JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.82.150.62

154.82.150.62 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 0%: ?

ISP	SOON BODYWERKZ AUTO PTE. LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS401650
Domain Name	larus.net
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.82.150.62

Whois 154.82.150.62

IP Abuse Reports for 154.82.150.62:

This IP address has been reported a total of 23 times from 10 distinct sources. 154.82.150.62 was first reported on April 14th 2025, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 MAGIC	2026-03-02 00:51:02 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇪🇸 gnom4ik	2026-02-21 02:02:54 (8 months ago)	ban-reviewer auto report; ip=154.82.150.62; scenario=http:exploit; verdict=valid_ban; confidence=0.9 ... show more ban-reviewer auto report; ip=154.82.150.62; scenario=http:exploit; verdict=valid_ban; confidence=0.90; categories=14,15,18,22; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for http:exploit scenario; Decision duration of 7800 minutes (5 days) suggests sustained threat; AbuseIPDB categories 14 (Port Scan), 15 (Hacking), 18 (Brute-Force), 22 (SSH) are relevant show less	Port Scan Hacking Brute-Force SSH
🇺🇸 TPI-Abuse	2026-02-06 11:46:41 (8 months ago)	(mod_security) mod_security (id:210350) triggered by 154.82.150.62 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 154.82.150.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 06 06:46:34.319451 2026] [security2:error] [pid 13413:tid 13413] [client 154.82.150.62:47888] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.allotrope.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.allotrope.com"] [uri "/wp-login.php"] [unique_id "aYXUmknoOfFkJV61AKuLSAAAAAk"], referer: https://www.allotrope.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-16 01:03:58 (9 months ago)	(mod_security) mod_security (id:225170) triggered by 154.82.150.62 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 154.82.150.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 15 20:03:54.548119 2026] [security2:error] [pid 14833:tid 14833] [client 154.82.150.62:11754] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|hatefmusic.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hatefmusic.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aWmOevn5d0fu_xD4Jbmm2QAAAAk"], referer: https://hatefmusic.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-14 17:11:12 (9 months ago)	(mod_security) mod_security (id:210350) triggered by 154.82.150.62 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 154.82.150.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 14 12:11:05.852676 2026] [security2:error] [pid 21944:tid 21944] [client 154.82.150.62:52316] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|iconconstructors.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "iconconstructors.com"] [uri "/wp-login.php"] [unique_id "aWfOKYfCY6H6IxwiEYWjkgAAAAc"], referer: http://iconconstructors.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-11 00:51:46 (9 months ago)	(mod_security) mod_security (id:225170) triggered by 154.82.150.62 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 154.82.150.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 10 19:51:42.187345 2026] [security2:error] [pid 3600:tid 3600] [client 154.82.150.62:38638] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|zost.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "zost.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "aWL0HsWR_ZEDFe5ZkOxmcQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Jaime	2026-01-09 21:04:04 (9 months ago)	This day 1 times ... Access forbidden - 403: - ... /wp-login.php	Brute-Force
🇺🇸 TPI-Abuse	2026-01-08 11:39:23 (9 months ago)	(mod_security) mod_security (id:225170) triggered by 154.82.150.62 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 154.82.150.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 08 06:39:17.732858 2026] [security2:error] [pid 2316:tid 2316] [client 154.82.150.62:13132] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|rogerbrooks.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rogerbrooks.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aV-XZZF4M-T11Kf_eGxgFgAAAA0"], referer: https://rogerbrooks.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-31 00:58:03 (9 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-12-18 10:16:56 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 154.82.150.62 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 154.82.150.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 18 05:16:49.843323 2025] [security2:error] [pid 31348:tid 31348] [client 154.82.150.62:23830] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mcbrearty.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mcbrearty.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUPUkShfoQpHp2QlzhgdfwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 F242	2025-12-04 01:45:36 (10 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇺🇸 TPI-Abuse	2025-12-03 16:35:52 (10 months ago)	(mod_security) mod_security (id:210350) triggered by 154.82.150.62 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 154.82.150.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 11:35:44.991585 2025] [security2:error] [pid 13391:tid 13391] [client 154.82.150.62:52843] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.areafinancieratf.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.areafinancieratf.com"] [uri "/wp-login.php"] [unique_id "aTBm4NU0qqaeh1kcd30RywAAAA8"], referer: https://www.areafinancieratf.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:30:36 (10 months ago)	(mod_security) mod_security (id:210350) triggered by 154.82.150.62 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 154.82.150.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:30:31.730034 2025] [security2:error] [pid 5425:tid 5449] [client 154.82.150.62:29997] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|pref-realestate.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pref-realestate.com"] [uri "/wp-login.php"] [unique_id "aSZKJ1oBK930f_mgSwGq0wAAAVY"], referer: https://pref-realestate.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-23 13:48:48 (10 months ago)	(mod_security) mod_security (id:210350) triggered by 154.82.150.62 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 154.82.150.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 08:48:41.754958 2025] [security2:error] [pid 15879:tid 15879] [client 154.82.150.62:56621] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.allotrope.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.allotrope.com"] [uri "/wp-login.php"] [unique_id "aSMQudez3CcIcq7NacdgrAAAAAA"], referer: https://www.allotrope.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2025-11-22 01:48:34 (11 months ago)	Web password guessing	Brute-Force

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:4860:482d:7800::

🇵🇱 194.180.49.71

🇳🇱 185.136.15.16

🇺🇸 162.216.149.198

🇺🇸 136.36.189.65

🇺🇸 71.6.155.70

🇸🇦 50.60.247.86

🇧🇷 35.199.99.65

🇺🇦 31.148.149.238

🇺🇸 2400:cb00:543:1000:264d:316d:6e96:7997

🇺🇿 213.230.93.9

🇨🇴 200.118.62.190

🇳🇦 197.234.86.62

🇵🇱 194.180.48.94

🇫🇮 193.187.110.159

🇸🇬 178.128.97.205

🇷🇺 176.120.22.66

🇺🇸 172.216.11.33

🇻🇳 171.231.146.173

🇺🇸 159.26.103.107