JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.21.68.192

154.21.68.192 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 25%: ?

25%

ISP	Cogent Communications, LLC
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	cogentco.com
Country	🇫🇷 France
City	Velizy-Villacoublay, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.21.68.192

Whois 154.21.68.192

IP Abuse Reports for 154.21.68.192:

This IP address has been reported a total of 21 times from 4 distinct sources. 154.21.68.192 was first reported on May 12th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Lino Project	2026-06-27 11:22:38 (1 day ago)	154.21.68.192 - - [27/Jun/2026:13:22:37 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3972 "https://www.prim ... show more 154.21.68.192 - - [27/Jun/2026:13:22:37 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3972 "https://www.primobio.it/mio-account/?action=register" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-06-25 14:43:41 (3 days ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 17-43.154.21.68.192.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 17-43.154.21.68.192.web-spammers.v2.rbl.imunify.com. succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-06-25 10:05:43 (3 days ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 13-05.154.21.68.192.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 13-05.154.21.68.192.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-06-22 23:10:23 (6 days ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-10.154.21.68.192.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-10.154.21.68.192.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇩🇪 Lino Project	2026-06-22 14:04:43 (6 days ago)	154.21.68.192 - - [22/Jun/2026:16:04:42 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6539 "https ... show more 154.21.68.192 - - [22/Jun/2026:16:04:42 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6539 "https://www.primobio.it/mio-account/?action=register" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Lino Project	2026-06-20 19:23:37 (1 week ago)	154.21.68.192 - - [20/Jun/2026:21:23:36 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3972 "https://www.prim ... show more 154.21.68.192 - - [20/Jun/2026:21:23:36 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3972 "https://www.primobio.it/mio-account/?action=register" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-06-20 15:37:00 (1 week ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-36.154.21.68.192.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-36.154.21.68.192.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-06-16 02:10:48 (1 week ago)	[Tue Jun 16 12:10:48.284546 2026] [security2:error] [pid 197517] [client 154.21.68.192:1234] [client ... show more [Tue Jun 16 12:10:48.284546 2026] [security2:error] [pid 197517] [client 154.21.68.192:1234] [client 154.21.68.192] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/xmlrpc.php"] [unique_id "ajCwqK6yMScnd0ecKBui4wAAAAo"], referer: https://paulshipley.com.au/xmlrpc.php?rsd ... show less	Web App Attack
🇱🇻 garmtech.com	2026-06-14 07:19:29 (2 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-19.154.21.68.192.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-19.154.21.68.192.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-06-10 12:34:01 (2 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 15-34.154.21.68.192.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 15-34.154.21.68.192.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-06-06 10:30:09 (3 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 13-30.154.21.68.192.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 13-30.154.21.68.192.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-06-06 03:41:36 (3 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-41.154.21.68.192.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-41.154.21.68.192.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-06-06 01:00:04 (3 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 04-00.154.21.68.192.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 04-00.154.21.68.192.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-06-04 16:48:43 (3 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-48.154.21.68.192.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-48.154.21.68.192.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-06-01 05:50:42 (4 weeks ago)	[Mon Jun 01 15:50:41.555443 2026] [security2:error] [pid 77117] [client 154.21.68.192:46340] [client ... show more [Mon Jun 01 15:50:41.555443 2026] [security2:error] [pid 77117] [client 154.21.68.192:46340] [client 154.21.68.192] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/xmlrpc.php"] [unique_id "ah0dsTUrHj180lxMd5PnJAAAAAM"], referer: https://paulshipley.com.au/xmlrpc.php?rsd ... show less	Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 185.100.87.174

🇩🇪 167.94.145.27

🇸🇬 118.26.111.107

🇺🇸 66.132.172.209

🇺🇸 64.62.156.227

🇺🇸 64.62.156.85

🇨🇳 14.154.182.182

🇳🇱 205.147.16.191

🇩🇪 194.88.98.92

🇺🇸 147.182.176.34

🇭🇺 79.122.58.88

🇱🇹 77.90.185.16

🇲🇾 47.250.146.238

🇹🇷 46.30.177.36

🇺🇸 44.215.138.122

🇨🇳 14.109.34.25

🇺🇸 152.32.235.36

🇭🇰 143.92.38.224

🇫🇷 95.111.227.117

🇳🇱 45.148.10.239