JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.47.30.25

154.47.30.25 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 36%: ?

36%

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-154-47-30-25.datapacket.com
Domain Name	datacamp.co.uk
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.47.30.25

Whois 154.47.30.25

IP Abuse Reports for 154.47.30.25:

This IP address has been reported a total of 43 times from 39 distinct sources. 154.47.30.25 was first reported on May 10th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Stuart Reid	2026-06-17 04:19:32 (1 day ago)	...	SSH
🇬🇧 OptimusGO	2026-06-17 04:15:43 (1 day ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-06-17 05:15:43 UTC Log evidence: 06/17/2026-05:15:26.616793 [] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 154.47.30.25:60481 -> 185.127.18.66:8008 06/17/2026-05:15:26.626831 [] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 154.47.30.25:34954 -> 185.127.18.66:8383 show less	Port Scan Brute-Force
🇷🇺 DZBOT	2026-06-17 03:50:53 (1 day ago)	DZBOT: [MTA] NO LOGIN / auth failed	Port Scan Brute-Force
🇩🇪 iNetWorker	2026-06-17 00:10:28 (1 day ago)	trying to access non-authorized port	Port Scan
🇺🇸 Vasili Sviridov	2026-06-01 18:21:45 (2 weeks ago)	: Too many invalid commands (no auth attempts in 1 secs)	Brute-Force
🇪🇸 librebit	2026-04-20 13:19:06 (1 month ago)	Attack to Postfix SASL, bad guys	Brute-Force
🇫🇷 GoodOldTOS	2026-03-30 12:02:57 (2 months ago)	Connection to FTP honeypot	Hacking
Anonymous	2026-01-17 08:15:28 (5 months ago)	PROTO=TCP DPT=10000	Port Scan Hacking
Anonymous	2026-01-17 05:43:27 (5 months ago)	Jan 17 00:43:21 localhost kernel: [96974186.874961] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91 ... show more Jan 17 00:43:21 localhost kernel: [96974186.874961] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=154.47.30.25 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=0 PROTO=TCP SPT=38562 DPT=7002 SEQ=3866938177 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 Jan 17 00:43:21 localhost kernel: [96974186.893134] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=154.47.30.25 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=0 PROTO=TCP SPT=41402 DPT=9091 SEQ=2008073365 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 Jan 17 00:43:25 localhost kernel: [96974190.481604] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=154.47.30.25 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=0 PROTO=TCP SPT=38562 DPT=7002 WINDOW=65535 RES=0x00 SYN URGP=0 Jan 17 00:43:25 localhost kernel: [96974190.481610] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=154.47.30.25 DST=[mungedIP2] LEN=40 TOS= show less	Port Scan
🇩🇪 Axel	2025-11-30 17:42:25 (6 months ago)	[2025-11-30 17:42:24 UTC] Honeypot Flask connection attempt \| AXFRA HONEYPOT	Web App Attack
🇩🇪 F242	2025-11-21 14:36:53 (6 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇬🇧 Steve	2025-11-09 22:02:24 (7 months ago)	Repeated attempts against wordpress site	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2025-10-30 04:32:52 (7 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇬🇧 pinguin	2025-10-26 11:15:51 (7 months ago)	Triggered Cloudflare WAF (firewallManaged) from ZA. Action taken: LOG Protocol: HTTP/1.1 (GET method ... show more Triggered Cloudflare WAF (firewallManaged) from ZA. Action taken: LOG Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇮 TrafficAnalyser	2025-10-23 05:11:05 (7 months ago)	Port scanning	Port Scan

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇪 195.229.76.26

🇭🇰 165.154.6.75

🇲🇰 146.255.74.25

🇨🇳 118.250.39.153

🇺🇸 96.126.106.177

🇷🇴 80.94.92.182

🇳🇱 77.83.39.36

🇫🇷 62.210.142.172

🇳🇱 45.148.10.157

🇬🇧 35.203.211.68

🇨🇳 27.156.3.21

🇲🇽 190.9.108.200

🇺🇸 185.226.196.25

🇺🇸 91.230.168.254

🇩🇪 49.12.77.100

🇺🇸 45.130.83.109

🇨🇳 210.13.99.66

🇺🇸 192.210.229.237

🇧🇷 179.163.133.241

🇧🇷 170.80.48.16