JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.213.164.67

154.213.164.67 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 0%: ?

ISP	Cloud Innovation Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	Unknown
Domain Name	cloudinnovation.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.213.164.67

Whois 154.213.164.67

IP Abuse Reports for 154.213.164.67:

This IP address has been reported a total of 47 times from 10 distinct sources. 154.213.164.67 was first reported on April 8th 2025, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-12-31 14:49:35 (6 months ago)	2025-12-31T16:49:35.332163+02:00 zanati wp(www.sahpa.co.za)[7898]: Blocked authentication attempt fo ... show more 2025-12-31T16:49:35.332163+02:00 zanati wp(www.sahpa.co.za)[7898]: Blocked authentication attempt for [email protected] from 154.213.164.67 ... show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:30:13 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 154.213.164.67 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 154.213.164.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:30:02.270148 2025] [security2:error] [pid 2835:tid 2835] [client 154.213.164.67:20359] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.dragoldio.com"] [uri "/.svn/wc.db"] [unique_id "aSVM6l8WX-Ggcd4UTEeM7gAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:08:58 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 154.213.164.67 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 154.213.164.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:08:55.066881 2025] [security2:error] [pid 13765:tid 13765] [client 154.213.164.67:37205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "enlightened-workplace.com"] [uri "/.env"] [unique_id "aSVH90gsjijCuvyMvhkp8wAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:15:30 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 154.213.164.67 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 154.213.164.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:15:23.205891 2025] [security2:error] [pid 22980:tid 22980] [client 154.213.164.67:21873] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "easyappsbusiness.com"] [uri "/.git/HEAD"] [unique_id "aSU7a-ff50urm-01QwzFCQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 14:10:36 (7 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/14 08:09:16	Port Scan Brute-Force Exploited Host Web App Attack
Anonymous	2025-11-02 15:40:50 (8 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 07:30:12	Port Scan Brute-Force Exploited Host Web App Attack
🇬🇧 ESDM Cyber-Team	2025-10-09 10:34:45 (8 months ago)	Excessive brute force login failures	Brute-Force
Anonymous	2025-10-07 19:06:00 (8 months ago)	Unauthorized connection attempt	Brute-Force
Anonymous	2025-10-02 03:24:07 (9 months ago)	wordpress-trap	Web App Attack
Anonymous	2025-09-25 03:51:52 (9 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.09.25 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.09.25 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-20 14:21:12 (9 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.20 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.20 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-15 09:31:51 (9 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.15 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.15 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-14 13:33:37 (9 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.14 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.14 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-13 18:47:08 (9 months ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.09.13 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.09.13 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-12 23:46:34 (9 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.12 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.12 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇴🇲 212.146.181.143

🇺🇸 207.246.127.160

🇺🇸 103.234.62.109

🇫🇷 90.39.126.35

🇺🇸 65.49.1.176

🇳🇱 45.148.10.152

🇮🇳 45.10.194.243

🇬🇧 5.252.83.133

🇲🇽 189.217.130.86

🇨🇳 115.190.161.6

🇨🇩 102.216.240.61

🇿🇦 102.66.182.193

🇹🇷 88.242.28.181

🇧🇷 177.57.230.50

🇺🇸 162.216.150.176

🇮🇳 128.185.209.30

🇺🇸 107.21.191.144

🇮🇹 101.57.173.213

🇮🇱 77.137.74.154

🇺🇸 66.132.186.181