178.209