JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.213.161.112

154.213.161.112 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 0%: ?

ISP	Cloud Innovation Ltd
Usage Type	Unknown
ASN	Unknown
Domain Name	cloudinnovation.org
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.213.161.112

Whois 154.213.161.112

IP Abuse Reports for 154.213.161.112:

This IP address has been reported a total of 47 times from 13 distinct sources. 154.213.161.112 was first reported on April 8th 2025, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 stinpriza	2025-12-18 03:31:37 (5 months ago)	Web App Attack	Web App Attack
Anonymous	2025-12-14 09:20:33 (5 months ago)	botnet	DDoS Attack
🇺🇸 myagent.site	2025-12-09 08:07:32 (5 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇺🇸 TPI-Abuse	2025-12-07 14:33:03 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 154.213.161.112 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 154.213.161.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 09:32:55.822481 2025] [security2:error] [pid 6789:tid 6789] [client 154.213.161.112:14509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "petiteplaisanceconservationfund.org"] [uri "/.svn/wc.db"] [unique_id "aTWQF5ZNRoUzJcLyyFm-3wAAACY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-06 23:23:32 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 154.213.161.112 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 154.213.161.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 18:23:26.990315 2025] [security2:error] [pid 15672:tid 15672] [client 154.213.161.112:38607] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "queenspridegrapes.nyc"] [uri "/.env"] [unique_id "aTS67rsbcNkstqYrGaha5wAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 07:23:15 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 154.213.161.112 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 154.213.161.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 02:23:08.124501 2025] [security2:error] [pid 19366:tid 19366] [client 154.213.161.112:13121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "casino-badenbaden.com"] [uri "/.svn/wc.db"] [unique_id "aTKIXJlvJPFDAUm0Due5nwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 04:23:56 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 154.213.161.112 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 154.213.161.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 23:23:50.594251 2025] [security2:error] [pid 18343:tid 18343] [client 154.213.161.112:49395] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kim-porter.com"] [uri "/.git/HEAD"] [unique_id "aTJeVpspzxXkBH3IKY0WLAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2025-10-05 05:33:48 (7 months ago)	3.758 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2025-10-04 12:49:36 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 154.213.161.112 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 154.213.161.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 04 08:49:29.539421 2025] [security2:error] [pid 11436:tid 11436] [client 154.213.161.112:10447] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|faeriespringsfarm.com:80\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "faeriespringsfarm.com"] [uri "/blog/wp-json/wp/v2/users/"] [unique_id "aOEX2SYyXSYqpD8aIUWgSAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2025-10-01 00:04:54 (8 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-09-21 05:35:33 (8 months ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.09.21 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.09.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-20 08:58:11 (8 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-09-16 07:05:19 (8 months ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.09.16 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.09.16 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-13 18:20:37 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.13 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.13 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-09 02:56:43 (8 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.09.09 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.09.09 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a03:2880:10ff:7::

🇳🇱 45.148.10.5

🇩🇪 209.38.245.167

🇵🇰 203.101.186.149

🇺🇸 162.216.149.225

🇨🇳 121.18.117.198

🇮🇳 103.203.36.234

🇺🇸 100.29.192.16

🇳🇱 45.156.128.149

🇫🇮 45.128.235.246

🇦🇺 34.40.145.110

🇬🇧 31.14.254.77

🇻🇳 14.228.96.175

🇷🇴 2.57.121.112

🇺🇸 2a03:2880:10ff:71::

🇩🇪 213.95.191.47

🇳🇱 176.65.139.84

🇳🇱 45.148.10.204

🇳🇱 45.148.10.157

🇬🇧 35.203.211.132