JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.213.163.195

154.213.163.195 was found in our database!

This IP was reported 56 times. Confidence of Abuse is 0%: ?

ISP	Cloud Innovation Ltd
Usage Type	Unknown
ASN	Unknown
Domain Name	cloudinnovation.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.213.163.195

Whois 154.213.163.195

IP Abuse Reports for 154.213.163.195:

This IP address has been reported a total of 56 times from 20 distinct sources. 154.213.163.195 was first reported on April 7th 2025, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-01-05 20:26:39 (5 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇲🇹 Malta	2025-12-31 13:35:24 (5 months ago)	154.213.163.195 - - [31/Dec/2025:14:35:24 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ... show more 154.213.163.195 - - [31/Dec/2025:14:35:24 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36" show less	VPN IP Hacking Web App Attack
Anonymous	2025-12-27 13:06:59 (6 months ago)	2025-12-27T15:06:59.059528+02:00 zanati wp(www.sahpa.co.za)[193518]: Blocked authentication attempt ... show more 2025-12-27T15:06:59.059528+02:00 zanati wp(www.sahpa.co.za)[193518]: Blocked authentication attempt for [email protected] from 154.213.163.195 ... show less	Web App Attack
🇧🇪 madeit	2025-11-27 12:12:56 (7 months ago)		Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 01:50:00 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 154.213.163.195 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 154.213.163.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:49:53.819213 2025] [security2:error] [pid 22755:tid 22755] [client 154.213.163.195:50089] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.martaaizenman.com"] [uri "/.env"] [unique_id "aSZcwUOF4t_ll65Uxm3NbAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2025-11-25 23:28:53 (7 months ago)	Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing ... show more Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing. show less	Web App Attack
Anonymous	2025-11-25 11:00:59 (7 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-11-24 05:47:12 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 154.213.163.195 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 154.213.163.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:47:04.956751 2025] [security2:error] [pid 12158:tid 12158] [client 154.213.163.195:31383] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.awl-v.com"] [uri "/.env"] [unique_id "aSPxWF71S95X28BEx6izqAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:16:17 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 154.213.163.195 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 154.213.163.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:16:10.832207 2025] [security2:error] [pid 15057:tid 15057] [client 154.213.163.195:40119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.mdivietnam.com"] [uri "/.svn/wc.db"] [unique_id "aSPqGqbFY0Kn1NtjhZEh7QAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-23 18:55:24 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 154.213.163.195 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 154.213.163.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 13:55:14.028283 2025] [security2:error] [pid 32153:tid 32153] [client 154.213.163.195:25473] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.67ronin.com"] [uri "/.svn/wc.db"] [unique_id "aSNYksGCCgZNInVXdHuZQAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2025-11-19 07:20:50 (7 months ago)	WP probing for vulnerabilities	Hacking Exploited Host
🇺🇸 TPI-Abuse	2025-11-16 23:21:15 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 154.213.163.195 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 154.213.163.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 18:21:13.100111 2025] [security2:error] [pid 7633:tid 7633] [client 154.213.163.195:46231] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.bridgital.com\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bridgital.com"] [uri "/s3cmd.ini"] [unique_id "aRpcaU_f3YbZgDkkBrnDoQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Aetherweb Ark	2025-11-15 07:57:02 (7 months ago)	(mod_security) mod_security (id:949110) triggered by 154.213.163.195 (DE/Germany/-): N in the last X ... show more (mod_security) mod_security (id:949110) triggered by 154.213.163.195 (DE/Germany/-): N in the last X secs show less	Web App Attack
🇩🇪 Ad Ministrator	2025-10-19 19:12:21 (8 months ago)	RdpGuard detected brute-force attempt on RD-WEB	Brute-Force
Anonymous	2025-10-15 23:06:00 (8 months ago)	Unauthorized connection attempt	Brute-Force

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.79

🇺🇸 195.184.76.237

🇳🇱 195.178.110.30

🇺🇸 184.168.31.238

🇷🇺 176.193.109.143

🇻🇳 171.231.182.149

🇺🇸 162.216.149.67

🇨🇳 111.42.183.124

🇨🇳 101.33.33.44

🇹🇷 94.154.43.43

🇩🇪 62.133.60.87

🇳🇱 45.156.87.204

🇬🇧 2a06:4880:c000::e6

🇺🇸 2604:a880:400:d1:0:4:6c7e:6001

🇨🇳 218.0.63.25

🇺🇸 216.25.89.76

🇳🇱 193.110.157.47

🇮🇩 103.189.201.73

🇧🇩 103.183.62.1

🇮🇩 103.67.80.61