AbuseIPDB » 154.13.197.68
154.13.197.68
This IP was reported 7 times. Confidence of
Abuse
is 16% : ?
ISP
Datacamp Limited
Usage Type
Data Center/Web Hosting/Transit
ASN
AS212238
Domain Name
datacamp.co.uk
Country
🇳🇱
Netherlands
City
Amsterdam, North Holland
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 154.13.197.68 :
This IP address has been reported a total of
7
times from
2 distinct
sources.
154.13.197.68 was first reported on
July 16th 2026 , and the most recent report was
5 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇨🇭
4server
2026-07-19 09:03:14
(5 hours ago)
[SunJul1911:03:11.3340432026][security2:error][pid415217:tid415940][client154.13.197.68:0]ModSecurit ...
show more
[SunJul1911:03:11.3340432026][security2:error][pid415217:tid415940][client154.13.197.68:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1189\"][id\"350593\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessstoredvscodepasswords\"][severity\"CRITICAL\"][hostname\"fondazionemontgrand.ch\"][uri\"/.vscode/sftp.json\"][unique_id\"alySz33zq_neFYopp9fEYwAAAUI\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-18 18:22:02
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 154.13.197.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 154.13.197.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 14:21:55.105905 2026] [security2:error] [pid 28254:tid 28254] [client 154.13.197.68:35184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flugstad.net"] [uri "/sftp-config.json"] [unique_id "alvEQ3xRG7q6J96-UcfEewAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-18 15:51:18
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 154.13.197.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 154.13.197.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 11:51:15.160541 2026] [security2:error] [pid 1472833:tid 1472833] [client 154.13.197.68:21442] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flowershopverdementa.com"] [uri "/sftp-config.json"] [unique_id "alug83KXsFoGRnZTqTEmnwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 16:49:38
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 154.13.197.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 154.13.197.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 12:49:33.956344 2026] [security2:error] [pid 1071049:tid 1071049] [client 154.13.197.68:16802] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fivecentmiracle.com"] [uri "/sftp-config.json"] [unique_id "alpdHSuFh3o_aQsf25ZYiwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 09:06:21
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 154.13.197.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 154.13.197.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 05:06:14.772720 2026] [security2:error] [pid 4378:tid 4378] [client 154.13.197.68:12340] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "firstlegend.info"] [uri "/sftp-config.json"] [unique_id "alnwhlBbc6glKuakAKHdxwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 21:12:58
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 154.13.197.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 154.13.197.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 17:12:51.394994 2026] [security2:error] [pid 17355:tid 17392] [client 154.13.197.68:5082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "financialcertified.com"] [uri "/sftp-config.json"] [unique_id "allJUzq93yQFWpW2_sk-DQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 20:05:52
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 154.13.197.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 154.13.197.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 16:05:47.122479 2026] [security2:error] [pid 29540:tid 29540] [client 154.13.197.68:13514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ficklepassionproductions.com"] [uri "/coming-soon//sftp-config.json"] [unique_id "alk5m07jEqPtxby5Uy7_SAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: