JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.94.13.194

154.94.13.194 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 0%: ?

ISP	Cloud Innovation Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS20326
Domain Name	cloudinnovation.org
Country	🇪🇸 Spain
City	Madrid, Madrid

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.94.13.194

Whois 154.94.13.194

IP Abuse Reports for 154.94.13.194:

This IP address has been reported a total of 12 times from 6 distinct sources. 154.94.13.194 was first reported on October 7th 2024, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-09-11 07:00:15 (8 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-09-10 18:19:07 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 154.94.13.194 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 154.94.13.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 10 14:18:59.608669 2025] [security2:error] [pid 10928:tid 10928] [client 154.94.13.194:51125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bolivarbulletintimes.com"] [uri "/config.php%7C/.env%7Csettings.py"] [unique_id "aMHBE3NkJFuclowNyiVWwAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-10 04:00:49 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 154.94.13.194 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 154.94.13.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 10 00:00:44.441505 2025] [security2:error] [pid 6575:tid 6575] [client 154.94.13.194:46033] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.infinite-e.com"] [uri "/config.php%7C/.env%7Csettings.py"] [unique_id "aMD37MBdakJMxcs3BqBpqwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-06 13:53:18 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 154.94.13.194 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 154.94.13.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 09:53:11.946830 2025] [security2:error] [pid 3599:tid 3599] [client 154.94.13.194:19477] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.angeltarrac.com\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.angeltarrac.com"] [uri "/s3cmd.ini"] [unique_id "aLw8x2FujUs1x6EhJKNeaQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-11 00:36:08 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-12-30 00:21:25 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2024.12.30 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2024.12.30 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2024-12-29 22:30:21 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2024.12.29 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2024.12.29 is noted in report timestamp show less	Hacking Brute-Force
🇱🇹 Evag Touf	2024-12-15 17:52:47 (1 year ago)	(mod_security) mod_security triggered on hostname [redacted] 154.94.13.194 (US/United States/-): (C ... show more (mod_security) mod_security triggered on hostname [redacted] 154.94.13.194 (US/United States/-): (CF_ENABLE) show less	SQL Injection
🇩🇪 nyuuzyou	2024-12-08 20:39:01 (1 year ago)	Intensive scraping: /web?s=%22%3Freturn%3Dhttp%22&country=sn-sn&scraper=wiby. User-Agent: Mozilla/5. ... show more Intensive scraping: /web?s=%22%3Freturn%3Dhttp%22&country=sn-sn&scraper=wiby. User-Agent: Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68. show less	Bad Web Bot
Anonymous	2024-11-17 00:52:46 (1 year ago)	Testing cards.	Fraud Orders
🇩🇪 nyuuzyou	2024-11-04 22:37:01 (1 year ago)	Intensive scraping: /web?s=spiderman%20quiz&country=mt-mt&scraper=ddg. User-Agent: Mozilla/5.0 (Wind ... show more Intensive scraping: /web?s=spiderman%20quiz&country=mt-mt&scraper=ddg. User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68. show less	Bad Web Bot
🇫🇮 nyuuzyou	2024-10-07 12:14:47 (1 year ago)	Intensive scraping: /web?s=%22Powered%20by%20TikiWiki%22&country=ks-ks&scraper=mojeek. User-Agent: M ... show more Intensive scraping: /web?s=%22Powered%20by%20TikiWiki%22&country=ks-ks&scraper=mojeek. User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51. show less	Bad Web Bot

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇪 200.41.103.173

🇹🇼 198.235.24.56

🇧🇷 179.125.169.27

🇮🇹 172.213.219.2

🇺🇸 162.217.164.160

🇺🇸 137.184.5.188

🇺🇸 103.203.57.4

🇧🇩 103.151.119.52

🇺🇸 57.141.4.57

🇩🇪 54.37.74.179

🇫🇷 51.68.236.70

🇫🇷 51.68.107.141

🇳🇱 45.148.10.152

🇳🇱 45.128.199.253

🇵🇰 36.255.33.190

🇵🇱 31.179.197.26

🇨🇳 27.24.141.119

🇸🇪 20.240.241.205

🇵🇰 223.123.108.141

🇫🇷 207.180.247.148