JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.6.12.6

154.6.12.6 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 0%: ?

ISP	African Network Information Center - (AfriNIC) Ltd
Usage Type	Commercial
ASN	Unknown
Domain Name	afrinic.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.6.12.6

Whois 154.6.12.6

IP Abuse Reports for 154.6.12.6:

This IP address has been reported a total of 23 times from 20 distinct sources. 154.6.12.6 was first reported on October 14th 2022, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2024-02-17 07:02:55 (2 years ago)		Web App Attack
🇺🇸 TPI-Abuse	2024-01-11 10:52:35 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 154.6.12.6 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 154.6.12.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 11 05:52:30.106385 2024] [security2:error] [pid 3372:tid 47760161879808] [client 154.6.12.6:52692] [client 154.6.12.6] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|vinylnotespodcast.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vinylnotespodcast.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZZ_Ibi7OO0JcDG3Slg4dggAAAdE"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 Dolphi	2023-11-19 21:00:03 (2 years ago)	POST //xmlrpc.php	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2023-11-19 20:58:15 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 154.6.12.6 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 154.6.12.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 15:58:07.332032 2023] [security2:error] [pid 30114] [client 154.6.12.6:56218] [client 154.6.12.6] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.kairoslogammakmur.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.kairoslogammakmur.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZVp2307o3KZxc5T67lEKnwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2023-08-31 06:24:59 (2 years ago)	Restricted File Access Requests	Hacking Brute-Force
🇺🇸 TheMadBeaker	2023-08-31 05:52:38 (2 years ago)	Fail2Ban Ban Triggered HTTP Exploit Attempt	Brute-Force Web App Attack
Anonymous	2023-08-30 22:06:00 (2 years ago)	"Illegal file type"	Brute-Force
🇩🇪 nextweb	2023-07-09 01:02:45 (3 years ago)	(mod_security) mod_security (id:210831) triggered by 154.6.12.6 (US/United States/Pennsylvania/Phila ... show more (mod_security) mod_security (id:210831) triggered by 154.6.12.6 (US/United States/Pennsylvania/Philadelphia/-/[AS46562 PERFORMIVE]): 5 in the last 3600 secs (CF_ENABLE) show less	Email Spam Brute-Force
🇬🇧 Mendip_Defender	2023-07-08 03:35:41 (3 years ago)	[08/Jul/2023:04:35:37.086091 +0100] ZKjZiZbXyef21cwEyEXXlwAAAM0 154.6.12.6 42152 188.246.206.60 7081 ... show more [08/Jul/2023:04:35:37.086091 +0100] ZKjZiZbXyef21cwEyEXXlwAAAM0 154.6.12.6 42152 188.246.206.60 7081 [08/Jul/2023:04:35:37.435410 +0100] ZKjZiZbXyef21cwEyEXXmAAAAMA 154.6.12.6 42154 188.246.206.60 7081 [08/Jul/2023:04:35:39.069542 +0100] ZKjZi5bXyef21cwEyEXXmQAAAMQ 154.6.12.6 42166 188.246.206.60 7081 ... show less	Brute-Force
Anonymous	2023-07-08 01:58:44 (3 years ago)	Automated report (2023-07-08T01:58:44+00:00). Scraper detected at this address.	Bad Web Bot
Anonymous	2023-07-07 22:42:30 (3 years ago)		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack
🇩🇪 EIC	2023-07-07 21:43:15 (3 years ago)	(mod_security) mod_security triggered on hostname [redacted] 154.6.12.6 (US/United States/-): (CF_E ... show more (mod_security) mod_security triggered on hostname [redacted] 154.6.12.6 (US/United States/-): (CF_ENABLE) show less	SQL Injection
🇬🇧 Apache	2023-07-07 16:10:49 (3 years ago)	(mod_security) mod_security (id:210831) triggered by 154.6.12.6 (US/United States/-): 5 in the last ... show more (mod_security) mod_security (id:210831) triggered by 154.6.12.6 (US/United States/-): 5 in the last 300 secs show less	Email Spam Brute-Force Web App Attack
🇿🇦 Birdflew	2023-07-07 15:14:02 (3 years ago)	Port scanning	Hacking
🇺🇸 Visualizes	2023-07-07 14:44:53 (3 years ago)	Excessive crawling/scraping	Brute-Force

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 45.148.10.151

🇨🇳 220.180.24.82

🇧🇷 189.42.219.242

🇺🇸 104.28.240.188

🇺🇸 104.28.208.189

🇧🇩 103.77.16.78

🇳🇱 50.7.177.179

🇺🇸 4.246.117.137

🇫🇮 2a01:4f9:4a:15df:677a:848f:4998:9d54

🇺🇸 216.25.89.85

🇹🇼 198.235.24.74

🇺🇸 170.187.165.130

🇧🇩 121.200.220.142

🇮🇳 106.215.137.27

🇦🇴 105.174.44.254

🇳🇬 102.88.137.213

🇫🇷 85.217.140.33

🇷🇴 80.94.92.234

🇺🇸 74.125.17.180

🇺🇸 66.132.195.122