JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.213.165.58

154.213.165.58 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 0%: ?

ISP	Cloud Innovation Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	Unknown
Domain Name	cloudinnovation.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.213.165.58

Whois 154.213.165.58

IP Abuse Reports for 154.213.165.58:

This IP address has been reported a total of 49 times from 13 distinct sources. 154.213.165.58 was first reported on April 8th 2025, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 SSH-Admin	2026-02-07 17:12:28 (4 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇺🇸 xmission.com	2025-12-30 17:57:20 (5 months ago)	Blocked by UFW (TCP on 80) Source port: 59371 TTL: 52 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 59371 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 154.213.165.58) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2025-12-30 13:49:42 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 154.213.165.58 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 154.213.165.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 08:49:36.666348 2025] [security2:error] [pid 13749:tid 13749] [client 154.213.165.58:25599] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "maerynray.com"] [uri "/.svn/wc.db"] [unique_id "aVPYcI1hxDoxoBzVUIpknQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-30 08:34:44 (5 months ago)	"GET /.env HTTP/1.1"	Hacking Web App Attack
🇵🇱 IROK	2025-12-30 03:14:33 (5 months ago)	Firewall Blocked - Unauthorized Port Scanning ...	Port Scan
🇺🇸 TPI-Abuse	2025-12-29 04:21:49 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 154.213.165.58 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 154.213.165.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:21:44.699965 2025] [security2:error] [pid 14207:tid 14207] [client 154.213.165.58:12065] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amtnm.com"] [uri "/.svn/wc.db"] [unique_id "aVIB2BWWf4dKkoqOedYlQAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 04:01:31 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 154.213.165.58 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 154.213.165.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:01:28.843406 2025] [security2:error] [pid 11537:tid 11540] [client 154.213.165.58:52409] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dasperformance.com"] [uri "/.env"] [unique_id "aVH9GA3ECO-hzvoa_YiW6wAAAQE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 03:19:53 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 154.213.165.58 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 154.213.165.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 22:19:47.153671 2025] [security2:error] [pid 5491:tid 5491] [client 154.213.165.58:35885] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brazilianbikinis.com"] [uri "/.env"] [unique_id "aVHzU97yXOA3RlSti9Fx7QAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 SSH-Admin	2025-12-27 22:05:38 (5 months ago)	Probing for Exploits	Exploited Host Web App Attack
Anonymous	2025-12-04 03:21:22 (6 months ago)	2025-12-04T05:21:22.004565+02:00 zanati wp(www.sahpa.co.za)[382849]: Blocked authentication attempt ... show more 2025-12-04T05:21:22.004565+02:00 zanati wp(www.sahpa.co.za)[382849]: Blocked authentication attempt for [email protected] from 154.213.165.58 ... show less	Web App Attack
Anonymous	2025-11-02 17:25:37 (7 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 06:47:55	Port Scan Brute-Force Exploited Host Web App Attack
🇪🇸 10dencehispahard SL	2025-10-16 06:56:54 (7 months ago)	WP probing for vulnerabilities	Hacking Exploited Host
Anonymous	2025-09-25 13:26:44 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.25 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.25 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-23 10:28:18 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.23 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.23 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-22 20:11:59 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.22 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.22 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.176.31.217

🇫🇷 91.196.152.210

🇳🇱 81.19.216.82

🇳🇱 45.156.128.153

🇰🇿 212.154.234.9

🇷🇼 197.243.14.52

🇩🇪 193.142.43.122

🇳🇱 176.65.149.182

🇫🇷 62.169.27.195

🇷🇴 2.57.122.238

🇺🇾 186.48.143.122

🇺🇸 152.32.149.206

🇮🇷 86.57.39.125

🇳🇱 45.156.128.152

🇳🇱 45.142.193.191

🇩🇪 2400:cb00:928:1000:8af4:68dd:a7b6:30c7

🇹🇼 211.23.109.116

🇷🇴 193.46.255.86

🇰🇷 175.126.37.156

🇬🇧 87.236.176.83