JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.213.199.148

154.213.199.148

Neutral Activity

22 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Wave Broadband

Usage Type

Unknown

ASN

AS11404

Domain Name

astound.com

Country

🇺🇸 United States of America

City

New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

154.213.199.148 has been reported 22 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 154.213.199.148:

This IP address has been reported a total of 22 times from 10 distinct sources. 154.213.199.148 was first reported on December 29th 2024, and the most recent report was 11 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-09-29 16:03:13 (11 months ago)	(mod_security) mod_security (id:225170) triggered by 154.213.199.148 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 154.213.199.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 29 12:03:07.250771 2025] [security2:error] [pid 13120:tid 13120] [client 154.213.199.148:53879] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|patrickmedd.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "patrickmedd.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aNqtu5UPb0s4KnVX4IbPsQAAAAw"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-09-13 15:46:39 (11 months ago)	Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2025-09-08 12:23:19 (11 months ago)	2025-09-08T14:23:17.411146 localhost.localdomain sshd[1764660]: Failed password for root from 154.21 ... show more 2025-09-08T14:23:17.411146 localhost.localdomain sshd[1764660]: Failed password for root from 154.213.199.148 port 20719 ssh2 2025-09-08T14:23:18.732994 localhost.localdomain sshd[1764660]: Connection closed by authenticating user root 154.213.199.148 port 20719 [preauth] ... show less	Brute-Force SSH
🇺🇸 oncord	2025-08-25 19:10:16 (1 year ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2025-08-22 20:13:16 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 154.213.199.148 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 154.213.199.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 22 16:13:10.387037 2025] [security2:error] [pid 28556:tid 28556] [client 154.213.199.148:31387] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.iahksa.com\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.iahksa.com"] [uri "/s3cmd.ini"] [unique_id "aKjPVtRwXjgA02B9M6gstAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 oncord	2025-08-18 18:58:00 (1 year ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2025-08-12 09:05:26 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 154.213.199.148 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 154.213.199.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 12 05:05:18.597214 2025] [security2:error] [pid 5110:tid 5110] [client 154.213.199.148:12305] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|gdg1.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gdg1.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aJsDzucHZ4XrEY0g61uZXwAAAAk"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-07-24 03:51:13 (1 year ago)	XMLRPC Hack Attempts	Hacking Brute-Force
Anonymous	2025-07-14 07:39:18 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇮🇹 VHosting	2025-07-03 16:10:07 (1 year ago)	Detected attack by Imunify360	Brute-Force Web App Attack
🇵🇱 sefinek.net	2025-06-28 04:38:49 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-06-19 15:37:58 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇵🇱 sefinek.net	2025-06-15 08:51:12 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇵🇱 sefinek.net	2025-06-12 20:21:32 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-06-07 16:04:00 (1 year ago)	Malicious activity detected	Hacking Exploited Host

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 213.200.145.250

🇳🇮 186.1.23.46

🇸🇬 118.194.234.29

🇮🇪 80.233.12.109

🇿🇦 41.24.169.142

🇨🇳 27.222.87.239

🇺🇸 20.150.197.163

🇮🇷 5.202.241.42

🇰🇷 222.103.194.109

🇷🇺 212.19.8.30

🇻🇳 210.245.30.140

🇧🇷 189.21.40.242

🇳🇱 185.93.89.99

🇮🇳 183.83.196.210

🇩🇪 167.94.146.57

🇵🇹 148.69.64.217

🇯🇵 133.18.142.16

🇷🇺 93.177.126.177

🇫🇷 92.222.108.101

🇵🇹 89.114.200.66