JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.16.95.41

154.16.95.41 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 11%: ?

11%

ISP	NetStack Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	hivelocity.net
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.16.95.41

Whois 154.16.95.41

IP Abuse Reports for 154.16.95.41:

This IP address has been reported a total of 15 times from 9 distinct sources. 154.16.95.41 was first reported on July 21st 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 wteiken	2026-06-27 08:40:34 (2 days ago)	rocinante.teiken.net:443 154.16.95.41:48369 - - [27/Jun/2026:04:40:25 -0400] "GET /public/.env HTTP/ ... show more rocinante.teiken.net:443 154.16.95.41:48369 - - [27/Jun/2026:04:40:25 -0400] "GET /public/.env HTTP/1.1" 404 554 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" rocinante.teiken.net:443 154.16.95.41:48369 - - [27/Jun/2026:04:40:26 -0400] "GET /laravel/.env HTTP/1.1" 404 554 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" rocinante.teiken.net:443 154.16.95.41:48369 - - [27/Jun/2026:04:40:28 -0400] "GET /infophp.php HTTP/1.1" 404 554 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" rocinante.teiken.net:443 154.16.95.41:48369 - - [27/Jun/2026:04:40:30 -0400] "GET /php_info.php HTTP/1.1" 404 554 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" rocinante.teiken.net:443 154.16.95.41:48369 - - [2 ... show less	Web App Attack
🇬🇧 consul.to	2026-05-30 22:40:43 (4 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-05-02 18:28:10 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-04-11 06:17:49 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇦 URAN Publishing Service	2024-04-02 22:39:56 (2 years ago)	154.16.95.41 - - [03/Apr/2024:01:37:53 +0300] "GET /wp-login.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 ... show more 154.16.95.41 - - [03/Apr/2024:01:37:53 +0300] "GET /wp-login.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 154.16.95.41 - - [03/Apr/2024:01:39:56 +0300] "GET /wp-admin/2.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2024-03-04 20:32:46 (2 years ago)	154.16.95.41 - - [04/Mar/2024:22:28:17 +0200] "GET /wp-admin/css/colors/blue/blue.php?wall=ZWNobyAnQ ... show more 154.16.95.41 - - [04/Mar/2024:22:28:17 +0200] "GET /wp-admin/css/colors/blue/blue.php?wall=ZWNobyAnQmxhY2sgQm90Jztmd3JpdGUoZm9wZW4oJ2Jsa3R6amloLnBocCcsJ3crJyksJzw/cGhwIGVjaG8gIkJsYWNrIEJvdCI7Pz4nKTs= HTTP/1.1" 404 279 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 154.16.95.41 - - [04/Mar/2024:22:32:44 +0200] "GET /wp-content/plugins/yyobang/mar.php HTTP/1.1" 404 5029 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" ... show less	Web App Attack
Anonymous	2024-02-27 15:33:56 (2 years ago)	Malicious activity detected	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2024-02-21 07:53:27 (2 years ago)	154.16.95.41 - - [21/Feb/2024:09:53:25 +0200] "GET /wp-content/index.php HTTP/1.1" 404 277 "-" "Go-h ... show more 154.16.95.41 - - [21/Feb/2024:09:53:25 +0200] "GET /wp-content/index.php HTTP/1.1" 404 277 "-" "Go-http-client/1.1" 154.16.95.41 - - [21/Feb/2024:09:53:26 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 277 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇦🇺 MAGIC	2023-11-20 09:02:58 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2023-09-26 14:44:11 (2 years ago)		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack
Anonymous	2023-09-22 17:10:36 (2 years ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2023-08-30 12:45:03 (2 years ago)		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack
🇺🇸 MortimerCat	2023-06-15 07:34:10 (3 years ago)	Unauthorised use of XMLRPC	Web App Attack
🇱🇺 Tha_14	2023-01-08 16:24:37 (3 years ago)	Incoming UDP Connection from 154.16.95.41 to port: 20473. Honeypot was triggered at 1/8/2023 18:23:5 ... show more Incoming UDP Connection from 154.16.95.41 to port: 20473. Honeypot was triggered at 1/8/2023 18:23:52. show less	Port Scan
🇵🇱 ChillScanner	2022-07-21 02:39:14 (3 years ago)	1 probe(s) @ TCP(1)	Port Scan

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 173.255.221.6

🇺🇸 44.12.76.115

🇭🇰 20.255.61.0

🇷🇴 2.57.122.150

🇮🇩 182.253.156.184

🇫🇷 176.191.43.176

🇰🇷 118.39.50.107

🇭🇰 118.26.38.251

🇺🇿 84.54.84.21

🇵🇱 83.97.117.136

🇮🇳 59.97.20.105

🇺🇸 52.53.163.112

🇨🇳 49.233.180.26

🇳🇱 45.153.34.161

🇺🇸 44.214.43.32

🇺🇸 44.211.175.66

🇻🇳 27.79.44.110

🇺🇸 20.65.193.190

🇺🇸 44.234.112.138

🇷🇺 31.173.0.46