AbuseIPDB » 154.13.221.252
154.13.221.252
This IP was reported 10 times. Confidence of
Abuse
is 0% : ?
ISP
Aventice LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS7979
Domain Name
aventice.com
Country
🇳🇱
Netherlands
City
Amsterdam, North Holland
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 154.13.221.252 :
This IP address has been reported a total of
10
times from
6 distinct
sources.
154.13.221.252 was first reported on
May 13th 2025 , and the most recent report was
11 months ago
Old Reports:
The most recent abuse report for this IP address is from
11 months ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
2025-06-25 23:55:20
(11 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇳🇱
i-turnradio.nl
2025-06-25 18:22:08
(11 months ago)
2025-06-25 @ 20:22:08 (CET) ~ Blocked based on risk assessment and prior abuse reports
Web App Attack
🇮🇩
Burayot
2025-06-12 05:21:28
(11 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 154.13.221.252 (NL/The Netherlands/ ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 154.13.221.252 (NL/The Netherlands/-): 1 in the last 3600 secs
show less
Web App Attack
🇭🇰
www.winos.me
2025-06-01 17:34:24
(1 year ago)
xmlrpc does not allow access
Web App Attack
🇧🇪
voormedia
2025-06-01 04:56:56
(1 year ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
🇮🇩
Burayot
2025-05-27 09:46:27
(1 year ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 154.13.221.252 (NL/The Netherlands/ ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 154.13.221.252 (NL/The Netherlands/-): 1 in the last 3600 secs
show less
Web App Attack
2025-05-26 02:40:57
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇪🇸
robotstxt
2025-05-25 03:17:18
(1 year ago)
154.13.221.252 - - [25/May/2025:03:16:39 +0000] "POST /xmlrpc.php HTTP/2.0" 400 148737 "-" rt="0.983 ...
show more
154.13.221.252 - - [25/May/2025:03:16:39 +0000] "POST /xmlrpc.php HTTP/2.0" 400 148737 "-" rt="0.983" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_1) AppleWebKit/531.36 (KHTML, like Gecko111) Chrome/95.6 Safari/532.36" "-" h="economipedia.com" sn="economipedia.com" ru="/xmlrpc.php" u="/index.php" ucs="-" ua="unix:/var/run/php/economipedia74.sock" us="404" uct="0.000" urt="0.929"
154.13.221.252 - - [25/May/2025:03:16:42 +0000] "POST /xmlrpc.php HTTP/2.0" 400 148737 "-" rt="2.508" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_8) AppleWebKit/536.36 (KHTML, like Gecko111) Chrome/91.2 Safari/539.34" "-" h="economipedia.com" sn="economipedia.com" ru="/xmlrpc.php" u="/index.php" ucs="-" ua="unix:/var/run/php/economipedia74.sock" us="404" uct="0.000" urt="2.459"
154.13.221.252 - - [25/May/2025:03:16:46 +0000] "POST /xmlrpc.php HTTP/2.0" 400 148737 "-" rt="3.867" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_5) AppleWebKit/534.32 (KHTML, like Gecko111) Chrome/95.9 Safari/531.35" "-" h="economi
...
show less
Web Spam
Web App Attack
🇧🇪
voormedia
2025-05-15 04:27:50
(1 year ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
🇧🇪
voormedia
2025-05-13 17:39:01
(1 year ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: