JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.213.163.136

154.213.163.136 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 0%: ?

ISP	Cloud Innovation Ltd
Usage Type	Unknown
ASN	Unknown
Domain Name	cloudinnovation.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.213.163.136

Whois 154.213.163.136

IP Abuse Reports for 154.213.163.136:

This IP address has been reported a total of 47 times from 15 distinct sources. 154.213.163.136 was first reported on April 8th 2025, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-02-16 03:05:19 (3 months ago)	Scanning/Probing (16)	Brute-Force Web App Attack
🇺🇸 myagent.site	2026-02-15 11:55:45 (4 months ago)	Blocking for trying to access an exploit file: /v2/.git/config	Hacking
🇨🇭 Origon	2026-02-15 06:17:22 (4 months ago)	http-sensitive-files - IP: 154.213.163.136 - time="2026-02-15T07:17:22+01:00" level=info msg="(555f ... show more http-sensitive-files - IP: 154.213.163.136 - time="2026-02-15T07:17:22+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 154.213.163.136 (DE/200373) : 4h ban on Ip 154.213.163.136" module=db show less	Web App Attack
🇩🇪 filstal.org	2026-02-15 06:14:43 (4 months ago)	CrowdSec-Report: crowdsecurity/http-sensitive-files	Hacking Web App Attack
🇺🇸 mnsf	2026-02-15 02:05:27 (4 months ago)	Scanning/Probing (23)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 01:56:14 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 154.213.163.136 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 154.213.163.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 20:56:07.232744 2026] [security2:error] [pid 2827:tid 2827] [client 154.213.163.136:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pixacast.com"] [uri "/.env.production"] [unique_id "aZEntx_acSBOq-TKl6KC1wAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-02-15 01:08:37 (4 months ago)	[redacted] 154.213.163.136 - - [15/Feb/2026:02:08:34 +0100] "GET /.env HTTP/1.1" 302 5293 0/33128 "- ... show more [redacted] 154.213.163.136 - - [15/Feb/2026:02:08:34 +0100] "GET /.env HTTP/1.1" 302 5293 0/33128 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" [redacted] 154.213.163.136 - - [15/Feb/2026:02:08:34 +0100] "GET /.[redacted] HTTP/1.1" 302 1564 0/34285 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" show less	Bad Web Bot Web App Attack
🇷🇺 loveprod	2026-02-15 00:47:36 (4 months ago)	154.213.163.136 - - [15/Feb/2026:03:47:35 +0300] "GET /admin/.git/config HTTP/1.1" 404 55222 "-" "Mo ... show more 154.213.163.136 - - [15/Feb/2026:03:47:35 +0300] "GET /admin/.git/config HTTP/1.1" 404 55222 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 154.213.163.136 - - [15/Feb/2026:03:47:35 +0300] "GET /v2/.git/config HTTP/1.1" 404 51561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Bad Web Bot
🇬🇧 relianoid.com	2026-02-04 18:21:56 (4 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
Anonymous	2025-10-15 08:29:13 (8 months ago)	wordpress-trap	Web App Attack
Anonymous	2025-09-26 00:00:48 (8 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.09.26 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.09.26 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 fbarela	2025-09-25 02:01:28 (8 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
Anonymous	2025-09-17 07:06:23 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.17 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.17 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-13 07:37:38 (9 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.13 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.13 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-12 08:03:46 (9 months ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.09.12 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.09.12 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 185.178.208.144

🇺🇸 104.234.32.219

🇨🇳 222.132.60.241

🇧🇷 205.210.31.238

🇺🇸 191.101.33.110

🇨🇳 182.204.176.177

🇳🇱 176.65.139.105

🇳🇬 165.154.11.210

🇭🇰 107.150.119.80

🇲🇲 103.59.163.134

🇪🇬 102.189.87.227

🇫🇮 95.216.252.68

🇳🇱 45.156.87.117

🇨🇳 39.107.55.186

🇺🇸 34.186.237.178

🇬🇧 2a00:1450:4009:c01::12a

🇩🇪 178.254.12.98

🇫🇮 147.185.133.72

🇻🇳 125.212.244.35

🇳🇱 45.153.34.112