JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.213.203.216

154.213.203.216

Neutral Activity

17 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Cloud Innovation Ltd

Usage Type

Data Center/Web Hosting/Transit

ASN

AS328608

Domain Name

cloudinnovation.org

Country

🇫🇷 France

City

Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

154.213.203.216 has been reported 17 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 154.213.203.216:

This IP address has been reported a total of 17 times from 12 distinct sources. 154.213.203.216 was first reported on October 25th 2024, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 Burayot	2025-09-02 15:23:36 (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 154.213.203.216 (FR/France/-): 1 in ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 154.213.203.216 (FR/France/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2025-08-30 06:34:32 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 154.213.203.216 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 154.213.203.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 30 02:34:28.686512 2025] [security2:error] [pid 13690:tid 13690] [client 154.213.203.216:34721] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|afjm.org\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "afjm.org"] [uri "/s3cmd.ini"] [unique_id "aLKbdPyujkbLKnOT5vx0wwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 stinpriza	2025-08-11 15:58:07 (1 year ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2025-08-01 11:39:47 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 154.213.203.216 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 154.213.203.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 01 07:39:43.782214 2025] [security2:error] [pid 15216:tid 15216] [client 154.213.203.216:13397] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|dance4ovations.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dance4ovations.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aIynf5dnnk1fh6kMl9HfUAAAAAQ"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2025-07-16 17:23:40 (1 year ago)	2.455 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇮🇹 VHosting	2025-07-03 19:25:07 (1 year ago)	Detected attack by Imunify360	Brute-Force Web App Attack
🇮🇹 VHosting	2025-06-15 22:50:07 (1 year ago)	Detected attack by Imunify360	Brute-Force Web App Attack
🇮🇱 Dolphi	2025-06-01 05:00:02 (1 year ago)	POST //xmlrpc.php	Brute-Force Web App Attack
🇩🇪 Hazzard	2025-03-20 00:09:43 (1 year ago)	(wordpress) Failed wordpress login from 154.213.203.216 (FR/France/Charente-Maritime/France/-/[redac ... show more (wordpress) Failed wordpress login from 154.213.203.216 (FR/France/Charente-Maritime/France/-/[redacted]): (CF_ENABLE) show less	Brute-Force
🇩🇪 LRob	2025-03-19 09:00:18 (1 year ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
Anonymous	2025-03-16 06:35:19 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇲🇹 Malta	2025-03-15 01:13:38 (1 year ago)	154.213.203.216 - - [15/Mar/2025:02:13:38 +0100] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows N ... show more 154.213.203.216 - - [15/Mar/2025:02:13:38 +0100] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0" Brute-force password attempt show less	Hacking Brute-Force Web App Attack
Anonymous	2025-03-12 01:47:04 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-12-30 00:21:54 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2024.12.30 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2024.12.30 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2024-12-29 23:24:09 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2024.12.29 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2024.12.29 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 153.0.42.114

🇲🇩 94.176.73.17

🇧🇬 78.128.114.46

🇨🇳 27.21.24.17

🇷🇺 2.63.211.145

🇺🇸 2607:ff10:c8:594::4

🇮🇳 182.95.217.202

🇱🇻 84.15.218.141

🇭🇰 43.155.62.70

🇺🇸 35.87.206.49

🇨🇦 24.207.66.154

🇸🇬 199.235.129.185

🇸🇬 199.235.129.125

🇨🇳 175.9.104.144

🇨🇳 106.13.124.251

🇷🇴 92.118.39.71

🇧🇬 79.124.59.106

🇳🇱 77.239.124.210

🇺🇸 71.6.199.87

🇺🇸 66.240.223.214