JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.213.162.189

154.213.162.189 was found in our database!

This IP was reported 64 times. Confidence of Abuse is 0%: ?

ISP	Wave Broadband
Usage Type	Fixed Line ISP
ASN	AS11404
Domain Name	astound.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.213.162.189

Whois 154.213.162.189

IP Abuse Reports for 154.213.162.189:

This IP address has been reported a total of 64 times from 14 distinct sources. 154.213.162.189 was first reported on April 8th 2025, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2025-12-23 11:31:18 (10 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2025-11-25 06:56:59 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 154.213.162.189 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 154.213.162.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:56:56.590948 2025] [security2:error] [pid 2698:tid 2698] [client 154.213.162.189:46725] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.thewanderinghermit.com"] [uri "/.env"] [unique_id "aSVTOGDHWzNYUuJ9tknUDwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:22:37 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 154.213.162.189 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 154.213.162.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:22:24.534219 2025] [security2:error] [pid 13818:tid 13818] [client 154.213.162.189:34441] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.seekingthemind.com"] [uri "/.svn/wc.db"] [unique_id "aSVLIMnImIlMh1ffv4lqkgAAAC4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:24:14 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 154.213.162.189 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 154.213.162.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:24:07.993474 2025] [security2:error] [pid 20295:tid 20295] [client 154.213.162.189:56497] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.redvers.net"] [uri "/.env"] [unique_id "aSUvZ3Qk7qId6XErfjuXugAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:49:04 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 154.213.162.189 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 154.213.162.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:49:00.004802 2025] [security2:error] [pid 31425:tid 31425] [client 154.213.162.189:29927] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.crucialpins.com"] [uri "/.git/HEAD"] [unique_id "aSUnLAg5KeD1et7SZHkUXwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:05:37 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 154.213.162.189 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 154.213.162.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:05:31.863249 2025] [security2:error] [pid 28339:tid 28339] [client 154.213.162.189:10491] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.parkhan.com"] [uri "/.git/HEAD"] [unique_id "aSUc-yCR35et9LO3wnjfkQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:38:59 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 154.213.162.189 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 154.213.162.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:38:53.636194 2025] [security2:error] [pid 12294:tid 12294] [client 154.213.162.189:48871] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.78cardsofthetarot-tarotmancy-tarot-cards-and-tarot-readings.com"] [uri "/.svn/wc.db"] [unique_id "aSUWvUHPV6ikcaGTIYdj6wAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-25 02:17:51 (10 months ago)	Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing ... show more Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:01:01 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 154.213.162.189 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 154.213.162.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:00:58.037528 2025] [security2:error] [pid 9943:tid 9943] [client 154.213.162.189:52791] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.thegolfhole.com"] [uri "/.svn/wc.db"] [unique_id "aSUN2j6ksv3lrmIf-xDsgAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-02 15:58:03 (11 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 06:57:21	Port Scan Brute-Force Exploited Host Web App Attack
Anonymous	2025-09-30 12:08:24 (1 year ago)	unauthorized access attempts	Brute-Force
🇺🇸 fbarela	2025-09-29 17:00:29 (1 year ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
Anonymous	2025-09-24 19:54:20 (1 year ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇧🇷 hostseries	2025-09-24 19:24:12 (1 year ago)	Distributed Brute-Force attack	Brute-Force
Anonymous	2025-09-23 17:34:30 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.09.23 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.09.23 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 64 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.35.215.61

🇲🇺 197.227.8.186

🇲🇽 177.226.66.151

🇧🇷 177.104.212.108

🇺🇸 174.65.121.174

🇹🇿 102.209.152.10

🇳🇬 102.91.104.91

🇳🇱 95.85.226.199

🇮🇳 66.116.199.234

🇺🇸 47.251.34.107

🇩🇪 38.60.250.200

🇺🇸 35.81.39.40

🇧🇪 34.156.121.46

🇹🇼 218.161.114.216

🇵🇱 209.59.230.95

🇧🇪 198.235.24.212

🇷🇺 178.178.222.50

🇩🇪 172.70.240.47

🇧🇷 168.90.225.7

🇨🇳 106.75.224.92