JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.3.222.164

154.3.222.164 was found in our database!

This IP was reported 120 times. Confidence of Abuse is 0%: ?

ISP	Charles River Operation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS64249
Domain Name	chasriver.com
Country	🇺🇸 United States of America
City	Waltham, Massachusetts

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.3.222.164

Whois 154.3.222.164

IP Abuse Reports for 154.3.222.164:

This IP address has been reported a total of 120 times from 58 distinct sources. 154.3.222.164 was first reported on March 27th 2021, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2025-09-11 00:22:31 (9 months ago)	6.388 POST requests with url.path /wp-login.php 4.536 requests with url.path /xmlrpc.php	Brute-Force Bad Web Bot
🇮🇹 VHosting	2025-09-10 23:36:18 (9 months ago)	Detected attack by Imunify360	Brute-Force Web App Attack
🇨🇦 KIsmay	2025-09-10 23:34:38 (9 months ago)	Sep 10 19:34:36 www4 WPAudit[1612402]: 154.3.222.164 www.amandasrestaurant.ca "Mozilla/5.0 (Windows ... show more Sep 10 19:34:36 www4 WPAudit[1612402]: 154.3.222.164 www.amandasrestaurant.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" sbd-admin:67blue FAIL Sep 10 19:34:36 www4 WPAudit[1612402]: 154.3.222.164 www.amandasrestaurant.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" sbd-admin:67red67 FAIL Sep 10 19:34:37 www4 WPAudit[1612402]: 154.3.222.164 www.amandasrestaurant.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" sbd-admin:68blue FAIL Sep 10 19:34:38 www4 WPAudit[1612402]: 154.3.222.164 www.amandasrestaurant.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" sbd-admin:68red67 FAIL Sep 10 19:34:38 www4 WPAudit[1612402]: 154.3.222.164 www.amandasrestaurant.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple ... show less	Brute-Force Web App Attack
🇮🇹 VHosting	2025-05-30 08:30:06 (1 year ago)	Detected attack by Imunify360	Brute-Force Web App Attack
🇩🇪 NetworkOperationsTeam	2025-05-22 15:27:10 (1 year ago)	SMS Bombing. Trying to authenticate. API Abuse rate limit exceeded	Hacking Brute-Force Web App Attack
🇩🇪 nyuuzyou	2024-11-14 14:04:08 (1 year ago)	Intensive scraping: /web?s=adult%20coloring%20books&country=en-en&scraper=marginalia. User-Agent: Mo ... show more Intensive scraping: /web?s=adult%20coloring%20books&country=en-en&scraper=marginalia. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51. show less	Bad Web Bot
🇺🇸 TPI-Abuse	2024-09-29 23:04:29 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 154.3.222.164 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 154.3.222.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 29 19:04:21.778410 2024] [security2:error] [pid 15873:tid 15873] [client 154.3.222.164:16695] [client 154.3.222.164] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.sawted.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.sawted.com"] [uri "/sawted/wp-json/wp/v2/users/"] [unique_id "Zvnc9du1HTLiOhZTUS4F5QAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2024-09-09 00:01:44 (1 year ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2024-09-08 11:03:26 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇧🇪 cmbplf	2024-09-07 03:31:04 (1 year ago)	105 requests to */wp-comments-post.php	Brute-Force Bad Web Bot
🇺🇸 ph	2024-09-07 00:47:30 (1 year ago)	Bad web bot attempting to run wp-json on non-WP site	Hacking Bad Web Bot Web App Attack
🇸🇬 Charles	2024-09-07 00:43:06 (1 year ago)	154.3.222.164 - - [07/Sep/2024:08:43:04 +0800] "GET /wp-json/wp/v2/posts?per_page=1&_fields=id,slug, ... show more 154.3.222.164 - - [07/Sep/2024:08:43:04 +0800] "GET /wp-json/wp/v2/posts?per_page=1&_fields=id,slug,comment_status HTTP/1.1" 404 5647 "-" "-" ... show less	Web Spam Email Spam Brute-Force Bad Web Bot Web App Attack SSH
🇺🇸 TPI-Abuse	2024-08-03 12:29:48 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 154.3.222.164 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 154.3.222.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 03 08:29:44.362256 2024] [security2:error] [pid 3276:tid 3276] [client 154.3.222.164:26123] [client 154.3.222.164] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.transparentforest.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.transparentforest.com"] [uri "/blog/wp-json/wp/v2/users/"] [unique_id "Zq4iuIK0fjdizQj2zm0tFwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2024-07-06 03:00:43 (2 years ago)	Unauthorized login attempts [ wordpress-xmlrpc]	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-07-06 02:13:56 (2 years ago)	(mod_security) mod_security (id:240335) triggered by 154.3.222.164 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 154.3.222.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 05 22:13:52.000600 2024] [security2:error] [pid 14009] [client 154.3.222.164:28877] [client 154.3.222.164] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 154.3.222.164 (+1 hits since last alert)\|nextngnr.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "nextngnr.com"] [uri "/xmlrpc.php"] [unique_id "ZoioXyc-z-AKzrfMC4qi2wAAABA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 120 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 172.94.9.75

🇺🇸 72.17.34.38

🇧🇪 34.156.54.61

🇸🇪 157.22.47.68

🇨🇳 121.36.1.113

🇨🇳 120.52.92.136

🇨🇳 120.52.19.91

🇸🇬 103.250.11.156

🇫🇷 91.196.152.246

🇺🇸 71.174.59.203

🇺🇸 70.120.203.193

🇺🇸 69.49.246.176

🇨🇴 69.6.234.27

🇩🇪 69.5.169.204

🇺🇸 66.132.172.99

🇳🇱 45.148.10.152

🇬🇧 45.82.76.101

🇬🇧 35.203.211.145

🇧🇪 34.76.20.194

🇺🇸 20.102.92.72